Your lawn is personal.

Information Lawny processes

• Account and identity: your email address, account identifier, optional display name, authentication provider, and account or security events.
• Lawn and care content: lawn profiles, approximate stored lawn coordinates, place name, timezone, country, hemisphere, notes, reminders, care events, scores, achievements, chats, and data you choose to enter.
• Location and weather: when you allow location access, iOS may provide coordinates in memory. Lawny stores coordinates rounded to roughly 100 metres with related regional settings. Apple Weather receives a coordinate when WeatherKit is requested.
• Photos and AI requests: photos you select or capture, scan type, prompt or question, structured results, confidence band, and model or schema versions. Lawny removes embedded photo location metadata and bounds image size before upload.
• Purchases: App Store and subscription-management status, product, expiry, trial, grace-period, billing-retry, and transaction identifiers. Lawny does not receive your full payment-card details.
• Operational and security data: bounded request identifiers, device and App Attest signals, country signal, rate-limit counters, timestamps, and temporarily processed network information such as IP address for security and abuse prevention.

How information is used

We process information to create and secure your account; synchronize your records; provide weather, reminders, widgets, subscriptions, deletion, and an AI feature you request; prevent abuse and control provider spending; meet legal obligations; and maintain the service.

Where European law applies, the legal bases are performance of our contract, your consent for optional device permissions and content, legitimate interests in security and reliable operation, and compliance with law. You can withdraw a device permission in iOS Settings. In app versions with AI Data Sharing controls, Lawny asks for explicit permission before sending content to OpenAI. You can withdraw it in Lawny Settings → AI Data Sharing. The choice applies to your account on that device; withdrawing it stops new AI requests but cannot recall content already sent. Other features remain available.

What is required and what is optional

An account is required to save and synchronize Lawny records. Location, camera, photo-library, notification, and AI features are optional and are requested only when relevant. You may enter a lawn location manually instead of granting device location access. Lawny Premium AI tools require an active entitlement.

Providers and international transfers

Lawny uses service providers only for the functions described below:

• Cloud hosting and database providers: authentication, US-East database, private storage, and server functions.
• Apple: Sign in with Apple, App Store and StoreKit, App Attest, notifications, and WeatherKit.
• Google: optional account authentication. Google Sign-In's privacy declaration includes account contact information, which can include a phone number, user and device identifiers, coarse location, other authentication data, and usage data for sign-in functionality and service analytics. Lawny requests no additional Google scopes and does not use a phone number as an app account field.
• Subscription-management providers: subscription entitlement processing.
• OpenAI: AI processing of the photos and questions you submit, relevant recent chat history and linked scan results, language and treatment preferences, and a pseudonymous account identifier to generate the lawn advice you request. Requests are made by Lawny's server, not directly by the app.
• IP-to-country lookup providers: transient IP-to-country resolution for AI territory compliance. Lawny does not retain the raw address from this lookup.
• Transactional email delivery providers: transactional account email such as one-time codes and deletion challenges.
• Website hosting providers: hosting of lawny.app and its legal and support pages.

Some processing occurs in the United States or other countries. Where required, transfers rely on provider data-processing terms, Standard Contractual Clauses, adequacy decisions, or another lawful mechanism. Provider terms also apply where Apple or Google acts as an independent controller.

Retention and deletion

• Account records remain while your account is active unless you delete an individual item sooner.
• Diagnostic media remains private until its scan, linked lawn, or account is deleted. Active access is revoked immediately after deletion and queued storage objects are designed to be physically purged within 24 hours.
• Deleting a lawn removes records actually linked to that lawn. Other lawns and unlinked records remain.
• Security, rate-limit, and transaction records are retained only for bounded operational, fraud, legal, or accounting needs.
• Provider-managed backups may retain encrypted copies until their normal retention period expires. They are not available in the active product and cannot be selectively removed earlier.

You can delete your account from Settings inside Lawny after completing the verification step. If you cannot access the app, contact support from the account email.

Your choices and rights

Lawny provides in-app access, correction, item deletion, and account deletion. Depending on where you live, you may also have rights to object, restrict processing, portability, withdraw consent, or complain to a data-protection authority. Email support@lawny.app to exercise a right, including requesting a portable copy where applicable. We may need to verify that the request belongs to you.

Security

Lawny uses Apple, Google, or email one-time-code authentication; device-bound Keychain session storage; row-level database isolation; private media; short-lived signed access; provider-account MFA; bounded inputs; and server-side subscription and AI authorization. No system is perfectly secure, so report suspected vulnerabilities privately without including another person's data.

Children

Lawny is not directed to children under 13, or a higher minimum age where local law requires it, and we do not knowingly collect their personal data without legally valid parental authorization.

No tracking or sale

Lawny does not use IDFA, targeted advertising, or third-party cross-app tracking, and does not sell or share personal data for cross-context behavioural advertising.

Changes and contact

Material changes will be posted here with a new effective date and, where required, presented in the app. Questions, privacy requests, and general support are available at support@lawny.app.