PlantGOOpen PlantGO

Privacy Policy

Updated 4 November 2026

  • What you create lives on your device
  • An account is optional. With one, your items are also kept in your account, so your devices stay in sync
  • No ads, no tracking, no analytics. We don’t sell your data

On your device

  • Your tasks, goals, tags, habits, journal notes and settings are stored by your browser on this device
  • Without an account, they don’t leave the device
  • Settings → Data lets you export a backup, restore it or clear the device

With an account

  • Your email address, to sign you in with a one-time code. Your name, if you set one
  • Copies of your items, to sync them between your devices
  • Only your account can read your items: the database checks every request. They are not end-to-end encrypted, so the people who run the service could technically access them. We do that only when you ask for help or the law requires it
  • When you delete an item, its content is removed from your account. A small marker stays (the item’s id and the time), so your other devices remove it too

Reminders

  • With an account and reminders on, we store this device’s push address and its time zone, so habit reminders arrive at your local time. Your browser’s push service (such as Google, Apple or Mozilla) issues the address and delivers the reminders
  • We note which reminders were sent (the habit and the date), so each one comes only once a day
  • Reminder text is encrypted on its way through the push service
  • Turning reminders off on a device deletes its push address

Profile picture

  • Signed in, the app asks Gravatar (by Automattic) for a picture linked to your email address
  • Only a fingerprint (hash) of your email is sent, plus what every web request carries, such as your IP address

Feedback

  • Send feedback opens your own mail app. The draft lists the app version, your browser and your screen size, and you see it before you send it
  • We keep feedback emails to answer them and to improve PlantGO

Service providers

  • Vercel hosts the app. Supabase runs sign-in and the database
  • They process data only to run PlantGO for us. Like any web host, they keep technical logs, such as IP addresses
  • Their servers can be in a country other than yours

Browser storage

  • No cookies for tracking or ads
  • Your browser keeps your items, your sign-in session and small preferences, such as the theme. The app needs them to work

How long we keep it

  • On your device: until you delete it, clear the device, or sign out & clear
  • In your account: until you delete the items or the account
  • To delete your account and everything in it, email us. Copies in our provider’s backups are removed when those backups expire

Your rights

  • Get a copy of your data: Settings → Data → Export
  • Correct or delete it: in the app, or email us
  • Object to how we use your data, or ask us to limit it
  • Complain to a data protection authority, such as the Estonian Data Protection Inspectorate (aki.ee)

Children

PlantGO is not meant for children under 13

Changes

When this policy changes, we update this page and its date

Who runs PlantGO

  • PlantGO is run from Estonia, in the EU
  • Questions or requests: plantgo@pm.me