VERVALIS

Privacy Policy

Last updated: June 9, 2026

Vervalis ("Vervalis", "we", "our", or "us") provides a mobile application that helps you grow and care for plants. This Privacy Policy explains what personal data we collect, how we use it, the third parties that process it on our behalf, and the rights you have over it. By using Vervalis, you agree to the practices described below.

1. Information We Collect

Account information

  • Email address, used for authentication and account recovery.
  • Display name, if you choose to provide one.
  • Authentication identifiers from third-party sign-in providers (e.g. Google or Apple), where used.

Location and regional data

  • Your country, climate zone, and hemisphere, used to tailor plant care guidance to your region and season.
  • Approximate coordinates, only if you grant device location access. You may instead set your location manually.

Plant and garden data

  • Plants you add, growth milestones, care logs, and notes.
  • Photographs you capture or upload for plant identification, health diagnosis, and growth tracking.
  • Messages you exchange with the in-app AI assistant.
  • Diagnosis results generated from your photos (identified species, health status, detected issues).

Subscription and transaction data

  • Your subscription status, plan, and purchase history, processed through our payments provider.
  • We do not collect or store your full payment card details; these are handled by the relevant app store and payment processor.

Device and technical data

  • A push notification token, if you enable notifications.
  • Device type and operating system, used for compatibility and diagnostics.

2. How We Use Your Information

  • Personalized plant care — generating region- and season-appropriate guidance based on your location and climate.
  • Plant identification and health diagnosis — analyzing the photos you submit to identify species and detect diseases or pests.
  • AI assistant — sending the relevant plant context with your messages so the assistant can return useful responses.
  • Reminders and notifications — watering, fertilizing, and care reminders, and optional seasonal tips.
  • Account and subscription management — authentication, profile, and entitlement to paid features.
  • Service operation and improvement — maintaining reliability, security, and the quality of the app.
We do not sell your personal data, and we do not use it for advertising.

3. AI Processing of Your Photos and Messages

When you ask the assistant a question or submit a plant photo, the relevant content is processed on our servers and sent to specialized AI providers to produce a result:

  • Plant identification and health detection — photos are sent to an image-processing provider for species recognition and disease/pest analysis.
  • Explanations and chat responses — your message, photo, and limited plant context are sent to an AI provider to generate the written response.

These providers process the data to deliver the requested result. We send only what is needed for the feature, and your account credentials and API keys are never exposed to these providers or to your device.

We do not use your photos or messages to train our own models. These providers process your content only to return the requested result and, under their applicable terms, do not use it to train their models.

4. Third-Party Service Providers

We rely on the following processors to operate Vervalis. Each maintains its own privacy policy.

ProviderPurpose
Cloud infrastructure & database providerDatabase, authentication, file storage, and server functions.
Image-processing providerPlant identification and disease/health analysis from submitted photos.
AI providerAI assistant responses and photo explanations.
Subscription management providerSubscription management and purchase validation.
App stores (Apple / Google)Payment processing for subscriptions.
Push notification providerDelivery of push notifications.
Sign-in providers (Google / Apple)Optional authentication methods.

5. Data Storage and Security

  • All network traffic is encrypted in transit using HTTPS/TLS.
  • Passwords are hashed and are never stored in readable form.
  • Photographs are stored in private, per-account storage and are not shared with other users.
  • API keys and credentials for AI and third-party services are held as server-side secrets and never reach the app.
  • Some of your data is also cached locally on your device to support offline use; it syncs with our servers when you reconnect.

6. Permissions

Location

Vervalis requests location access only during setup to determine your climate zone. You may decline and set your location manually. We do not track your location continuously or in the background.

Camera and photo library

Camera and photo access is used solely so you can photograph your plants for identification, diagnosis, and growth tracking. You control when a photo is captured or selected.

Notifications

Notification access is optional and is used for care reminders and, if enabled, seasonal tips. You can revoke any of these permissions at any time in your device settings.

7. Data Retention

We retain your account and plant data for as long as your account remains active. Deleted plants may be retained in a non-visible state for a limited period to support recovery and synchronization. You can delete your account at any time from within the app; doing so removes your personal data from our systems, subject to any retention required by law.

8. Your Rights

  • Access — request a copy of the personal data we hold about you.
  • Rectification — correct your profile information within the app.
  • Erasure — delete your account and all associated data directly within the app, at any time, from your profile settings.
  • Withdraw consent — revoke location, camera, or notification permissions through your device settings.

Depending on your jurisdiction (for example, under the GDPR or KVKK), you may have additional rights, including the right to data portability and the right to lodge a complaint with a supervisory authority. To exercise any right, contact us using the details below.

9. International Transfers

Vervalis operates globally, and your data may be processed on servers located in the European Union, the United States, or other regions where our service providers operate. Where required, we rely on appropriate safeguards for such transfers.

10. Children's Privacy

Vervalis is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so that we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated within the app or by updating the date above. Your continued use of Vervalis after an update constitutes acceptance of the revised policy.

12. Contact

For any question about this policy or your personal data, contact us at legal@vervalis.com.tr.