Privacy Policy

Effective Date: 2026-09-15

Kidologic Kft. (“we”, “us”, “Service Provider”) develops and operates various mobile applications (hereinafter referred to as “Applications”), including but not limited to BioGarden365, Plotabit, PlantDays and Plant Doctor.

This Privacy Policy describes how we collect, use, and share your personal data when you use our Applications and related services.

Anti-Spam Protection: Our contact details below are displayed in a protected format to prevent automated harvesting. Please type them manually.

1. Data Controller

The entity responsible for your personal data is:

Kidologic Kft.
Address: 4034 Debrecen, Munkás utca 56, Hungary
Email: moc.563nedragoib@troppus
Phone: 8473 664 03 63+

2. What Data We Collect

We collect different types of information to provide and improve our Services.

2.1 Information you provide to us

Account Information: When you register, we collect your email address and optionally your name/nickname. You can also use the Application as a guest without registering; in that case you receive a random identifier with no name or email address.
User Content: Data you create or upload within the Applications, such as garden plans, layouts, planting journals, notes, photos of plants or pests, and task lists.
AI Questions: The questions you ask the AI gardening assistant, the photo attached to them, and the answer you receive.
Manually Entered Location: If you enter a town or city yourself for the weather feature.
Communications: If you contact us for support, we collect the details of your inquiry. The same applies to feedback and survey responses you send within the Application; if we reply, the reply arrives in the Application’s inbox.

2.2 Automatically collected information

Device Data: Device model, operating system version, unique device identifiers, language settings. The Application version and the device token required for push notifications.
Location Data: If you allow it, we use your device’s medium-accuracy (not meter-precise) location: for local weather and weather alerts, to determine your climate zone, and to record the location of identifications, journal entries and AI questions. If you do not grant permission, we look up an approximate location based on your IP address (ipwho.is), or use the town or city you entered manually. We do not track your location in the background.
Usage Data: Information about how you use the Applications (screens visited, features used, session duration, crash logs).
Subscription Data: Purchase history, subscription status, and renewal dates (processed via app stores).

3. How We Use Your Data

Service Provision: To operate the Applications, sync your garden plans and journals across your devices, and manage your account.
AI Identification and Advice: In the identification features of BioGarden365, uploaded photos are analyzed by PlantNet (plants and plant diseases) and Kindwise insect.id (insects); the gardening advice chat, the garden planner’s auto-fill, and the disease or insect explanations are produced using the Google Gemini service. We send this data only for the purpose of providing the result.
Weather and Alerts: For the local forecast and for frost, storm and other alerts, we transmit your location data to OpenWeatherMap.
Notifications: We send push notifications, for example about the lunar calendar, weather alerts, the end of your trial period, and when we have replied to your feedback. You can turn off notifications at any time in your device settings.
Community Heat Map and Statistics: See Section 6.
Subscription Management: To handle your Premium/Pro memberships and grant access to paid features.
Improvement & Analytics: To understand user behavior, fix bugs, and improve the functionality of our Applications.
Communication: To send you important updates regarding the Service (e.g., changes to this policy).

3/A. Legal Basis for Processing

Performance of a contract (Art. 6(1)(b) GDPR): your account, synchronization, the identification and AI features you start, the weather feature and your subscription.
Consent (Art. 6(1)(a) GDPR): personalized ads, location permission and push notifications; on iOS, AI data sharing as well. You can withdraw your consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal.
Legitimate interest (Art. 6(1)(f) GDPR): crash logs and debugging, protecting the service against abuse, and community statistics.

4. Third Party Service Providers

The BioGarden365 app works with trusted third-party service providers to deliver our services. Below, we detail these providers, the data shared with them, their purpose, and guarantees regarding personal data processing. All data sharing complies with GDPR (EU 2016/679), EEA Data Protection Law, and Apple App Store guidelines (5.1.1(i) and 5.1.2(i)).

Note on AI Services: Certain app features (plant identification, insect identification, plant disease diagnosis, AI chat assistant, garden planner) use third-party artificial intelligence (AI) services. You always start these features yourself. On iOS, we ask for your consent before first use in a separate in-app dialog (“AI Data Processing”). Only user-uploaded data is sent to AI services, strictly for the requested function. We do not collect, store, or share additional personal data beyond this.

Google Firebase: Authentication (Firebase Authentication), database storage (Firestore), cloud storage (Cloud Storage), analytics (Firebase Analytics), and crash reporting (Crashlytics). In addition, push notifications (Cloud Messaging), remote configuration (Remote Config) and abuse protection (App Check). Data Shared: User account data (email, user ID), app usage statistics (anonymized), crash logs. Purpose: App functionality, debugging, analytics. Data Protection: GDPR compliant, EU servers available, data deletion on request.
RevenueCat: In-app subscriptions and purchases management. Data Shared: Transaction data (random user ID, subscription status), and, for measuring ad conversions, the device and advertising identifiers, the IP address and the Analytics app instance ID (on iOS, the advertising identifier only with your tracking permission). Purpose: Payment and subscription system operation. Data Protection: PCI DSS compliant, GDPR compliant.
Google AdMob: Ad serving (free versions). Data Shared: Anonymized ad identifiers, app usage statistics. Purpose: Ad serving; personalized ads only with your consent (in Google’s consent management dialog, and on iOS with Apple’s tracking permission). Data Protection: GDPR/CCPA compliant, user privacy settings available.
PlantNet API (www.plantnet.org): Plant identification and plant disease diagnosis. Data Shared: User-uploaded plant photos (image files) and the selected language. We do not send location data. Purpose: Plant species identification and disease diagnosis using AI models. Data Protection: Used only for requested analysis, not permanently stored via our service; GDPR compliant; consent required before sending. More info: PlantNet Privacy Policy.
Kindwise API (kindwise.com): Insect and pest identification. Data Shared: User-uploaded insect photos (image files) and the selected language. We do not send location data. Purpose: Insect species identification using AI image recognition. Data Protection: Used only for analysis, not stored long-term; GDPR compliant; explicit user consent required. More info: Kindwise Privacy Policy.
Google Gemini API: AI chat assistant. Garden planner auto-fill, disease and insect explanations. Data Shared: User-entered text questions/prompts, attached images if any. The last few messages of the conversation and your country; for the garden planner, the data of the bed and the wishes you entered. Purpose: Gardening advice, question answering via generative AI. Data Protection: In the paid Gemini API, Google does not use prompts and responses to improve its products (for model training). More info: Gemini API Terms.
OpenWeatherMap (openweathermap.org): Weather forecast, weather alerts and place name search. Data Shared: Coordinates or the town or city name you entered. Purpose: Local weather and alerts.
ipwho.is: Approximate location based on your IP address if you have not allowed location access. Data Shared: The device’s IP address (during the lookup). Purpose: Weather and location-based content without location permission.
OpenStreetMap and GBIF: Map tiles for the community map, and public species data. Data Shared: We do not send personal data; technically, the download takes place using the device’s IP address.

Important Notes on AI Data Sharing:

On iOS, AI features require separate, explicit consent (“I Understand and Accept”) explaining what data goes to which providers. On Android and on the web, you start the feature yourself; the legal basis is the provision of the service.
Consent is stored locally on device, shown only on first use.
Data sent only for requested service completion, not sold or used for marketing.
Without consent, AI features unavailable but rest of app fully functional.

If you have questions about data processing, contact us: support@biogarden365.com.

4/A. Data Transfers Outside the European Union

Some of our service providers (for example, Google and RevenueCat) may also process data partly outside the European Union, primarily in the United States. In such cases, the transfer takes place with appropriate safeguards: on the basis of an adequacy decision of the European Commission (for example, the EU–US Data Privacy Framework) or of standard contractual clauses adopted by the European Commission.

5. Data Retention

We retain your personal data as long as your account is active or as needed to provide you the Services. You can request the deletion of your account and associated data at any time within the Application settings or by contacting us.

When you delete your account, we delete your account, your profile, your notes, your seed stock, your favorites, your garden plans, your tasks, your AI questions, your feedback and your inbox, as well as all photos you have uploaded. Your identifications, journal entries and pest records are retained in anonymized form as part of the community statistics: only the species or activity, the country, a location accurate to approx. 11 km, and the year and month. These cannot be used to determine who they came from, so they no longer qualify as personal data.

If you made purchases in the Application, RevenueCat keeps your purchase and subscription history after your account is deleted, without your name or email address, linked to the random user ID and the technical identifiers listed in Section 4, because it is required for subscription accounting. If you would also like this deleted, please contact us.

6. Community Heat Map and Statistics

The Application shows on a community map where gardening activities, identifications or pests have occurred. The map never shows a name, identifier, photo or exact location: only aggregated counts in grid cells of approx. 11 km, and a cell is only shown if at least 3 entries belong to it; data from sparser areas is merged into larger cells.

7. Cookie Usage

We use cookies and SDKs in our Applications and websites for functionality, analytics, and advertising purposes.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right to Access: You can request a copy of your personal data.
Right to Rectification: You can request correction of inaccurate data.
Right to Erasure (“Right to be forgotten”): You can request the deletion of your personal data.
Right to Restriction: You can ask us to restrict the processing of your data.
Right to Object: You can object to the processing of your data.
Right to Data Portability: You can request that we provide the data you have given us in a machine-readable format.
Right to Withdraw Consent: You can withdraw the consent you have given for consent-based processing at any time.

To exercise these rights, please contact us at the email address provided above.

Right to Lodge a Complaint: If you believe that we have violated your data protection rights, you can lodge a complaint with the Nemzeti Adatvédelmi és Információszabadság Hatóság (Hungarian National Authority for Data Protection and Freedom of Information, NAIH; 1055 Budapest, Falk Miksa utca 9–11., naih.hu) or with the supervisory authority of your place of residence.

9. Children

Our Applications are not intended for users under the age of 16, and we do not knowingly collect personal data from them. If we become aware that we are processing personal data of a person under 16, we will delete it.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date”.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:
Email: moc.563nedragoib@troppus