Privacy Notice
GrowMate is the app served by plantita.online.
This notice explains what personal data GrowMate collects, why, who receives it and what rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173).
Who is responsible
The personal information controller for GrowMate, the app served by plantita.online, is John Michael Beringuel. Send privacy and deletion requests to support@plantita.online.
Data Protection Officer: [TO BE COMPLETED BY GROWMATE]. Until a DPO contact is published, send privacy requests to support@plantita.online.
What we collect
Account and profile
- From Google Sign-In: your name, email address and profile photo.
- Profile details you add, such as a display name, photo, cover photo and garden name.
Addresses and location
- Delivery and pickup addresses you save, including map coordinates, barangay and city.
- Your device's location, only if you allow it, to show local weather, care tips and nearby plants and to fill in addresses.
Orders and money
- Orders, items, prices, delivery fees, order status, cancellations and after-sales requests.
- Cash-on-delivery records: when cash was collected, deposited, paid out to sellers or refunded, and the method and reference used (for example a GCash or bank transfer reference).
Sellers
- Seller application: photos of a government ID (front and back), a selfie with the ID and a selfie with a plant. Government ID photos are sensitive personal information and are used only to verify sellers.
- Listings: photos, descriptions, prices, stock and pickup address, and permit documents for regulated plants where required.
Riders
- Rider account details, approval status, vehicle type and plate number.
- Delivery records: pickup confirmation, cash collection, camera photos taken as proof of delivery, and cash deposits.
- GrowMate does not currently track riders' GPS location.
Content and communications
- Garden entries, plant photos, watering and care notes, public garden content, reviews and ratings.
- Messages with other users and with the Leafy assistant, and photos you scan to identify plants.
- Reports, complaints, after-sales evidence photos and support emails.
Tester sign-ups
- If you sign up on plantita.online to test the Android app, the email address you enter and when you signed up. You do not need an account to sign up.
Technical
- Push-notification tokens if you allow notifications, and basic device, app and log information needed to run and secure the service.
Why we use it and on what basis
| Purpose | Basis |
|---|---|
| Create and run your account; provide plant-care features | Performance of our contract with you |
| Process orders, arrange delivery, collect cash on delivery, pay sellers and handle refunds | Contract; compliance with legal obligations |
| Verify sellers (including government ID) and approve riders | Consent you give when applying; legitimate interest in a safe marketplace; legal obligations |
| Weather, nearby plants and address lookup from your device location | Consent (you can turn location off) |
| Review listings for regulated plants; handle reports, disputes and fraud | Legitimate interest; legal obligations |
| Service notices and push notifications | Contract; consent for push notifications |
| Invite you to test the Android app on Google Play and send you testing updates | Consent you give when you sign up as a tester (you can withdraw it at any time) |
GrowMate does not sell personal data and does not use it for third-party advertising.
How long we keep it
We keep personal data only as long as needed for the purposes above. Order, cash and settlement records are kept after an account is deleted because the finance ledger cannot be altered and the law may require us to keep transaction records. Seller verification documents are kept while the seller account is active and for a limited period after. Specific retention periods: [TO BE COMPLETED BY GROWMATE].
Tester sign-up emails are kept until Android testing ends or until you ask us to remove yours, whichever comes first. To be removed, email support@plantita.online.
How we protect it
Access is restricted by account and role using database row-level security. Verification documents are stored privately. Seller pickup PINs are stored hashed. Money moves only through audited, recorded steps. No system is perfectly secure; if a personal data breach is likely to put you at risk, we will notify you and the National Privacy Commission as the law requires.
Your rights
Under the Data Privacy Act you have the right to be informed, to access your data, to object, to have it corrected, erased or blocked, to data portability, to be indemnified for damages, and to file a complaint with the National Privacy Commission.
To use these rights, email support@plantita.online from your account email. Tell us what you are asking for. We may ask you to confirm your identity. You can delete your account yourself in the app's settings.
Children
GrowMate's marketplace is for people who can legally enter into a contract. Policy for minors using plant-care features: [TO BE COMPLETED BY GROWMATE].
Changes to this notice
We will update this notice when our processing changes. The date at the top shows the latest version. Material changes will be announced in the app.