Arroseo — Global Privacy & Cookies Policy

This Privacy & Cookies Policy explains how Arroseo ("we", "us", "our") collects, uses, shares and protects your data when you use:

• The Arroseo mobile application (iOS & Android), and
• The Arroseo.com website (informational only)

By using Arroseo, you agree to this Policy.

Arroseo is not intended for children under 13, and we do not knowingly collect data from them.

Azsune Production is the data controller for the personal data processed under this Policy.

Information We Collect

1.1 Information you provide (App)

• First name
• Email address
• Password (handled by our authentication provider, never visible to us)
• If you sign in with Apple or Google: the name and email address they share with us
• Plant details (names, nicknames, care schedule, notes, care dates)
• Photos you choose to upload (plants, herbarium, notes)
• Teams you create or join: your name, your avatar, and the plants and photos you share with the team
• Feedback or support messages

1.2 Automatically collected data (App)

• Your progress in Le Sentier and your game data (levels played and results, seeds, streak, daily quests), and the dates of your first visits, saved to your account
• The version of the app you use
• Your Arroseo+ subscription status and purchase history (payments are handled by Apple or Google: we never see your payment details)
• For ads, if you don't have Arroseo+: device information and, on Android, the advertising identifier (AAID), collected by Google AdMob
• Region/language settings

On iPhone, Arroseo does not access the advertising identifier (IDFA). The app contains no analytics or crash reporting tool.

1.3 Website data (Arroseo.com)

• Anonymous counters: scans of our QR code and clicks on our links page (platform and day only, no identifier)
• No cookies
• No personal account or uploads on the website

How We Use the Information

Essential purposes

• Create and manage your account
• Store and sync your plant information and photos
• Send care reminders (watering, fertilizing, repotting) and the Le Sentier reminder; they are scheduled on your phone and can be turned off in the settings
• Provide AI plant identification/analysis
• Save your Le Sentier progress and game data, so you get them back after reinstalling the app or on another phone
• Share plants with the members of your teams
• Provide and manage your Arroseo+ subscription
• Ensure performance, functionality, and security

Improving the app

• Understand how features are used, through overall counts computed from account data (for example, how many accounts opened Le Sentier or completed a level)
• These counts contain no personal data and are never shared

Advertising

• Rewarded ads, only for users without Arroseo+ (to see a scan result, play a level of Le Sentier, or complete the bonus quest)
• Arroseo+ subscribers see no ads, and no ad is requested for them
• In the European Economic Area, the UK and Switzerland, Google's consent message lets you accept or refuse personalised ads; you can change your choice at any time in Settings → Legal → "My ad choices"
• Elsewhere, Google may personalise ads according to your device's ad settings

Legal reasons

• Prevent abuse or fraud
• Comply with legal obligations when necessary

Legal Bases for Processing

Depending on your location (EU, UK, etc.), we rely on:

Contractual necessity — providing core features (account, plant tracking, photo storage, reminders, teams, Le Sentier progress, subscription)

Consent — personalised advertising where required by law, and AI photo analysis

Legitimate interests — security, preventing abuse, overall usage counts to improve the app and the website

Legal obligations

Cookies & Tracking Technologies

In the app

We use:

• Essential trackers (authentication, syncing, reminders)
• Google AdMob and its consent tool (Google User Messaging Platform), for users without Arroseo+ only
• The advertising identifier on Android (AAID), for ads; it is not accessed on iPhone

We do not use any analytics or crash reporting tool in the app. Reminders are scheduled on your phone: we do not use a push notification service.

You may withdraw your consent to personalised ads at any time in Settings → Legal → "My ad choices" (where required by law), reset or delete your advertising identifier in your Android settings, or contact us at [email protected]

On the website

• No cookies, no analytics or advertising trackers
• Anonymous counters of QR code scans and link clicks, with no identifier

Sharing Your Data

We do not sell personal data.

We may share information with trusted service providers who help us:

Service providers

• Firebase (Google Cloud, main database hosted in the EU) — hosting, authentication, database and photo storage. Firebase acts as a data processor on our behalf under a data processing agreement.
• RevenueCat — subscription management (subscription status and purchase history, linked to your account identifier)
• AI processing provider — temporary analysis of plant photos
• Google AdMob — rewarded ads for users without Arroseo+, with your consent where required by law

Our service providers process data under strict privacy safeguards. For advertising, Google also acts under its own privacy policy.

Your teams

The plants, photos, notes and name you share in a team are visible to its members.

International Transfers

Your data may be stored or processed outside your home country (including EU, UK, US). When doing so, we rely on:

• Adequacy decisions
• Standard Contractual Clauses (SCCs)
• Additional technical and contractual safeguards

Data Retention

• Account data: kept until the account is deleted
• Plant photos: deleted with your account
• Le Sentier progress and game data: deleted with your account
• Teams: deleting your account removes you from your teams, along with the plants and photos you shared
• Advertising data: kept by Google under its own retention rules
• Website counters: 13 months

You can delete your account at any time from the app (Settings → Profile). Some data may be retained longer if required by law (for example, purchase records).

Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your data
• Correct inaccurate information
• Delete your account and all stored data, directly in the app
• Withdraw consent (personalised ads)
• Object to certain processing
• Data portability

California (CCPA/CPRA)

You may also:

• Opt-out of sharing personal data for personalised ads
• Request disclosure of data categories
• Request deletion

To exercise your rights, contact: [email protected]

Advertising & Consent Requirements

Apple App Tracking Transparency (iOS)

Arroseo does not ask to track you on iPhone: it does not access the IDFA and does not link your activity with third-party data for advertising.

EU, UK and Switzerland consent

Where required by law, Google's consent message asks for your choice before personalised ads are shown. The app works the same whatever you choose.

Google Play Data Safety

We clearly disclose:

• Types of data collected
• Purposes
• Whether data is shared
• User controls and deletion options

Security Measures

We implement appropriate technical and organisational measures to protect personal data.

We use:

• Encryption in transit and at rest
• Restricted access controls
• Secure cloud infrastructure
• Regular audits and threat monitoring

No system is perfectly secure, but we follow industry standards.

Links to Third-Party Services

Some features may link to third-party resources (e.g., ads, external websites). Their privacy practices are independent from ours.

Changes to This Policy

We may update this Policy from time to time. Significant updates will be announced in-app or on the website.

Contact us

If you have questions about privacy: [email protected]