Privacy Policy
This Privacy Policy describes how gartli ("we", "us") collects, uses, and protects personal data when you use the gartli web application and related services (the "Service"). We respect your privacy and aim to collect only what we need to operate the Service.
1. Data we collect
- Account information. When you sign in with Google, we receive your name, email address, profile picture, and Google account identifier.
- Service data. Content you create in gartli, such as gardens, plant groups, elements, layouts, notes, and related metadata.
- Technical data. Standard server logs (IP address, user agent, request timestamps) used for security, debugging, and abuse prevention.
2. How we use your data
- To create and authenticate your account.
- To provide, maintain, and improve the Service.
- To communicate with you about the Service (e.g. service notices, support replies).
- To detect and prevent abuse, fraud, and security incidents.
- To comply with legal obligations.
3. Legal basis (GDPR / FADP)
We process personal data on the basis of (a) the contract to provide you the Service, (b) our legitimate interests in operating and securing the Service, and (c) your consent where required.
4. Sharing and processors
We do not sell personal data. We share data only with service providers strictly required to operate the Service:
- Supabase — authentication and database hosting.
- Google — OAuth sign-in.
- Hosting and infrastructure providers used to deliver the application.
These providers may process data outside Switzerland and the EU/EEA. Where this is the case, we rely on appropriate safeguards (e.g. standard contractual clauses).
5. Retention
We retain personal data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal or security reasons.
6. Your rights
Subject to applicable law, you have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. To exercise these rights, contact us at info@gartli.com.
7. Security
We use reasonable technical and organisational measures to protect personal data. No system is perfectly secure; please use a strong, unique password on your Google account and report suspected incidents to info@gartli.com.
8. Cookies and similar technologies
We use cookies and similar storage to keep you signed in and to operate the Service. We do not use advertising or third-party tracking cookies.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from them.
10. Changes
We may update this Privacy Policy from time to time. Material changes will be announced in the application or by email.
11. Contact
Questions about this Privacy Policy: info@gartli.com.