1. Who We Are and What This Policy Covers
This Privacy Policy explains how Wyld App Inc. ("WYLD Grow," "we," "us," "our") collects, uses, shares, and protects information about you when you use the WYLD Grow mobile application (the "App"), the website at www.wyldgrow.com (the "Website"), the online store through which we resell third-party nutrients and growing supplies (the "Store"), and all related features and services (together, the "Services").
Wyld App Inc. is the data controller for personal information processed through the Services. We are a Delaware corporation. Our contact details are in Section 18.
This Policy is part of, and should be read with, our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.
Our approach in one paragraph. We collect what the Services need and not more. We do not collect your date of birth or government identification. We do not sell your personal information, do not share it for targeted advertising, and do not run advertising SDKs in the App. Data about what you grow is among the most sensitive information the Services hold, and we treat it that way.
2. Information We Collect
2.1 Information you give us

Account information. Your name, email address, and a password. Passwords are stored only as salted hashes; we cannot see them. If you sign in with Apple or Google, we receive your name and email (or an Apple relay address) from that provider instead of a password.
Age confirmation. Your confirmation, given twice during sign-up, that you are 18 or older. We do not collect your date of birth. See Section 4.
Garden and cultivation data. Everything you enter about your gardens, plants, grow media, containers, irrigation, environment, tasks, harvests, transitions, and notes. This data powers the App and is the core of what we hold about you.
Photos. Images you take or upload using the App's camera or photo-library access, and the technical metadata embedded in them by your device. You control whether to grant those permissions; the App asks before using them and you can revoke them in your device settings.
Location. With your permission, your device location, which we use to determine your local climate, daylight, and seasonal conditions for scheduling. You may withhold or revoke this permission in your device settings. Precise location is treated as sensitive personal information; see Section 14.2.
Chat and AI inputs. Messages you send within the App, including to any AI Feature, and any photos or garden data you submit for AI analysis. See Section 8.
Team collaboration. If your plan allows team members, the email addresses of people you invite and the garden data you choose to share with them. Only the garden data you actively share is visible to a team member; your account details and billing information are not.
Store orders. Your name, shipping address, email, phone number, and order details when you buy Products. Payment card details go directly to Stripe; we never receive or store them.
Communications. Anything you include when you contact us for support, submit feedback, or respond to a survey.
Data exports. If you request an export of your data, a record of that request.

2.2 Information collected automatically

Device and app information. Device type, operating system and version, App version, language, and time zone.
Usage information. Features used, screens viewed, actions taken, and timing, used to operate and improve the App.
Log and security data. IP address, access times, request metadata, and server error logs, used for security and debugging.
Crash and performance reports. When the App crashes or misbehaves, our crash-reporting provider (Sentry) receives technical details of the failure, including device information and IP address. We configure crash reporting to exclude the content of your grow notes and chat messages.
Website cookies and analytics. See Section 9.

2.3 Information from third parties

App platforms. Apple and Google tell us whether a subscription purchased through their stores is active, and provide a transaction identifier. Where available, they also pass us an age category or age-range signal for your account (for example, "adult"). They do not give us your payment details or your birthdate.
Sign-in providers. If you use Sign in with Apple or Google, that provider shares your name and email with us under its own terms.
Subscription management. Our subscription-management provider (RevenueCat, when in use) receives purchase and subscription identifiers from Apple, Google, and Stripe so that your plan status is consistent across platforms.
Payment processors. Stripe tells us whether a payment succeeded, the last four digits and brand of the card used, and billing name and address.

2.4 What we do not collect
We do not collect your date of birth, government identification, financial account numbers, biometric data, health information, or contents of your device beyond what you explicitly share through the App's photo, camera, and location permissions. The App contains no advertising SDKs, social media pixels, or data-broker integrations.
3. How We Use Information
We use information to:

create, secure, and manage your account and authenticate you;
confirm that you are 18 or older and enforce the age and eligibility rules in the Terms;
deliver the Services: generate schedules, calendars, tasks, and reminders based on your garden data, photos, and local conditions;
provide AI Features, where offered (Section 8);
process subscriptions and Store orders, and pass Store orders to the manufacturer for fulfillment;
send transactional messages: receipts, renewal and price-change notices, order confirmations, shipping updates, password resets, security alerts, and changes to the Terms or this Policy;
send marketing email, only with your consent, which you can withdraw at any time;
respond to support requests;
detect, investigate, and prevent fraud, abuse, security incidents, and violations of the Terms;
analyze usage in aggregate to improve the App and Website;
keep evidence that you accepted the Terms and this Policy on a given date; and
comply with law and enforce our agreements.

We do not use your information for behavioral advertising, do not sell it, and do not share it with third parties for their own marketing.
4. Age
The Services are for adults only. You must be at least 18, and at least the legal cultivation age where you live if that is higher, to use them. We rely on three things to enforce this:

your confirmation, given at account creation and again at plan selection, that you are 18 or older;
where available, the age category or age-range signal that Apple or Google provides for your account; and
our right under the Terms to request proof of age if we have reason to believe a confirmation is inaccurate.

We record the fact and date of your confirmations. We do not collect or store your date of birth. If we learn that a user is under 18, we terminate the account and delete its data as described in Section 11, except for records we must keep by law.
5. Legal Bases for Processing (EEA, UK, and Switzerland)
PurposeLegal basis
Providing the App, Website, and Store; subscriptions; order fulfillment; transactional messagesPerformance of a contract (the Terms)
Age confirmation; keeping records of Terms acceptance; tax and accounting recordsLegal obligation, and our legitimate interest in demonstrating compliance
Security, fraud prevention, debugging, crash reporting, aggregate analyticsLegitimate interests (keeping the Services secure and working), balanced against your rights
Marketing email; non-essential cookies; device location and photo permissions; AI FeaturesConsent, which you can withdraw at any time
Responding to legal requests; enforcing the TermsLegal obligation, and legitimate interest in protecting our rights
Where we rely on legitimate interests you may object (Section 14.4). Where we rely on consent, withdrawing it does not affect processing that already happened.
6. How We Share Information
We share personal information only as described below. We do not sell it.
6.1 Service providers (subprocessors)
These companies process data on our behalf under contracts that restrict them to our instructions:
ProviderPurposeData involved
Stripe, Inc.Payment processing for Website subscriptions and Store ordersBilling name and address, card details (held by Stripe only), transaction data
Apple Inc. / Google LLCIn-app subscriptions; sign-in; age signal; push notification deliveryTransaction and subscription identifiers, sign-in identity, age category, device push token
RevenueCat, Inc. (when in use)Subscription status management across platformsPurchase and subscription identifiers, plan status
Railway Corp.Application hosting and databaseAll App data
Amazon Web Services, Inc. (S3)File storagePhotos and App media
Sentry (Functional Software, Inc.)Crash and error reporting for the AppDevice information, IP address, technical crash data
Google LLC (Google Analytics)Website traffic analyticsCookie identifiers, IP address, pages visited (Website only; see Section 9)
Wix.com Ltd.Website hosting and cookie-consent toolingWebsite visitor data, Store order data
Our email delivery providerTransactional emailEmail address, message content
Mailchimp (The Rocket Science Group LLC) (when in use)Marketing email, with your consentName, email, engagement with our emails
Our AI provider (when AI Features are offered)Generating AI OutputYour AI inputs (Section 8)
We keep this list current. Adding a provider that materially changes how your data is handled is a material change under Section 17.
6.2 Hydroponic Research (Store orders)
Products in the Store are manufactured and shipped by Hydroponic Research Inc., California. When you place an order, we send your name, shipping address, email, phone number, and order details to Hydroponic Research and its carriers so they can fulfill and deliver it. Hydroponic Research processes that information under its own privacy policy, available at hydroponic-research.com, for order fulfillment, returns, and its own legal record-keeping. We do not share your garden data with Hydroponic Research.
6.3 Team members
If you invite team members, they see the garden data you share with them and the notes you write in shared gardens. Your name appears as the author of your notes. They do not see your account, billing, or location information.
6.4 Legal and safety
We may disclose information if we believe in good faith that doing so is required by law, subpoena, court order, or other legal process; or is reasonably necessary to protect the rights, property, or safety of WYLD Grow, our users, or the public; to enforce the Terms; or to investigate fraud or security issues.
6.5 Business transfers
If WYLD Grow is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you by email and in-app notice before your information becomes subject to a different privacy policy.
6.6 With your consent
We share information for any other purpose only with your explicit consent.
6.7 Aggregated data
We may share aggregated or de-identified data that cannot reasonably be linked to you, for example overall usage statistics.
7. Location and Photos
Location. If you grant location permission, we use your device location to determine local climate, daylight, and seasonal conditions for your schedules. Precise geolocation is sensitive personal information. You can decline or revoke the permission in your device settings at any time; if you do, location-dependent features may be unavailable or less accurate. California residents may limit our use of precise geolocation as described in Section 14.2.
Photos. If you grant camera or photo-library permission, the App can capture and store plant photos in your garden records. Photos are stored in encrypted cloud storage (AWS S3) and are visible only to you and to team members with whom you share the garden. Photos submitted to an AI Feature are also processed as described in Section 8. Photos are deleted on the schedule in Section 11.
8. AI Features
When the App offers AI Features (for example, plant-photo analysis or a cultivation assistant), the text, photos, and garden data you submit to them ("AI inputs") are sent to a third-party AI provider to generate a response. Our AI provider processes AI inputs only to provide the feature to us, under a data processing agreement, and does not use them to train its models. We use AI inputs and outputs to provide the feature and to improve the Services; you may opt out of the use of your AI inputs and outputs for training our own models in your account settings whenever an AI Feature is offered. Chat messages and AI outputs are stored with your garden records and deleted on the schedule in Section 11. Do not submit personal information about other people, or information you would not want processed by an automated system, to an AI Feature.
9. Cookies and Website Analytics
The Website uses cookies and similar technologies. The App does not use browser cookies; it uses encrypted authentication tokens stored on your device.

Strictly necessary cookies. Session, security (including CSRF protection), load-balancing, and checkout cookies set by us, Wix, and Stripe. These are required for the Website to work and cannot be disabled without losing functionality.
Analytics cookies (Google Analytics). Used to understand aggregate traffic and page usage. Google Signals, advertising features, and ad personalization are turned off; Google acts as our service provider and does not use this data for its own advertising. IP addresses are truncated where the feature is available.
No advertising cookies. We do not use cookies for behavioral advertising, retargeting, cross-site tracking, or sale of data.

Consent. If you visit from the EEA, UK, or Switzerland, the Website shows a consent banner on first visit; analytics cookies are set only after you accept. Elsewhere, you can manage cookies through the banner where shown and through your browser settings.
Do Not Track and opt-out preference signals. The Website honors Global Privacy Control signals as an opt-out of sale/share and, where applicable, a request to limit use of sensitive personal information. The Website does not currently respond to older "Do Not Track" browser signals, for which there is no accepted standard.
10. Communications

Transactional email is necessary to operate your account and orders and cannot be opted out of while you have an account.
Marketing email is sent only with your consent. Every marketing email has an unsubscribe link; you can also opt out at hello@wyldgrow.com.
Push notifications deliver cultivation tasks and reminders triggered by your garden schedule. Control them in your device settings. We do not send promotional push notifications without separate consent.
Text messages. If you provide a mobile number and opt in, we may send account-related and, with separate consent, marketing texts. Message and data rates may apply. Reply STOP to opt out.

11. Data Retention
We keep personal information only as long as needed for the purposes in this Policy. Retention runs on the following schedules, each triggered by a specific event in the Services:
While your subscription is active. Your account, garden data, photos, chat messages, and records are retained for as long as your subscription remains active. There is no automatic deletion of a live, paid account.
After a subscription lapses. If your subscription ends and you do not delete your account:

photos are deleted 60 days after the lapse;
garden records, calendars, tasks, and chat messages are deleted 365 days after the lapse;
your account itself (name, email, and login) remains until you delete it or we close it under the Terms.

When you delete your account. Account deletion is immediate and permanent. We hard-delete your gardens, plants, tasks, calendars, harvest records and logs, runs and transitions, photos (including the files in cloud storage), chat messages, notifications, payment references, subscription records, team invitations, and authentication tokens. Three kinds of record are retained with the link to your account removed rather than deleted: (a) records of your acceptance of the Terms and this Policy (see next paragraph); (b) records that a data export was requested; and (c) notes you wrote in gardens shared with team members, which remain in the shared garden with your authorship removed so that the other members' records stay intact. Our infrastructure providers' encrypted backups may hold copies for up to 90 days after deletion.
Terms acceptance records. Each record of your acceptance of a version of the Terms and this Policy is retained while it is current. When you accept a newer version, the earlier record is retained for two years (730 days) from the date it was superseded, then purged. These records exist solely to demonstrate that you agreed to a specific version on a specific date.
Order and payment records. Records of Store orders and payments are retained separately from your App data for seven years for tax, accounting, and legal purposes (ten years for orders billed to customers in the EU where local VAT rules require it). These records are archived and not used for any other purpose.
Log and security data. Retained for up to 12 months, then deleted. Crash reports in Sentry are retained under Sentry's standard retention period, currently 90 days.
Aggregated analytics. Aggregated data that no longer identifies you may be retained indefinitely.
12. Security
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data we hold, including encryption in transit (TLS) and at rest; salted password hashing; server-side enforcement of age and plan access on every request; restricted, logged access to production systems; and crash-report scrubbing. No system is perfectly secure. If a breach affects your personal information, we will notify you and any regulator as required by applicable law. You can help by using a unique password and enabling any additional security features we offer.
13. International Transfers, EU and UK Representatives
The Services are operated from the United States, and your information is stored and processed there and in any other country where our service providers operate. Those countries may not provide the same level of data protection as your country of residence.
If you are in the EEA, UK, or Switzerland, we transfer your personal data to the United States and other countries under the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, and, where a provider is certified, under the EU–U.S. Data Privacy Framework and its UK Extension. You can request a copy of the relevant safeguards at hello@wyldgrow.com.
Because Wyld App Inc. has no establishment in the EU or UK, we have appointed representatives under Article 27 of the GDPR and the UK GDPR. Their contact details are published at www.wyldgrow.com/privacy and are available on request from hello@wyldgrow.com. You may contact our representatives, or us directly, about any matter under this Policy.
14. Your Rights and Choices
14.1 Everyone
You can, at any time: update your account information in the App; request access to, correction of, or deletion of your personal information; request a copy of your data in a portable format (JSON or CSV); withdraw consent for marketing, location, or photo access; and delete your account from App settings. To make a request, email hello@wyldgrow.com from the address on your account. We will confirm receipt within 10 days and respond within 30 days (45 days where the law allows and the request is complex, with notice to you). We verify requests by matching information you provide against our records and may ask for further verification. An authorized agent may act for you with your written permission. We will not discriminate against you for exercising any right. If we deny a request, we will explain why, and you may appeal by replying with "Appeal" in the subject line.
14.2 California residents
Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to know the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties we share it with; to delete; to correct; to opt out of sale or sharing; to limit the use of sensitive personal information; and to non-discrimination.

Categories we collect (as defined by the CCPA): identifiers (name, email, IP address, device identifiers); customer records (billing name and address, phone number); commercial information (subscription and order history); internet activity (usage and log data, Website analytics); geolocation data (precise, with permission); audio/visual information (photos you upload); inferences drawn for scheduling; and sensitive personal information (account login credentials; precise geolocation). We collect these from you, your device, and the providers in Section 2.3, for the purposes in Section 3, and disclose them for business purposes to the service providers in Section 6.1 and, for orders, to Hydroponic Research.
Sale and sharing. We do not sell personal information and do not share it for cross-context behavioral advertising, and have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of anyone under 16.
Limit the use of my sensitive personal information. We use precise geolocation only to provide the scheduling features you request. You may limit our use by revoking location permission in your device settings, by enabling Global Privacy Control in your browser, or by emailing hello@wyldgrow.com with "Limit Sensitive PI" in the subject line.
Requests. Email hello@wyldgrow.com. We will respond within 45 days, extendable once by 45 days with notice.

14.3 Residents of other U.S. states
If you live in Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or another state with a comprehensive privacy law, you may have rights to access, correct, delete, and obtain a copy of your personal data; to opt out of targeted advertising, sale, and certain profiling (we do none of these); and to appeal a denied request. Precise geolocation is sensitive data under most of these laws and is collected only with your consent. Exercise these rights as described in Section 14.1; appeals are reviewed and answered in writing within 45 days, and if denied you may contact your state attorney general.
14.4 EEA, UK, and Swiss residents
You have the right to access, rectify, and erase your personal data; to restrict or object to processing, including processing based on legitimate interests; to data portability; to withdraw consent at any time; not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects (we make none); and to lodge a complaint with your supervisory authority — for the UK, the Information Commissioner's Office (ico.org.uk); for Ireland, the Data Protection Commission; or the authority in your member state. We encourage you to contact us first at hello@wyldgrow.com or through our representatives (Section 13).
15. Children
The Services are not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has created an account, contact hello@wyldgrow.com and we will terminate the account and delete its data.
16. Third-Party Links and Services
The Services link to third-party websites and services, including Hydroponic Research, Stripe, Apple, and Google. This Policy does not cover them; review their privacy policies before providing information.
17. Changes to This Policy
We may update this Policy. We will post the new version with a revised "Last Updated" date and, for material changes, notify you by email and in-app notice at least 14 days before the change takes effect. Continued use after the effective date is acceptance of the updated Policy. If you do not agree, delete your account before that date.
18. Contact
Wyld App Inc. Email (all privacy matters): hello@wyldgrow.com Mail: Wyld App Inc., c/o Registered Agent, 16192 Coastal Highway, Lewes, DE 19958 (email is faster; mail is forwarded through our registered agent) EU and UK representatives: www.wyldgrow.com/privacy
We acknowledge privacy inquiries within 10 days and respond within the timeframes in Section 14.

Account information. Your name, email address, and a password. Passwords are stored only as salted hashes; we cannot see them. If you sign in with Apple or Google, we receive your name and email (or an Apple relay address) from that provider instead of a password.

Age confirmation. Your confirmation, given twice during sign-up, that you are 18 or older. We do not collect your date of birth. See Section 4.

Garden and cultivation data. Everything you enter about your gardens, plants, grow media, containers, irrigation, environment, tasks, harvests, transitions, and notes. This data powers the App and is the core of what we hold about you.

Photos. Images you take or upload using the App's camera or photo-library access, and the technical metadata embedded in them by your device. You control whether to grant those permissions; the App asks before using them and you can revoke them in your device settings.

Location. With your permission, your device location, which we use to determine your local climate, daylight, and seasonal conditions for scheduling. You may withhold or revoke this permission in your device settings. Precise location is treated as sensitive personal information; see Section 14.2.

Chat and AI inputs. Messages you send within the App, including to any AI Feature, and any photos or garden data you submit for AI analysis. See Section 8.

Team collaboration. If your plan allows team members, the email addresses of people you invite and the garden data you choose to share with them. Only the garden data you actively share is visible to a team member; your account details and billing information are not.

Store orders. Your name, shipping address, email, phone number, and order details when you buy Products. Payment card details go directly to Stripe; we never receive or store them.

Communications. Anything you include when you contact us for support, submit feedback, or respond to a survey.

Data exports. If you request an export of your data, a record of that request.

2.2 Information collected automatically

Device and app information. Device type, operating system and version, App version, language, and time zone.

Usage information. Features used, screens viewed, actions taken, and timing, used to operate and improve the App.

Log and security data. IP address, access times, request metadata, and server error logs, used for security and debugging.

Crash and performance reports. When the App crashes or misbehaves, our crash-reporting provider (Sentry) receives technical details of the failure, including device information and IP address. We configure crash reporting to exclude the content of your grow notes and chat messages.

Website cookies and analytics. See Section 9.

2.3 Information from third parties

Sign-in providers. If you use Sign in with Apple or Google, that provider shares your name and email with us under its own terms.

Subscription management. Our subscription-management provider (RevenueCat, when in use) receives purchase and subscription identifiers from Apple, Google, and Stripe so that your plan status is consistent across platforms.

Payment processors. Stripe tells us whether a payment succeeded, the last four digits and brand of the card used, and billing name and address.

create, secure, and manage your account and authenticate you;

confirm that you are 18 or older and enforce the age and eligibility rules in the Terms;

deliver the Services: generate schedules, calendars, tasks, and reminders based on your garden data, photos, and local conditions;

provide AI Features, where offered (Section 8);

process subscriptions and Store orders, and pass Store orders to the manufacturer for fulfillment;

send transactional messages: receipts, renewal and price-change notices, order confirmations, shipping updates, password resets, security alerts, and changes to the Terms or this Policy;

send marketing email, only with your consent, which you can withdraw at any time;

respond to support requests;

detect, investigate, and prevent fraud, abuse, security incidents, and violations of the Terms;

analyze usage in aggregate to improve the App and Website;

keep evidence that you accepted the Terms and this Policy on a given date; and

comply with law and enforce our agreements.

your confirmation, given at account creation and again at plan selection, that you are 18 or older;

where available, the age category or age-range signal that Apple or Google provides for your account; and

our right under the Terms to request proof of age if we have reason to believe a confirmation is inaccurate.

Strictly necessary cookies. Session, security (including CSRF protection), load-balancing, and checkout cookies set by us, Wix, and Stripe. These are required for the Website to work and cannot be disabled without losing functionality.

No advertising cookies. We do not use cookies for behavioral advertising, retargeting, cross-site tracking, or sale of data.

Transactional email is necessary to operate your account and orders and cannot be opted out of while you have an account.

Marketing email is sent only with your consent. Every marketing email has an unsubscribe link; you can also opt out at hello@wyldgrow.com.

Push notifications deliver cultivation tasks and reminders triggered by your garden schedule. Control them in your device settings. We do not send promotional push notifications without separate consent.

Text messages. If you provide a mobile number and opt in, we may send account-related and, with separate consent, marketing texts. Message and data rates may apply. Reply STOP to opt out.

photos are deleted 60 days after the lapse;

garden records, calendars, tasks, and chat messages are deleted 365 days after the lapse;

your account itself (name, email, and login) remains until you delete it or we close it under the Terms.

Sale and sharing. We do not sell personal information and do not share it for cross-context behavioral advertising, and have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of anyone under 16.

Requests. Email hello@wyldgrow.com. We will respond within 45 days, extendable once by 45 days with notice.