Privacy Policy

We run a plumeria guide site with a free AI assistant. We collect the minimum we need to make those work: your Google name, email and photo if you choose to sign in; your approximate (city-level) location so advice matches your climate; and the plants, notes and conversations you choose to save. We don't sell any of it, we don't run ads, and you can delete everything yourself with one button in My Garden.

If you never sign in:

• Questions you ask the AI. The text of each question and answer is logged (with a random session id, not your name) so we can spot wrong answers and improve the assistant, and deleted automatically after 12 months. Don't put personal details in your questions.
• Photos you send the AI. A photo is processed to answer that one question and is not saved to our database or attached to any identity.
• Standard server data. Our host (Cloudflare) sees your IP address and request metadata as part of operating the network, including the approximate location it infers from where your request enters the network. We use that approximate location only to answer your question with the right climate context. To keep the free service up we rate-limit each visitor with a daily counter keyed by a scrambled, keyed hash of your IP address — never the address itself — and delete those counters after two days.

If you sign in with Google:

• Your Google name, email address and profile photo. That's the whole list — we request only the basic "who are you" scopes (openid, email, profile). We never see your password, contacts, files or anything else.
• Your growing location. On first sign-in we save the city-level location described above so the assistant can use your hardiness zone, weather and sun without asking every time. It is never more precise than roughly city level, and you can change it.
• What you choose to save. Your plants, notes, saved diagnosis verdicts, saved conversations and rooting-journey check-ins — stored so they're there when you come back.
• Your chat log, linked to your account. Questions you ask while signed in are logged like anyone's, but with your account id attached, so that deleting your account deletes them too.
• Your browser type (the "user agent" string), stored with each sign-in session to help us spot misuse.

Everything is stored in our Cloudflare account (database and cache at the network edge, primarily in the United States). The AI itself runs on Cloudflare Workers AI, which processes your question, photo and context to generate the answer.

• Google — only to sign you in, using their standard sign-in flow. The site's fonts are served from our own domain, so just reading a page sends nothing to Google.
• Open-Meteo (open weather data) — receives rounded coordinates (never your name, email or IP) so we can fetch your local weather and derive your hardiness zone.
• Cloudflare — hosts the site, the database and the AI, under their own privacy terms, and provides us cookie-less, aggregate Web Analytics (page counts, not people).

That's the entire list. We do not sell or rent personal information, we do not share it for advertising, and there are no third-party ad or tracking scripts on this site.

We set exactly two cookies, both strictly necessary and both only if you sign in: a session cookie that keeps you signed in (HttpOnly, secure, up to 90 days) and a 10-minute cookie that protects the sign-in handshake itself. No advertising cookies, no cross-site tracking. Chat history for anonymous visitors lives in your own browser's session storage and never leaves your device except as the question text you send.

We don't track you across other websites, and we don't let third parties collect information about your activity here over time or across other sites. So there is nothing for a Do Not Track or Global Privacy Control signal to switch off: the site behaves the same whether or not your browser sends one.

• Chat logs (anonymous or signed in): 12 months, then deleted automatically by a daily cleanup job.
• Rate-limit counters (hashed, never your IP): 2 days.
• Sign-in sessions: expire after 90 days and are deleted once expired.
• Saved garden data: until you delete it or your account.
• Weather and climate lookups: cached by rounded location, not by person — about an hour for current weather, about 12 hours for seasonal history.

Open My Garden → "Delete my account". That permanently removes your account, sessions, location, plants, plant history, saved conversations, rooting journeys and the chat logs tied to your account — immediately, no email required, no questions asked. (Chat questions asked before October 12, 2026 were stored under a random session id only, never linked to an account, so they can't be found that way; they are deleted under the 12-month rule above.) You can also email [email protected] and a real person will do it for you. Wherever you live — including under the GDPR or the California CCPA — you can ask us what we hold about you, ask for a copy, or ask for deletion, and we'll honor it.

This site is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has created an account, email us and we'll delete it.

Lani is an AI assistant. Her answers are generated, can be wrong, and are gardening guidance — not professional, medical or veterinary advice. Plumeria sap is mildly irritating; anything involving your health, your pets' health, or pesticide use deserves a label read and, when in doubt, a professional.

If we change what we collect or how we use it, we'll update this page and the date at the top before the change takes effect. Questions, requests, complaints: [email protected]. See also our Terms of Use.