Privacy Policy

Last updated: October 3, 2026

This Privacy Policy explains how Shazim Chaudhary, doing business as Plantrees ("Plantrees," "we," "us," or "our"), collects, uses, shares, and protects personal information when you use the Plantrees website at plantrees.app, the Plantrees mobile apps, and related services (together, the "Service"). We are the controller of your personal information for the purposes of applicable data protection laws.

In short:

We collect what we need to run Plantrees: your account details, the content you create, and your subscription status.
We do not sell your personal information, show ads, or use third-party advertising or analytics trackers.
We do not use your content to train AI models.
You can delete your account and data at any time from within the app.

1. Information We Collect

Information you provide

Account information: your name, email address, username, password, and profile photo if you add one. Your password is handled by our authentication provider and is never stored in our own database. If you choose a profile photo, the app accesses only the photo you select.
Sign in with Google or Apple: if you use these options, we receive your name and email address from the provider. With Sign in with Apple, you can choose to hide your email address, in which case we receive an Apple relay address instead.
Your content: the goals, plans, trees, todos, calendar entries, schedules, reminders, targets, notes, and settings you create.
AI prompts: the text you submit to AI features and the responses generated for you.
Collaboration information: the email addresses of people you invite to collaborate and the content you share with them.
Communications: messages, feedback, and support requests you send us.

Information about purchases

When you subscribe, we receive subscription details such as your plan, price, trial and renewal dates, status, and transaction identifiers from Apple (through our subscription management provider, RevenueCat) or from Stripe. Your payment details are entered directly with Apple or Stripe. We never see or store your full card number.

Information collected automatically

Technical and log data: IP address, device and browser type, operating system, app version, and timestamps. Our hosting and authentication providers collect this when you use the Service so that it can operate securely.
Cookies and on-device storage: we use only cookies and similar storage that are necessary for the Service to work, such as keeping you signed in, protecting against fraud, and remembering your preferences. In the mobile apps, your sign-in session is kept in your device's secure storage, and some of your data is cached on your device so the app works offline. We do not use advertising cookies, cross-site tracking, or device advertising identifiers.

2. How We Use Your Information

We use personal information only for the following purposes. If you are in the European Economic Area, the United Kingdom, or Switzerland, the legal basis for each purpose is shown in parentheses.

To provide and operate the Service, including syncing your content across your devices and enabling collaboration (performance of our contract with you).
To process subscriptions, free trials, and payments, and to confirm your access (performance of our contract with you).
To generate AI responses when you use AI features (performance of our contract with you).
To send service-related messages about your account, security, billing, and changes to our terms (performance of our contract with you and our legitimate interests).
To send product updates and marketing emails, which you can unsubscribe from at any time (your consent, or our legitimate interests where the law permits).
To respond to your support requests and feedback (our legitimate interests).
To secure the Service, prevent fraud and abuse, fix problems, and maintain and improve our features (our legitimate interests).
To comply with legal obligations and enforce our terms (legal obligation and our legitimate interests).

We do not use your content to train AI models, and we do not use automated decision-making that produces legal or similarly significant effects on you.

We do not sell or rent your personal information, and we do not share it for targeted or cross-context behavioral advertising. We share it only as follows.

Service providers. These companies process personal information on our behalf, only as needed to provide their services to us:

Clerk: sign-in and account management.
Supabase: database hosting.
Vercel and Railway: application hosting.
Stripe: payment processing for website purchases.
RevenueCat: management of in-app subscription status.
Resend: email delivery.
OpenAI, Anthropic, and Mistral AI: processing the prompts and related plan content you submit to AI features in order to generate responses.

Platform providers. Apple processes App Store purchases, and Google and Apple process sign-in if you choose to use them. They do so under their own privacy policies.

Collaborators. Content you share on a plan is visible to the people you invite.

Legal and safety reasons. We may disclose information if required by law or legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of our users, the public, or us.

Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction and will remain subject to this Privacy Policy.

With your consent. We may share information for other purposes if you ask us to or agree to it.

4. How Long We Keep Information

We keep your account information and content for as long as your account is active.
When you delete your account, we delete your account information and content from our active systems. Residual copies may remain in encrypted backups for a limited period until they are overwritten.
If you were assigned work in a plan owned by someone else, that plan stays with its owner, but it is no longer linked to your account.
We, and providers such as Apple, RevenueCat, and Stripe, may keep certain records longer where needed for legal, tax, accounting, fraud prevention, or dispute resolution purposes. For example, subscription and transaction records may be retained after your account is deleted.

5. Security

We protect your information with measures such as encryption in transit, access controls, and secure on-device storage of sign-in sessions, and we rely on established providers to host and process data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

6. International Data Transfers

We are based in the United States, and our service providers may process personal information in the United States and other countries. Where the law requires, such as for transfers from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Your Rights and Choices

Available to everyone

Access and update: you can view and edit your profile and content in the app at any time.
Delete: you can delete your account in the mobile app by opening your account menu and going to Security > Delete Account, or from the subscription screen. On the web, follow the steps on our account deletion page. Deleting your account does not cancel an App Store subscription, so cancel that separately in your Apple Account settings.
Marketing emails: you can unsubscribe at any time using the link in any marketing email.
Copies and other requests: you can request a copy of your personal information, or make any other privacy request, by emailing us.

European Economic Area, United Kingdom, and Switzerland

You have the right to access, correct, delete, restrict, or receive a portable copy of your personal information, and to object to processing based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time. You also have the right to lodge a complaint with your local data protection authority.

United States

Depending on the state where you live, you may have the right to know about and access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, and to opt out of the sale of personal information, targeted advertising, and certain profiling. We do not sell personal information, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. We will not discriminate against you for exercising your rights. You may use an authorized agent to make a request on your behalf. If we deny your request, you may appeal by replying to our response.

How to make a request

Email us at plantrees.app@gmail.com. We may need to verify your identity before acting on your request, and we will respond within the time required by applicable law.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13, or under a higher minimum age where local law requires it. If you believe a child has given us personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If a change is material, we will notify you by email or in the Service before it takes effect. The "Last updated" date above shows when this policy was last revised.

10. Contact

Shazim Chaudhary, doing business as Plantrees

Email: plantrees.app@gmail.com