LeafbudsPrivacy policy
Last updated: 11 November 2026
1. Who is responsible for your data?
Leafbuds AB, reg. no. 559610-4298, is the controller for the processing of your personal data in the Leafbuds app (the web app and the website leafbuds.se). Contact for privacy matters: support@leafbuds.se.
2. What data we process and why
| Data | Examples | Why |
|---|---|---|
| Account | Email address, password (hashed, not stored in plain text), user ID, sign-in times | Create and protect your account, sign in |
| Profile | Display name, username, profile picture/avatar, short description (bio) | Show your profile in the app and to friends |
| Plants and rooms | Plant names, species, rooms, photos, care settings (e.g. custom watering interval), notes and memories | The app's core function: keeping track of your plants |
| Photos | Plant photos and growth photos with notes | Show how your plants develop |
| Care logs | Watering, misting, fertilising etc. with timestamps | Reminders, statistics, points |
| Mood and badges | Points, streak, mood, badges | Motivate you and show progress |
| Settings | Sharing choices, whether you accept nudges, sync mode, reminders on/off | Adapt the app to you |
| Social features | Friends and friend requests, nudges, watering help, away periods | Let you and your friends help each other |
| Technical logs | IP address, device/browser, error logs | Operations, security, troubleshooting |
We do not collect your location, your contacts, payment details or sensitive data. We never sell your data. There are no ads and no cross-app tracking.
3. Legal basis
- Contract (Art. 6(1)(b) GDPR): account, profile, plants, photos, logs, points, settings and the social features you choose to use – needed to provide the service.
- Legitimate interest (Art. 6(1)(f)): security, troubleshooting and abuse protection. You may object (see section 7).
- Consent (Art. 6(1)(a)): notifications and reminders on your device. You can turn them off at any time in the app or in your device settings.
4. Where the data is stored and who we share it with
Data is stored with our hosting and database providers, Lovable and Supabase, who process data on our behalf under data processing agreements.
- Supabase Inc. – sign-in, database, photo storage, and confirmation and password-reset emails.
- Lovable (Lovable Labs AB) – hosting of the web app.
- Google Fonts (Google) – the app loads fonts from Google's servers. Your IP address is then sent to Google.
If data is transferred outside the EU/EEA, this is based on the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. If you follow a link to another service, their privacy policy applies. We may disclose data to authorities when required by law.
5. Sharing with friends
Friends see only what you choose to share in the sharing settings, for example garden, diary, badges, mood, away status and home map. You can change or turn off sharing at any time. Nudges and watering help are used only with friends you have chosen.
6. How long we keep data
We keep the data for as long as you have an account. If you delete your account, the data is removed, including photos, within 30 days.
7. Deleting your account and your rights
To delete your account, email support@leafbuds.se from the address linked to the account. Deletion in the app is coming soon. You can download your data as a file (JSON) in the app.
Under the GDPR you have the right to:
- know what data we hold about you (access),
- have incorrect data corrected (rectification – you can change most of it yourself in the app),
- have your data deleted (erasure),
- receive your data in a machine-readable format (data portability),
- object to processing based on legitimate interest (objection),
- request restriction of processing,
- withdraw consent at any time.
We reply within one month. If you are unhappy, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
8. Children and age limit
Leafbuds is not intended for children under 13. If we learn that a child under the limit has an account, we will delete it.
9. Cookies and local storage
We use no advertising or tracking cookies. The app and website store only necessary data locally on your device (localStorage, sessionStorage and cache), for example your sign-in, whether reminders are on, which tips you have dismissed and images for faster loading. This is required for the service to work and therefore does not require consent.
10. Security
All traffic is encrypted (HTTPS). Passwords are hashed and not stored in plain text. Database access is restricted so that you can only see your own data and what friends have chosen to share (row-level security). Only authorised staff have access to the systems. In the event of a personal data breach that poses a risk, we notify IMY within 72 hours, and you if the risk is high.
11. Changes
We may update this policy. For material changes, we will notify you in the app or by email before they take effect. The date at the top shows the latest version.
12. Contact
Leafbuds AB, support@leafbuds.se.