This Privacy Policy explains how Sacha Benz ("we", "us", "our") collects, uses, and protects your personal data when you use the Parzelle37 mobile application ("App"). We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Swiss data protection law (nDSG).
The terms governing your use of the App, including subscriptions and AI allowances, are set out separately in our Terms of Service.
1. Data Controller
2. Data We Collect
When you register or sign in with Google, we collect your name, email address, and profile picture (avatar emoji you choose). This data is stored in Firebase Authentication and Firebase Realtime Database.
All data you enter in the App — garden layouts, plant information, activity logs, todos, costs, meeting notes, and calendar entries — is stored in Firebase Realtime Database, associated with your user account and garden.
You may optionally provide the geographic location of your garden (latitude and longitude). This is used to provide localised weather forecasts and location-aware AI recommendations. Location data is stored in Firebase and is never shared with third parties for advertising purposes.
When you use AI-powered features (Plant Autofill, Garden Coach, Weekly Tips), your garden context data — including plant names, zone information, activity history, weather data, and your questions — is sent to the Anthropic Claude API for processing. This data is transmitted via a Firebase Cloud Functions proxy hosted in Europe (europe-west1). We do not use this data to train AI models, and Anthropic does not use data submitted through its commercial API to train models in accordance with its current commercial terms. Please refer to Anthropic's Privacy Policy for details on how they handle API data.
We track usage counters for AI features (e.g. number of AI autofills used per month) to enforce free-tier limits. These counters are stored in Firebase Realtime Database under your user account.
We collect anonymous, aggregate statistics about how the App is used — for example, which features and screens are opened, and whether you access the App via the web or Android version — to help us improve Parzelle37. These statistics are simple counters that are not linked to your identity or account in any way, and are stored only in our own Firebase database. No third-party analytics or advertising services are used.
If you purchase a Premium subscription, your purchase is processed by Google Play (Android). We use RevenueCat to manage subscription status. RevenueCat receives your Firebase User ID and purchase information to verify entitlements. No payment card details are processed by us directly. Please refer to RevenueCat's Privacy Policy and Google's Privacy Policy for details.
3. Legal Basis for Processing
- Contract performance (Art. 6(1)(b) GDPR): Processing necessary to provide the App's core functionality (account management, garden data storage, feature access). This includes the AI-powered features (Plant Autofill, Garden Coach, Weekly Tips): they are part of the service we undertake to provide, and transmitting the relevant garden context to our AI processor is necessary in order to deliver them. Where a shared garden is concerned, that context includes the names your fellow members chose to display within the garden.
- Legitimate interests (Art. 6(1)(f) GDPR): Anonymous usage statistics and the usage counters that enforce tier limits, in order to operate, secure, and improve the service.
- Consent (Art. 6(1)(a) GDPR): Optional location data for weather and AI recommendations — you may decline or remove this at any time in App settings.
4. AI-Generated Content
AI features are powered by Anthropic Claude. Your garden context data is sent to Anthropic's API to generate responses. Anthropic processes data in accordance with their privacy policy. We use a Firebase Cloud Functions proxy in Europe to minimise data transfer outside the EU/EEA where possible.
5. Third-Party Services
Firebase (Google LLC)
We use Firebase Authentication, Firebase Realtime Database, and Firebase Cloud Functions to store and process your data. Firebase is operated by Google LLC and data may be stored in Google's data centres. We have configured our Firebase project to use the europe-west1 region where possible. See Firebase Privacy.
Anthropic (Claude API)
AI features are powered by Anthropic's Claude API. Garden context data is sent to Anthropic for processing when you use AI features. See Anthropic Privacy Policy.
Yr.no (MET Norway)
Weather forecasts are sourced from the Norwegian Meteorological Institute (MET Norway) via the Yr.no API. Your garden's geographic coordinates are sent to this API. No personal identifiers are transmitted. Weather data © MET Norway.
RevenueCat
Subscription management is handled by RevenueCat, Inc. Your Firebase User ID and purchase receipts are shared with RevenueCat to verify Premium entitlements. See RevenueCat Privacy Policy.
Google Maps
The App may use Google Maps to display garden location. See Google Privacy Policy.
6. Data Retention
We retain your data for as long as your account is active. You may delete your account at any time via Settings → Delete Account in the App. Upon deletion, all your garden data, activity logs, and personal information are permanently removed from our Firebase database within 30 days.
AI usage counters are retained for billing and abuse-prevention purposes for up to 12 months after account deletion.
7. Your Rights
Under the GDPR and Swiss nDSG, you have the following rights:
- Right of access — request a copy of your personal data
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restriction — request restricted processing of your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — withdraw consent at any time without affecting prior processing
To exercise any of these rights, please contact us at info@parzelle37.app. We will respond within 30 days.
You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch, or with your local EU supervisory authority.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- All data in transit is encrypted using TLS/HTTPS
- Firebase Authentication provides secure, token-based access control
- API keys and secrets are stored server-side in Firebase Cloud Functions and never exposed in the App
- Firebase Realtime Database security rules restrict access to authorised users only
9. Children's Privacy
Parzelle37 is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. International Data Transfers
Your data may be processed outside Switzerland and the EU/EEA by our third-party service providers (Google/Firebase, Anthropic, RevenueCat). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions. Firebase data is processed under Google's Data Processing Terms which include SCCs.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.
12. Contact
For any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact: