Privacy Policy

Draft 0.3-draft · Last updated: 3 November 2026
Draft, pending legal reviewNo lawyer has reviewed this text yet, and it may change before the app launches. Passages marked “for review” need confirming; those marked TODO(legal) are missing details.

Your plants and your data are yours. This policy explains what Nbta collects, why, who sees it and how you control it. Your plant photos go to the AI company only after you explicitly agree.

1What we collect

  • Your email and how you sign in (Apple, or a code sent to your email), and your name if we receive it from Apple or you add it. We also keep your language, your answers when you start using the app, your reminder time and your notification settings.
  • Your plant data: your plants, where they live, their light, whether they’re near AC, pot type, tasks, notes and scan results.
  • The plant photos you take or choose.
  • Your city and coarse location only, not your exact location.
  • Device details needed to run and protect the service: a device id created by the app, the platform and app version, and sign-in records (time and IP address).
  • Technical records on the server, such as errors, response times and counts. They don’t include photos, or what goes to or comes back from the AI.
  • Your subscription status from the App Store and how many scans you’ve used. We never see your card or store payment details.
  • Your consent to sending photos to AI, with its version and date, and the date you withdrew it if you did.
  • Your messages to us, and your reports of wrong information or a plant missing from the library.
  • We don’t collect your phone’s contacts, the app has no advertising or analytics tools, and we don’t track you across apps and websites. This website has no analytics and no cookies.

2How we use it

  • We don’t sell your data or show ads.
  • To run the app: saving your plants, photos and history, plus schedules and reminders.
  • To scan your plant photos with AI after you agree, and for follow-up scans.
  • To show heat warnings and adjust schedules based on the weather forecast for your city.
  • To send your sign-in code to your email, and to protect accounts from abuse.
  • To run plan limits and your subscription, answer your messages and fix faults.

3Who sees your data

  • Other users can’t see your plants and photos in the app.
  • We use the service providers in the next section, only as far as needed to run the service.
  • We may disclose data if a competent authority requires it under applicable law.

4External services

  • Cloudflare: hosting for the server, database, photos, backups and this website, and it may send your sign-in code by email.
  • Resend: a fallback for sending your sign-in code, if used; receives your email and the code.
  • Anthropic (United States): analyses plant photos, only after you agree (see section 5).
  • Apple: Sign in with Apple, and the App Store for payment and managing subscriptions.
  • RevenueCat: subscriptions. It receives an internal account id and your purchase history.
  • Open-Meteo: weather forecasts. Our server asks with a city’s coordinates only, with no data about you.

5Photos and AI

  • Only with your consent: before your first scan, a screen explains what’s sent, and nothing is sent until you agree. If you choose “Not now”, scans won’t work and the rest of the app keeps working.
  • What we send to Anthropic, a US AI company that analyses the photo for us: the plant’s photo, what we know about where it lives (city, season, light, indoor or outdoor, near AC), the plant’s species if it’s one of your plants, and your language. For a follow-up scan, also the photo from that plant’s earlier scan.
  • What we don’t send: your name or email.
  • Training: Anthropic doesn’t use these photos to train its AI. for review
  • How long Anthropic keeps it: Anthropic normally deletes this data within 30 days, and may keep it longer where needed to enforce its usage policy or by law. for review
  • Transfer outside your country: this data goes to a company in the United States, outside Saudi Arabia and the Gulf. for review
  • Withdrawing: in Settings, at any time. After that no new photos are sent, and scans won’t work until you agree again. Withdrawing doesn’t undo processing that already happened, and it doesn’t delete your saved photos (see section 8). for review

6Storage and security

  • Your data is encrypted in transit.
  • The database (Cloudflare D1) and photos (Cloudflare R2) are held by Cloudflare, and may be stored outside Saudi Arabia. TODO(legal) (storage region and transfer wording)
  • Photos are private, kept separately per user, and open only through temporary links.
  • We never store your sign-in code itself, only a hash; it expires after 10 minutes, and sign-in attempts are limited.
  • We back up the database every night; each backup is deleted automatically after 30 days.
  • The app keeps its sign-in keys in your phone’s secure storage.

7Permissions

  • Camera and photos: to photograph your plants or choose their photos, only when you choose to.
  • Location: to find your city; you can decline and pick it by hand. We keep your city and a coarse location only.
  • Notifications: for care reminders, weather alerts and the end of a trial; you can turn them off in your phone’s settings.
  • The app doesn’t ask for your microphone or contacts.

8How long we keep it

  • We keep your data and photos while your account exists, for your history and follow-up scans.
  • If your plan ends, nothing is deleted.
  • If you delete a plant, its photos are deleted. Its scans and their photos stay in your history until you delete your account.
  • When you delete your account we immediately delete your data and photos from our database and storage, including your sign-in records.
  • What deletion doesn’t reach right away: nightly backups, which hold a deleted account for up to 30 days. Cloudflare’s server logs, which can hold your account id and a partly hidden version of your email until their retention period ends, and an IP address for logins to the App Review test account. If a subscription moved from your account to another one, your account id may stay in that account’s purchase record until it is deleted. RevenueCat and Apple keep their own records, which deletion doesn’t reach, and what was sent to Anthropic follows section 5. for review
  • What we keep, with nothing linking it to you: one record that an account was deleted, with only the time, and billing events with only their event id, type, result and date.

9Account deletion

  • In Settings → Delete account, then confirm. Deletion is immediate and permanent. It removes your account, your plants and their sites, your photos and scan results, your history, notes and reminders, and your sessions on every device.
  • Deleting your account doesn’t cancel your subscription; cancel it in your App Store account settings.

10Your rights

  • See and correct your data in the app.
  • Delete your account for good in Settings.
  • Withdraw your consent to sending photos to AI in Settings, and turn off notifications in your phone’s settings.
  • To ask for a copy of your data, or for anything else, email support@alialnujaidi.com.

11Age

  • Nbta is for people aged 18 and over. We don’t knowingly collect data from children under 13; if you learn of any, email us and we’ll delete it. for review

12Changes to this policy

  • If we change anything important, we’ll tell you in the app before it takes effect, and publish the new version here with its version number and date. If the AI consent text changes, we’ll ask for your consent again.

Contact us

For any question about this page, email us at: support@alialnujaidi.comWho is responsible for your data: TODO(legal) (name, address and official contact details)
The Arabic version is authoritative; the English version is a translation.