Arroseo — Global Privacy & Cookies Policy

This Privacy & Cookies Policy explains how Arroseo ("we", "us", "our") collects, uses, shares and protects your data when you use:

• The Arroseo mobile application (iOS & Android), and
• The Arroseo.com website (informational only)

By using Arroseo, you agree to this Policy.

Arroseo is not intended for children under 13, and we do not knowingly collect data from them.

Azsune Production is the data controller for the personal data processed under this Policy.

Information We Collect

1.1 Information you provide (App)

• First name
• Email address
• Password
• Plant details (names, types, watering schedule)
• Photos you choose to upload (plants, notes)
• Feedback or support messages

1.2 Automatically collected data (App)

• Device information (model, OS version, installation ID)
• Usage data (screens visited, interactions, session length)
• Crash logs and diagnostics
• Advertising identifier (IDFA/AAID) — only with consent
• Region/language settings

1.3 Website data (Arroseo.com)

• Essential cookies
• Optional analytics cookies (only if accepted)
• No personal account or uploads on the website

How We Use the Information

Essential purposes

• Create and manage your account
• Store and sync your plant information
• Send watering reminders
• Provide AI plant identification/analysis
• Ensure performance, functionality, and security

Analytics (with consent)

• Understand how the app is used
• Improve user experience and product features

Advertising (with consent)

• Non-personalised ads by default
• Personalised ads only if you opt-in
• Fully compliant with Apple's ATT rules

Legal reasons

• Prevent abuse or fraud
• Comply with legal obligations when necessary

Legal Bases for Processing

Depending on your location (EU, UK, etc.), we rely on:

Contractual necessity — providing core features (account, plant tracking, photo storage)

Consent — optional analytics, advertising, cookies, and AI photo analysis

Legitimate interests — security, usability improvements

Legal obligations

Cookies & Tracking Technologies

In the app

We use:

• Essential trackers (authentication, syncing, reminders)
• Crash reporting via Firebase Crashlytics (essential)
• Analytics (Firebase Analytics) — only with consent
• Advertising identifiers (IDFA/AAID) — only with consent

You may withdraw your consent at any time via the app settings when available, or by contacting us at arroseo.app@gmail.com

On the website

• Essential cookies (functional)
• Analytics cookies (optional, based on consent)
• No advertising cookies

You can accept or refuse optional cookies at any time via the cookie banner or settings on the website.

Sharing Your Data

We do not sell personal data.

We may share information with trusted service providers who help us:

Service providers

• Firebase (Google Cloud, EU hosting available) — hosting, authentication, analytics, crash logs. Firebase acts as a data processor on our behalf under a data processing agreement.
• AI processing provider — temporary analysis of plant photos
• Advertising partners (only if you consent)

All partners process data solely on our behalf and under strict privacy safeguards.

International Transfers

Your data may be stored or processed outside your home country (including EU, UK, US). When doing so, we rely on:

• Adequacy decisions
• Standard Contractual Clauses (SCCs)
• Additional technical and contractual safeguards

Data Retention

• Account data: kept until the account is deleted
• Plant photos: deleted with your account
• Analytics: kept up to 13 months
• Crash logs: 3–6 months
• Advertising identifiers: 13 months
• Website cookies: 6–13 months

Some data may be retained longer if required by law.

Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your data
• Correct inaccurate information
• Delete your account and all stored data
• Withdraw consent (analytics/ads)
• Object to certain processing
• Data portability

California (CCPA/CPRA)

You may also:

• Opt-out of sharing personal data for personalised ads
• Request disclosure of data categories
• Request deletion

To exercise your rights, contact: arroseo.app@gmail.com

Advertising & Consent Requirements

Apple App Tracking Transparency (iOS)

We ask for permission before:

• Accessing IDFA
• Linking your activity with third-party data

The app works even if you refuse.

Google Play Data Safety

We clearly disclose:

• Types of data collected
• Purposes
• Whether data is shared
• User controls and deletion options

Security Measures

We implement appropriate technical and organisational measures to protect personal data.

We use:

• Encryption in transit and at rest
• Restricted access controls
• Secure cloud infrastructure
• Regular audits and threat monitoring

No system is perfectly secure, but we follow industry standards.

Links to Third-Party Services

Some features may link to third-party resources (e.g., ads, external websites). Their privacy practices are independent from ours.

Changes to This Policy

We may update this Policy from time to time. Significant updates will be announced in-app or on the website.

Contact Us

If you have questions about privacy: arroseo.app@gmail.com