This Privacy Policy explains what personal data Parostok collects, why we collect it, who we share it with, and the rights you have over it. Please read it alongside our Terms of Use.
1 Who we are
Parostok (Паросток) is a mobile gardening application for home growers. The service is operated by an individual developer:
Dariia Tieriekhova
Rivne, Ukraine
Email: tieriekhova.dariia@gmail.com
For the purposes of the EU General Data Protection Regulation (GDPR) and the Law of Ukraine "On Personal Data Protection", we are the data controller for the personal data described below. We process personal data in accordance with the Law of Ukraine "On Personal Data Protection" and, where it applies, the GDPR. Any question about your data or this policy can be sent to the email above.
2 Data we collect
We keep data collection to what the app actually needs. We collect:
- Account data — your name (as provided by Apple or Google during sign-in), your email address, and which sign-in method you used (Sign in with Apple or Sign in with Google).
- Content you create in the app — your gardens and selected plants, journal entries, checklists and care logs, onboarding-consultation answers, and the messages you send to the in-app AI assistant ("Пан Тепличний").
- Your selected growing region — the region you choose yourself from a list inside the app. We do not access your device's GPS or precise location.
- Subscription status — whether you have an active Parostok Plus subscription or free trial. Payment is handled entirely by Apple or Google; we never receive or store your card or bank details.
- Basic technical and security data — such as app and runtime version and limited technical logs generated when you use the app, used to keep the service running securely and, in the future, to deliver push notifications.
- Photos you attach in the AI assistant — if you attach a photo of a plant to a message, the image is sent to our AI provider to generate a reply and is not stored on our servers: we keep only a flag that a photo was attached, which is used to apply usage limits. A small preview stays in the chat history on your device. We open your photo library only at the moment you choose a picture, and never in the background.
- Product analytics events — a small set of in-app events (for example, opening the AI assistant, tapping a suggested question, sending a message, dismissing a card), each recorded with your account identifier, the event name, the app version and platform, and a few event properties such as where the screen was opened from. We use these only in aggregate, to understand which features are used and where the app is confusing.
- Feedback you send us — if you choose to submit feedback through the rating prompt, we store the text you wrote (up to 2,000 characters) together with your account identifier, the app version, and the platform, so we can understand and act on it.
3 How and why we use your data
We process your data for the following purposes and on the following legal bases under the GDPR:
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and run your account; sync your gardens across devices | Account data, content you create | Performance of a contract |
| Provide the AI assistant. Your message, any photo you attach, and relevant details about your plants are sent to our AI provider to generate a reply | Chat messages, attached photos, related plant data | Performance of a contract |
| Show weather relevant to your growing region | Your selected region | Legitimate interest in providing a useful feature |
| Manage subscriptions and trials | Subscription status | Contract; legal obligation (record-keeping) |
| Keep the service running, secure, and up to date | Technical and security data | Legitimate interest in a reliable, secure service |
| Prevent abuse and control service costs (e.g. usage limits on AI requests) | Account data, request counts | Legitimate interest in a secure, sustainable service |
| Understand which features are used, and improve the app | Product analytics events, account identifier | Legitimate interest in improving the service |
| Read and act on feedback you choose to send us | Feedback text, account identifier | Legitimate interest in improving the service |
We do not use your data for advertising, profiling, or automated decisions that produce legal effects about you. We do not sell your data.
4 Who we share it with
We share data only with the service providers ("processors") required to run the app. Each acts under our instructions and their own security and privacy commitments.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, and backend hosting of your account and content | European Union (Ireland) |
| Anthropic | Generating AI assistant replies from the message, any attached photo, and plant context you send. Attached photos are used to produce the reply and are not retained by us | United States |
| Open-Meteo | Weather data. Receives only the approximate coordinates of your selected region — no name, email, or account identifier | European Union |
| Apple / Google | Sign-in, billing for subscriptions and trials, app distribution, and (in future) push delivery | United States |
| RevenueCat | Managing your subscription status and entitlements across platforms. Receives purchase identifiers and an app user identifier — not your card or bank details | United States |
We may also disclose data where required by law, or to protect the rights, safety, or property of our users or ourselves.
5 Storage on your device
Parostok is a local-first app: much of your data is stored directly on your device so the app works offline. We also use secure device storage to keep you signed in (authentication tokens) and to remember your preferences and progress. This on-device data stays on your device and is removed when you delete the app. We do not use advertising cookies or cross-app tracking technologies.
6 International transfers
Your account and content are stored in the European Union (Ireland). Some providers listed above are based in the United States, so sending data to them involves an international transfer. Where this happens, we rely on appropriate safeguards permitted by the GDPR, such as the European Commission's Standard Contractual Clauses, together with the security measures those providers apply.
7 How long we keep your data
We keep your account data and content for as long as your account exists. When you delete your account, we remove your personal data from our live systems promptly. Residual copies contained in encrypted backups are overwritten in the normal backup cycle, within 30 days.
Product analytics events are retained for up to 24 months and then deleted. Feedback you send us is retained for as long as it remains relevant to product decisions, and in any case no longer than 24 months.
Some data is also stored locally on your device (Parostok works largely offline). Deleting the app removes that local data from your device.
8 Your rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- correct data that is inaccurate or incomplete;
- erase your data ("right to be forgotten");
- restrict or object to certain processing;
- receive the personal data you provided to us in a structured, commonly used, machine-readable format such as JSON (data portability);
- withdraw consent where our processing is based on consent, without affecting processing carried out before withdrawal.
To exercise any of these rights, email tieriekhova.dariia@gmail.com. We will respond within one month, as required by the GDPR; for complex requests we may extend this by up to two further months and will tell you if we do.
You also have the right to lodge a complaint with a supervisory authority. In Ukraine this is the Ukrainian Parliament Commissioner for Human Rights (Ombudsman); in the EU it is the data protection authority in your country of residence.
9 Deleting your account
You can delete your account and its personal data at any time from within the app: open Profile and choose Delete account. This action is permanent and removes your account and associated data as described in section 7.
Please note: deleting your account does not automatically cancel any active App Store or Google Play subscription. To stop future billing, cancel the subscription in your Apple or Google account settings. If you need help, contact us at the email above.
10 Children
Parostok is not directed to children. You must be at least 16 years old to create an account and use the app, unless a parent or legal guardian provides consent as required in your country. If you believe a child has provided us with personal data without such consent, contact us and we will delete it.
11 Security and data breaches
We protect your data with measures including encryption in transit, access controls that scope your data to your account (row-level security), authenticated access to backend functions, and storage within the European Union. No method of transmission or storage is completely secure, but we work to protect your information and keep our safeguards current.
If we become aware of a personal data breach that affects your information, we will notify affected users and the competent authorities where required by applicable law, and take reasonable steps to limit its impact.
12 Changes to this policy
We may update this Privacy Policy as the app evolves. When we make material changes, we will update the date at the top and, where appropriate, notify you in the app. Continued use of Parostok after an update means you accept the revised policy.
13 Contact
Questions about this policy or your personal data? Email tieriekhova.dariia@gmail.com.