Privacy Policy

1. Who We Are

Petal is operated by Barael LLC, a California limited liability company ("Barael LLC," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Petal plant identification application ("Service").

2. Information We Collect

Account information. When you create an account, we collect your email address and any profile information you choose to provide (display name, handle, avatar).

Plant photos and scan data. When you identify a plant, we receive the image you upload and store the identification result in our database. Images are stored in Supabase Storage.

Usage data. We may collect information about how you use the Service, including pages visited, features used, and scan history.

Device and log data. We automatically receive certain technical information including your IP address, browser type, operating system, and referring URLs.

3. How We Use Your Information

We use the information we collect to: (a) provide, operate, and improve the Service; (b) generate plant identification results; (c) maintain your scan history and public garden profile; (d) respond to your inquiries and provide support; (e) detect and prevent fraud, abuse, and security incidents; and (f) comply with applicable legal obligations.

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

Service providers. We use third-party vendors to help operate the Service, including Supabase (database and storage), Vercel (hosting), and Anthropic (AI plant identification). These vendors are bound by contractual obligations to protect your data.

Public profile data. If you create a public profile, your handle, display name, avatar, and any scans you choose to make public will be visible to other users and accessible via your public profile URL.

Legal requirements. We may disclose your information if required to do so by law or in response to valid legal process.

5. Data Retention

We retain your account information and scan history for as long as your account is active or as needed to provide the Service. You may delete your account at any time by contacting us at eddie@barael.com. Upon deletion, we will remove your personal information within 30 days, except where retention is required by law.

6. Security

We implement industry-standard security measures to protect your information, including encrypted connections (HTTPS) and access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, contact us at eddie@barael.com and we will delete it promptly.

8. Your Rights

Depending on your jurisdiction, you may have rights including: the right to access the personal information we hold about you; the right to correct inaccurate data; the right to delete your data; and the right to object to certain processing. To exercise these rights, contact us at eddie@barael.com.

California residents may have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information as defined by the CCPA.

9. Cookies and Tracking

We use session cookies and local storage to maintain your authentication state and user preferences (such as font scale). We do not use third-party advertising cookies or cross-site tracking technologies.

10. Third-Party Services

The Service uses Anthropic's Claude API to process plant images for identification. Images you upload may be sent to Anthropic's servers for processing. Please review Anthropic's privacy policy for information on how they handle data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date above. Your continued use of the Service after any such change constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: