Privacy Policy

Effective Date: 4.10.25
Last Updated: 5.12.25

INTRODUCTION

At YardFlip, we believe in transparency. This privacy policy explains exactly what data we collect, why we collect it, and how we use it.

We collect the MINIMUM data necessary to provide you with an amazing yard design experience.

DATA WE COLLECT

1. ACCOUNT INFORMATION (Required for app functionality)

What We Collect:

- Email address (or Apple-provided private relay email)
- Display name (First name + Last name, or Apple-provided name)
- Password (stored securely by Firebase, NOT by us) - only for email signup
- User ID (Firebase UID - automatically generated)
- Apple ID identifier (if using Sign in with Apple)

Authentication Methods:
- Sign in with Apple (recommended - uses Apple's privacy features)
- Email and password (for existing users)

Why We Collect It:

- User authentication and account management

- Personalized app experience

- Password recovery

Where It's Stored:

- Firebase Authentication servers (Google Cloud)

- NOT stored on our servers directly

Can You Delete It: Yes - you can delete your account anytime

2. PHOTOS & IMAGES (Core app functionality)

What We Collect:

- Yard photos uploaded by you (from camera or library)

- AI-generated design images

- Original photos for comparison

How We Use It:

- Sent to Google GenAI API for AI processing

- Temporarily stored during generation

- Generated designs saved locally on your device

- Not shared with third parties (except Google AI for processing)

Where It's Stored:

- Temporarily: Google Cloud Functions (during processing)

- Permanently: Your device only (local storage)

- NOT stored on our servers after processing

Can You Delete It: Yes - you can delete saved designs anytime

3. SHOPPING LIST DATA (AI-generated recommendations)

What We Collect:
- Your approximate location (city/region level - NOT precise GPS)
- Sun exposure preferences you provide
- Garden style selections
- Generated plant and material lists

How We Use It:
- Generate location-appropriate plant recommendations
- Suggest materials available in your region
- Customize seasonal planting advice

Where It's Stored:
- Location preference: Locally on device only
- Shopping lists: Locally on device only
- NOT sent to external servers after generation

Can You Delete It: Yes - delete individual designs to remove shopping lists

4. APP USAGE DATA (For app improvement - NOT shared)

What We Collect:

- Number of designs generated (count only, no images)

- Number of designs favorited

- Number of designs shared

- Garden styles selected (which styles are popular)

- Generation success/failure rates

- Image dimensions (for optimization)

Why We Collect It:

- Improve app performance

- Understand which features users love

- Fix errors and bugs

- App review prompt timing

- Enforce trial design limits (8 free designs)

Where It's Stored:

- Design count: Firebase Firestore (cloud) + device cache (UserDefaults)

  - Synced across your devices for consistent trial limits

  - Tied to your Firebase account

- Favorites/shares: Locally on device only (UserDefaults)

- Style preferences: Locally on device only (UserDefaults)

- Analytics is DISABLED in Firebase config

Is It Shared: NO - design count stays in your private Firebase account, other data stays on device only

5. CREDITS & PURCHASE DATA (For premium features)

What We Collect:
- Credit balance (number of credits remaining)
- Purchase history (which credit packs purchased)
- Transaction timestamps

Why We Collect It:
- Track your available credits
- Process credit purchases
- Provide purchase receipts
- Prevent fraud

Where It's Stored:
- Credit balance: Firebase Firestore (cloud) + device cache
- Purchase records: RevenueCat servers + Apple's App Store
- Synced across your devices for consistent balance

Note: Payment info (credit cards) handled entirely by Apple, NEVER by us

Credit Packs Available:
- 14 Credits (Starter)
- 50 Credits (Popular)
- 120 Credits (Best Deal)

Credits never expire and are non-refundable.

6. DEVICE PERMISSIONS (Actually requested from users)

We request these permissions for core functionality:

Camera Permission:

- Why: To take photos of your yard

- When: Only when you tap "Take Photo"

- What we access: Camera to capture one photo

- Stored: Locally on your device only

Photo Library Permission:

- Why: To select existing yard photos

- When: Only when you tap "Choose from Library"

- What we access: Only the specific photo you select

- Stored: Locally on your device only

We NEVER:

- Access your entire photo library without permission

- Upload photos without your explicit action

- Share photos with anyone except the AI service (for processing)

- Store photos on our servers permanently

7. TECHNICAL/DIAGNOSTIC DATA (Automatic, minimal)

What's Collected Automatically:

- Device model (e.g., "iPhone 14 Pro")

- iOS version (e.g., "iOS 17.0")

- App version (e.g., "1.0")

- Crash logs (if app crashes)

Why:

- Ensure app works on your device

- Fix bugs specific to certain devices

- Improve app stability

Where Stored:

- Xcode crash reports (local development only)

- NOT sent to external analytics services

Shared: NO - stays local for debugging only

Error Monitoring:
- When errors occur during generation, we log:
 - Error type (e.g., "generation failed")
 - Timestamp
 - Anonymous user identifier (NOT email)
 - Selected style and settings

- Used for: Quickly fixing issues affecting users
- NOT used for: Tracking, advertising, or profiling
- Retention: Errors cleared after 30 days

Internal Monitoring:
- Error alerts sent to our development team for quick issue resolution
- No third-party analytics services involved
- Not used for user tracking or advertising

DATA WE DO NOT COLLECT

We explicitly DO NOT collect:

- Location data (GPS coordinates, city, country)

- Contacts from your address book

- Other apps you have installed

- Browsing history

- Phone number

- Social media profiles

- Health data

- Financial information (payments handled by Apple)

- Device identifiers for advertising (IDFA)

- Biometric data (Face ID/Touch ID stays on device)

- Call logs or SMS messages

- Calendar or reminder data

- Any photos except the ones you explicitly upload

- Precise GPS location (we only use approximate region for plant suggestions)
- Apple ID password or credentials
- Biometric data from Sign in with Apple

We don't use third-party analytics or tracking:

- No Google Analytics

- No Facebook Pixel

- No advertising networks

- No tracking cookies

- No cross-app tracking

HOW WE USE YOUR DATA

1. PROVIDE CORE FUNCTIONALITY

- Process your photos to generate AI yard designs

- Manage your account and preferences

- Save your favorite designs

- Track your trial/subscription limits

2. IMPROVE THE APP

- Fix bugs and crashes

- Optimize generation speed

- Understand which garden styles are popular

- Improve AI design quality

3. COMMUNICATE WITH YOU

- Send password reset emails (when requested)

- Notify about subscription status changes

- Respond to support requests

WE NEVER:

- Sell your data to anyone

- Use your photos for advertising

- Share your data with third parties (except AI processing)

- Send marketing emails (unless you opt-in)

- Track you across other apps or websites

DATA SHARING

Who Has Access to Your Data:

1. GOOGLE GENAI API

What they receive: Your yard photo + text prompt

Why: To generate AI designs

Their privacy policy: https://ai.google.dev/gemini-api/terms

Data retention: Temporarily during processing, then deleted

Your control: Don't upload photos if you don't want AI processing

2. FIREBASE (Google)

What they receive: Email, user ID, design counters

Why: Authentication and data storage

Their privacy policy: https://firebase.google.com/support/privacy

Data retention: Until you delete your account

Your control: Delete account to remove all data

3. REVENUECAT

What they receive: User ID, subscription status

Why: Manage in-app purchases and subscriptions

Their privacy policy: https://www.revenuecat.com/privacy

Data retention: As long as subscription is active

Your control: Cancel subscription

4. APPLE (App Store)

What they receive: Apple ID, payment info, subscription records

Why: Process in-app purchases

Their privacy policy: https://www.apple.com/legal/privacy/

Data retention: Per Apple's policies

Your control: Managed through Apple ID settings

WE DO NOT share your data with:

- Advertisers

- Data brokers

- Marketing companies

- Social media platforms

- Any other third parties

DATA SECURITY

How We Protect Your Data:

1. ENCRYPTION

- All data transmitted over HTTPS (SSL/TLS encryption)

- Firebase uses industry-standard encryption at rest

- Passwords never stored in plain text (hashed by Firebase)

2. ACCESS CONTROLS

- Only you can access your data (Firebase security rules)

- We cannot see your photos or designs

- Authentication required for all data access

3. SECURE APIS

- API calls use secure tokens (not public API keys)

- Server-side validation of all requests

- Rate limiting to prevent abuse

4. MINIMAL STORAGE

- Photos deleted after AI processing

- Only design counters stored long-term

- No unnecessary data retention

What You Can Do:

- Use a strong password

- Enable Face ID/Touch ID on your device

- Keep your device secure

- Log out when using shared devices

YOUR PRIVACY RIGHTS

You have complete control over your data:

RIGHT TO ACCESS

- View what data we have about you

- Request a copy of your information

- Contact us at: privacy@yardflip.ai

RIGHT TO DELETE

- Delete your account anytime through app settings

- When you delete your account, we permanently remove:

  - Your email and profile information

  - Your design generation counters

  - All stored preferences

- Saved designs on your device are deleted when you uninstall the app

RIGHT TO MODIFY

- Update your email address

- Change your display name

- Update your password

DATA PORTABILITY

- Your saved designs are stored on your device

- You can share/export them anytime through the app

- No lock-in - your designs are always accessible

DATA RETENTION

How Long We Keep Your Data:

- Account Info: As long as your account is active

- Design Counters: Until you delete your account

- Saved Designs: Stored locally on your device until you delete them

- Subscription Records: Managed by Apple/RevenueCat per their policies

When You Delete Your Account:

- Firestore data (counters, email) deleted within 30 days

- Firebase Auth account deleted immediately

- Local device data deleted immediately

- Subscription history retained by Apple (required for refunds/disputes)

CHILDREN'S PRIVACY

YardFlip is not directed to children under 13.

- We do not knowingly collect data from children under 13

- If we discover a child under 13 has created an account, we will delete it immediately

- Parents: If you believe your child has created an account, contact us at: privacy@yardflip.ai

Age Requirement: Users must be 13+ to create an account.

CHANGES TO THIS PRIVACY POLICY

We may update this privacy policy from time to time.

How We'll Notify You:

- Email notification to your registered email address

- In-app notification on next app launch

- Updated "Last Modified" date at bottom of this policy

Your Options:

- Review the updated policy

- Continue using the app (acceptance of new terms)

- Delete your account if you disagree with changes

We will always notify you BEFORE implementing changes that affect how we use your data.

CONTACT US

Questions about privacy or data collection?

Email: privacy@yardflip.ai

Support: support@yardflip.ai

Website: yardflip.ai

We typically respond within 48 hours.

LEGAL

Data Controller: YardFlip

Jurisdiction: Compliant with:

- GDPR (European Union)

- CCPA (California)

- Apple App Store Privacy Guidelines

- Australian Privacy Principles (APP)

Third-Party Services:

- Firebase (Google) - Privacy Policy: https://firebase.google.com/support/privacy

- RevenueCat - Privacy Policy: https://www.revenuecat.com/privacy

- Google GenAI - Privacy Policy: https://ai.google.dev/gemini-api/terms

EFFECTIVE DATE

Last Updated: October 4, 2025

Effective Date: October 4, 2025

Version: 1.0

This privacy policy is designed to be clear and honest. We collect the minimum data needed to provide you with an amazing yard design experience. Your privacy matters to us.