Privacy Policy
This Privacy Policy describes how personal information is handled in wakaba (the 'Service').
1. Information Collected
We collect the following information. - Email, name, and profile photo provided by your Google account - Handle, display name, and bio you register - Plant data you register (name, species, photos, care logs, etc.) - AI chat inputs (text, images) - Billing history (via Stripe) - Notification preferences, language settings, and ToS consent records (version, time, language) - Usage logs (access timestamps, IP addresses, etc.)
2. Purpose of Use
Collected information is used for the following purposes. - Providing, maintaining, and improving the Service - User authentication and account management - Responding to user inquiries - Generating AI responses (including referencing related plant data) - Detecting and responding to abuse and violations - Compliance with legal obligations - Statistical data (after de-identification)
3. Third-Party Provision and International Transfer
To provide the Service, data is transmitted to and stored with the following providers. All are based in the United States; user personal information is therefore transferred internationally. - Google LLC (USA): Authentication - Vercel, Inc. (USA): Hosting - Supabase, Inc. (USA): Database, file storage, authentication sessions - Anthropic, PBC (USA): AI response generation - Stripe, Inc. (USA): Payment processing (only when using paid plans) - Resend, Inc. (USA): Email notifications to the operator upon report submission Please refer to each provider's privacy policy on their respective websites. We do not provide information to third parties other than the above except as required by law or with the user's consent.
4. Retention Period
User data is retained while the account is active and for periods required by law. Account deletion can be performed from the settings screen, and data is removed from the Service immediately upon the operation. Complete removal from backups may take an additional 30 days. Reports and violation response records may be retained for a reasonable period after resolution.
5. User Rights
Users have the following rights regarding their personal information. - Access and correction: via the profile settings screen. - Export: via the 'Data Export' option in settings (JSON format). For full disclosure including photos, please contact the operator by email at the address below. - Deletion: can be performed by yourself at any time from the 'Delete account' option in settings. Data is removed immediately upon the operation. - Suspension: deleting your account stops the use of your personal information by the Service.
6. Cookies and Similar Technologies
The Service uses the following cookies. - Authentication session (Supabase): maintaining login state - Language setting (NEXT_LOCALE): preserving display language We do not use third-party cookies for analytics or advertising purposes.
7. Contact
For inquiries about this policy or requests to access, correct, or delete personal information, please contact: Email: act.g.0210.shin@gmail.com
Last updated: 2026-05-01