Product transparency draft · updated 17 October 2026
Privacy notice
This page describes the data behavior implemented in the current BalconyBuddy prototype. Operator identity, contact details, jurisdiction and final retention periods must be completed and legally reviewed before public launch.
- The guest garden stays in this browser.
- An account is optional.
- Precise location is never requested.
- Advertising and analytics are off.
Guest garden data
Plants, nicknames, approximate container details, soil observations, care notes and an optional city preference are stored in your browser using local storage. They remain until you clear them, browser storage is removed, or the browser removes them. You can download the garden as JSON or clear it from My garden.
Account data
If you create an account, the server stores your name, email address, password hash and any garden data you explicitly save to the account. A manually entered city, two-letter country code and browser timezone are optional. The account page lets you download this data and permanently delete the account copy. Deleting an account does not silently delete the separate garden stored in your browser.
Weather and service providers
Weather is disabled by default. If enabled and requested by a signed-in user, the server sends the saved city and country code to WeatherAPI.com. The API key remains on the server. Forecast records are deleted after the provider’s permitted cache window. Hosting, email delivery and security infrastructure may process technical request details such as IP address and browser information; the final providers and log retention must be disclosed before launch.
Advertising, analytics and sharing
No advertising or analytics scripts are enabled in the current product. Private gardens and notes are not published or sold. Any later advertising or nonessential analytics activation requires an updated notice and an appropriate consent mechanism before scripts load.
Your controls
Guest controls are available in My garden. Signed-in controls are available under Account and Location settings. A public support contact and process for applicable privacy requests must be added before launch.