Effective date: 24 April 2026

Applies to: The Vatisha mobile application, vatisha.com, and related services (together, the “Services”).

1) Overview

This Privacy Policy explains what information Vatisha collects, how we use it, when we share it, and the choices available to you.

By using the Services, you agree to the collection and use of information as described in this Privacy Policy.

2) Who we are

“Vatisha”, “we”, “us” or “our” refers to the operator of the Services.

Support: support@vatisha.com
Privacy requests: legal@vatisha.com
Support page: /support
Account deletion help: /account-deletion
Data access and export help: /data-access

3) Information we collect

We collect information in the following categories.

A) Information you provide directly

Account details such as your name, email address, password, and sign-in provider details when you create or access an account.
Profile information you choose to provide.
Plant and garden information such as plant names, species, notes, schedules, care history, reminders, city, and environment details.
Photos, videos, and other media that you upload or capture through the app.
Content you submit in community features such as Care Club posts, comments, captions, reports, and blocks.
Messages and images you send to Myco for plant-care assistance.
Messages you send through support, contact, or waitlist forms on the website.

B) Information collected automatically

Basic technical information such as app version, build number, device type, operating system, language, approximate timestamps, and server logs.
App activity and feature usage data used to understand product performance, improve flows, and troubleshoot issues.
Website usage information collected through analytics tools on vatisha.com.
Push notification tokens, device-install identifiers, and related delivery metadata when notifications are enabled.
Crash, diagnostic, and performance telemetry used to investigate failures in the app.

If you provide a city, we use it to tailor weather-aware plant care guidance.
On supported devices and flows, if you grant location permission, we may use your device location to help determine your city for local weather and care recommendations.

4) Device permissions we request

Depending on your device and how you use the app, Vatisha may request access to:

Camera: to let you take plant photos for identification, health analysis, progress updates, profile images, and community posts.
Photos and media library: to let you upload existing photos or videos from your device.
Notifications: to send reminders, care alerts, and app updates you choose to receive.
Location (where supported and permissioned): to provide local weather-aware care guidance and city suggestions.

You can decline these permissions, but some features may not work properly.

5) How we use your information

We use your information to:

create and manage your account;
provide plant identification, plant-health analysis, reminders, logs, and care guidance;
store and display your plant timeline, journal entries, and media;
support community and sharing features;
provide local weather-aware guidance when city or location data is available;
send transactional messages, reminders, and notifications;
respond to support and contact requests;
monitor, debug, secure, and improve the Services;
comply with legal obligations and enforce our terms.

6) Processors and service providers

We use processors and infrastructure providers to operate the Services. They may process personal data on our behalf only for the purposes described in this Policy.

Current providers include:

MongoDB Atlas for primary application data storage;
AWS S3 for media and file storage;
Amazon Bedrock and OpenAI for AI-assisted plant identification, plant-health analysis, and Myco responses;
Sentry for crash and diagnostic reporting;
PostHog for product analytics;
Firebase for supported messaging and mobile infrastructure flows;
additional platform providers such as Apple Push Notification service and app hosting/CDN providers where needed to deliver the Services.

We may update this list as our infrastructure changes. If we make a material change, we will update this Policy.

If you upload plant photos, videos, notes, or related inputs, we may process that content to:

identify plants;
assess plant health issues;
generate care suggestions, reminders, and progress summaries;
improve the quality, reliability, and safety of the Services.

Please do not upload media containing personal sensitive information or anything unrelated to plant care.

8) Analytics, diagnostics, and tracking

We use analytics and diagnostic tools to understand product performance, measure feature usage, and investigate failures.

We do not sell your personal information.
We do not use your data for cross-app or cross-site advertising tracking.
For the current iOS RC, we do not ship an App Tracking Transparency prompt and do not request IDFA-based tracking permission.

We may share information with:

service providers that help us operate the Services, such as hosting, storage, email, analytics, customer support, authentication, push notification, media processing, and weather providers;
vendors and tools used to process plant images, media, and AI-assisted product features;
other users, if you choose to post content in community or sharing features;
authorities, regulators, or other parties where required by law, legal process, or to protect rights, safety, and the Services;
a buyer, investor, or successor in connection with a merger, acquisition, financing, or sale of assets.

We require service providers to handle data on our behalf and subject to appropriate safeguards.

10) Website forms and communications

If you use the Vatisha website:

waitlist submissions may include your email address;
contact form submissions may include your name, email address, subject, and message;
we may use providers such as SendGrid to receive and send communications related to those submissions;
we may use website analytics tools to understand traffic and site usage.

11) Data retention

We keep information for as long as reasonably necessary to provide the Services, maintain records, resolve disputes, enforce agreements, and comply with legal obligations.

Examples:

account and plant data are generally retained while your account remains active;
uploaded media and journal history remain associated with your account until deleted by you, deleted under our policies, or purged after account deletion;
when you request account deletion in-app, your account enters a 30-day cooling period before permanent purge;
after the purge window, account data, plant data, Myco history, push registrations, and user-scoped uploads are deleted or anonymized according to our deletion flow;
Care Club posts and comments may remain in the community in anonymized form so threads stay readable, but associated identity and media pointers are removed;
security records such as token-blacklist entries may remain until their natural expiry;
support and contact records, operational logs, and provider-side infrastructure logs may persist for a limited period for security, fraud prevention, or legal compliance.

12) Account deletion and your rights

You can request account deletion from within the app or contact us at support@vatisha.com if you need help.

When you request deletion:

your account enters a 30-day cooling period before permanent deletion is completed;
logging back in during that period cancels the pending deletion request;
after hard purge, the deleted account cannot be recovered;
some information may be retained for security, fraud-prevention, legal, backup, or technical reasons for a limited period;
content you shared in community areas may remain in anonymized form where preservation of thread context is necessary.

Depending on your location, you may also have rights to access, correct, export, or request deletion of your personal information. You can contact us at support@vatisha.com or legal@vatisha.com to make such a request. For workflow details, see /data-access and /account-deletion.

13) Security

We use reasonable administrative, technical, and organizational measures to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14) Children’s privacy

Vatisha is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will review and remove it where appropriate.

15) International processing

Your information may be processed and stored in countries other than your own, depending on where our infrastructure and service providers operate. By using the Services, you understand that your information may be transferred to and processed in those locations.

16) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the Services or the website. The updated version becomes effective on the date shown above.

17) Contact us

If you have questions, privacy requests, or concerns, contact:

Support: support@vatisha.com
Privacy requests: legal@vatisha.com
Support page: /support

Privacy Policy

Vatisha Privacy Policy