Privacy

Who we are

PotPal is a student project from the course Introduction to Entrepreneurship. It is in a test phase with a small group of people. Responsible: Maximilian Schiller. Questions and requests: potpal@maximilian-schiller.com

What we store

• Account: first name, email address, password (stored encrypted, we can’t read it)
• Profile: photo and bio if you add them, reminder time and time zone
• Plants: name, species, location, notes, photo and care tasks
• Activity: care logs, proof and problem photos, XP, streak, badges and who invited you
• Reminders: a technical address of your device so we can send push messages

Who can see it

• Your plants and their activity: you and the people who have added them to their garden
• Someone who scans a QR sticker only sees the plant’s name, photo and the owner’s first name until they add it
• Proof and problem photos are private to the plant’s owner and its sitters
• We don’t sell or share your data, and there is no advertising

Where it is stored

• Supabase (database, login, photos), servers in the EU (Ireland)
• Vercel (hosting of the app), which processes technical data like IP addresses when you open the app
• Proton (Switzerland) sends emails such as password resets
• Push messages are delivered by your phone’s push service (Apple, Google or Mozilla)

Cookies and tracking

We only use the cookies needed to keep you signed in. No analytics, no tracking, no ads.

How long we keep it

As long as you have an account. You can delete it any time in Profile → Delete account: your profile, plants, photos and history are removed right away. Or write to potpal@maximilian-schiller.com.

Your rights

You can ask what we store about you, have it corrected or deleted, and complain to a data protection authority. Just write to potpal@maximilian-schiller.com.