Privacy Policy

Effective Date: June 18, 2026  ·  Last Updated: June 18, 2026  ·  Version 2.0

1. Who We Are

FyTevΦ ("FyTev", "we", "us", "our") is a plant intelligence platform operated by FyTev LLC, based in the United States. For data protection purposes, FyTev LLC is the data controller of personal data collected through fytevo.com.

Data Controller Contact: privacy@fytevo.com  |  Contact Form

2. Data We Collect

Account Data

• Full name, username, email address, hashed password
• Profile preferences, subscription tier, account creation date
• Optional: profile photo, bio, location (city/state only — never precise GPS for account)

Plant Scan Data

• Photos you take or upload for plant identification (stored on our servers)
• AI identification results: species name, confidence score, plant profile data
• If you grant location permission: approximate GPS coordinates attached to a scan to improve regional accuracy. Location is optional and never required.
• Device information used to process the scan (browser, OS type)

Usage Data

• Pages visited, features used, scan count, session duration
• IP address (used for rate limiting, fraud prevention, and approximate location)
• Browser type and version, operating system, device type
• Error logs and diagnostic reports you submit

Payment Data

• Subscription billing is handled by Stripe. We never store full card numbers, CVV, or raw payment data.
• We retain transaction IDs, amounts, dates, and subscription status.

Marketplace Data

• Listing details you publish (plant name, description, price, photos, location city/state)
• Transaction records if you buy or sell through the marketplace

Community Data

• Posts, comments, questions, and content you publish publicly on the platform

3. How We Use Your Data

• To identify plants using AI (Plant.id, PlantNet, DeepSeek)
• To maintain your plant collection, garden, and design projects
• To manage your subscription, enforce scan limits, and award FyTev Coins
• To display your community contributions and profile
• To operate the marketplace and connect buyers with sellers
• To send transactional emails (account confirmation, purchase receipts, password reset)
• To detect fraud, abuse, and enforce our Terms of Service
• To improve our AI identification models using anonymized, aggregated scan data
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal bases for processing are:

• Contract performance — to provide the platform, process payments, and manage your account
• Legitimate interests — to prevent fraud, improve our services, and ensure platform security
• Consent — for optional features such as location on scans, marketing emails, and cookies beyond strictly necessary
• Legal obligation — where required by applicable law

5. Data Sharing & Third Parties

We share data only with the following categories of third parties, solely to provide the service:

• Plant.id (Kindwise) — plant identification AI. Scan images are sent to their API. Governed by their privacy policy.
• PlantNet (INRIA) — secondary plant identification. Scan images may be sent to their API.
• DeepSeek — AI enrichment of plant profile data. Scientific names only are sent, not personal data.
• Stripe Inc. — payment processing. Subject to Stripe's privacy policy and PCI-DSS compliance.
• HostGator / Newfold Digital — web hosting infrastructure in the United States.
• Base44 — platform tooling. No personal user data is shared.

We do not share your data with any other third party without your explicit consent, except as required by law (e.g., valid court order or government request).

6. Data Retention

• Account data: Retained for the life of your account plus 30 days after deletion request
• Scan images: Retained on our servers. You may delete individual scans from My Plants at any time.
• Payment records: Retained for 7 years as required by US tax law (IRS)
• Usage/diagnostic logs: Retained for 90 days
• Deleted accounts: All personal data purged within 30 days of verified deletion request

7. Security

• All data transmitted over HTTPS/TLS encryption
• Passwords hashed using bcrypt with salt
• Payment data handled exclusively by PCI-DSS compliant Stripe
• Two-factor authentication (TOTP) available for all accounts
• Regular security audits and rate limiting on all APIs
• Access to production data restricted to authorized personnel only

8. Your Rights

Regardless of where you live, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and all associated personal data. → Delete My Account
• Portability — receive your data in a machine-readable format (JSON/CSV)
• Objection — object to processing based on legitimate interests
• Restriction — request restriction of processing in certain circumstances
• Withdraw Consent — withdraw consent at any time for consent-based processing

To exercise any right: email privacy@fytevo.com or use our contact form. We respond within 30 days. EU/UK users may also lodge a complaint with their national Data Protection Authority.

9. California Residents (CCPA / CPRA)

If you are a California resident, under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), you have the right to:

• Know what personal information we collect, use, share, or sell
• Delete your personal information (with certain exceptions)
• Correct inaccurate personal information
• Opt-Out of the sale or sharing of personal information — Note: We do not sell or share your personal information for cross-context behavioral advertising.
• Non-Discrimination — we will not discriminate against you for exercising your CCPA rights
• Limit Use of Sensitive Personal Information — we do not use sensitive personal information beyond what is necessary to provide the service

To submit a CCPA request: email privacy@fytevo.com with subject line "CCPA Request." We will verify your identity and respond within 45 days.

We do not have actual knowledge that we sell personal information of consumers under 16 years of age.

10. Children & COPPA

FyTevΦ is not directed to children under 13. We do not knowingly collect personal information from children under 13 years of age. If you are under 13, please do not use FyTevΦ or provide any personal information.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@fytevo.com and we will delete that information promptly.

For users aged 13–17, a parent or legal guardian must review and agree to these terms on their behalf. By creating an account, you confirm you are 13 or older.

11. International Data Transfers

FyTevΦ is operated from the United States. If you are located in the EU, UK, or another jurisdiction with data transfer restrictions, please be aware that your data is transferred to and processed in the United States.

For EU/UK users, such transfers are made under appropriate safeguards including Standard Contractual Clauses (SCCs) where applicable. Our AI processing partners (Plant.id, PlantNet) are European-based, meaning scan images may be processed in the EU.

12. Cookies & Tracking

FyTevΦ uses the following types of cookies:

• Strictly Necessary: Session authentication, CSRF protection. These cannot be disabled.
• Functional: Remember your preferences (dark mode, view settings, scan session restore). Disabled if you decline.
• Analytics: Currently, we do not use third-party analytics or tracking cookies.
• Advertising: We do not use advertising or behavioral tracking cookies.

You can control functional cookies via our cookie consent banner or your browser settings. See our Cookie Policy for full details.

13. AI & Plant Identification Data

When you scan a plant, your photos are sent to third-party AI services (Plant.id, PlantNet) for identification. These services have their own privacy policies. Key points:

• Plant.id (Kindwise) — plant images may be used to improve their AI model unless you opt out. See Plant.id Privacy Policy
• PlantNet — images submitted contribute to botanical research. See PlantNet Privacy Policy
• DeepSeek — only scientific plant names are sent, never personal data

14. Marketplace Privacy

If you list items on the FyTevΦ Marketplace:

• Your city and state are publicly displayed with your listing
• Your username is publicly displayed
• Your exact address, phone, or email is never publicly displayed
• Buyer/seller contact is handled through our platform messaging only
• Sellers processing over $600/year through the platform may be subject to IRS Form 1099-K reporting requirements under US tax law

15. Policy Changes

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and display a notice on the site. The effective date at the top of this page will always reflect the most current version. Continued use of FyTevΦ after changes are posted constitutes acceptance of the updated policy.

16. Contact & Data Requests

Data Controller: FyTev LLC

Privacy Email: privacy@fytevo.com

General Contact: fytevo.com/contact

For EU/UK residents: You have the right to lodge a complaint with your local supervisory authority. In the UK: Information Commissioner's Office (ICO).