Legal
Your lawn is personal.
Lawny shows no ads and does not sell personal data. To measure its own ads on Facebook and Instagram, Lawny shares limited data with Meta, as described under “Ad measurement, no ads, and no sale”, and asks before it tracks you across other companies' apps. This policy explains what the iPhone app and lawny.app process, why, and what choices you have.
Effective October 28, 2026, with Lawny 1.0.2
Controller: Mirza Coco Lupic, Sweden
Privacy contact: support@lawny.app
Information Lawny processes
- Account and identity: your email address, account identifier, optional display name, authentication provider, and account or security events.
- Lawn and care content: lawn profiles, approximate stored lawn coordinates, place name, timezone, country, hemisphere, notes, reminders, care events, scores, achievements, chats, and data you choose to enter.
- Location and weather: when you allow location access, iOS may provide coordinates in memory. Lawny asks iOS for approximate location by default and stores coordinates rounded to roughly 1 kilometre with related regional settings. Apple Weather receives a coordinate when WeatherKit is requested.
- Photos and AI requests: photos you select or capture, scan type, prompt or question, structured results, confidence band, and model or schema versions. Lawny removes embedded photo location metadata and bounds image size before upload.
- Purchases: App Store and subscription-management status, product, expiry, trial, grace-period, billing-retry, and transaction identifiers. Lawny does not receive your full payment-card details.
- Paywall measurement: RevenueCat receives paywall impressions, offering and experiment context, and subscription records to compare subscription options and measure conversion. Paywall impressions are linked to the subscription account identifier. This does not include lawn details, photos or chat content.
- Operational and security data: bounded request identifiers, device and App Attest signals, country signal, rate-limit counters, timestamps, and temporarily processed network information such as IP address for security and abuse prevention. Per account, Lawny keeps only the type and cost of each AI request, for the monthly AI allowance. Rate-limit counters keep device and network fingerprints for about a day and are not stored with your account.
- Ad measurement: only if you allow tracking, Meta's software in the app reports when the app is opened, and RevenueCat reports trial starts and subscriptions to Meta. These reports carry Meta's anonymous identifier for your device, Apple's advertising identifier (IDFA), the app's vendor identifier (IDFV), your network address, and a scrambled (hashed) form of your Lawny account identifier. They do not include lawn details, photos, chats, your name, or your email address. If you decline, nothing is sent to Meta from Lawny. For everyone, Lawny uses Apple's privacy-preserving ad attribution, through which Apple may tell Meta that one of its ads led to an install without saying whose.
- Anonymous usage and diagnostics: to improve the app, Lawny counts how its features are used, such as onboarding steps seen, scans finished and how long they took, paywall views, crashes, and slow launches (crash and performance counts come from Apple's MetricKit). These counts are sent without your account, login token, or any device or install identifier. They carry only the app version, iOS version, App Store country, whether Premium is active, and the week the app was installed. Lawny's server does not read or keep the network address for them and stores only daily totals. AI speed and size figures are kept only as hourly totals that name no account.
How information is used
We process information to create and secure your account; synchronize your records; provide weather, reminders, widgets, subscriptions, deletion, and an AI feature you request; prevent abuse and control provider spending; meet legal obligations; maintain the service; understand subscription conversion and the results of paywall experiments; and measure and improve Lawny's own advertising on Facebook and Instagram.
Where European law applies, the legal bases are performance of our contract, your consent for optional device permissions and content, your consent in the tracking question for measuring Lawny's ads with Meta, legitimate interests in security and reliable operation, and compliance with law. You can withdraw a device permission in iOS Settings. In app versions with AI Data Sharing controls, Lawny asks for explicit permission before sending content to OpenAI. You can withdraw it in Lawny Settings → AI Data Sharing. The choice applies to your account on that device; withdrawing it stops new AI requests but cannot recall content already sent. Other features remain available.
What is required and what is optional
An account is required to save and synchronize Lawny records. Location, camera, photo-library, notification, and AI features are optional and are requested only when relevant. You may enter a lawn location manually instead of granting device location access. Lawny Premium AI tools require an active entitlement.
Providers and international transfers
Lawny uses service providers only for the functions described below:
- Cloud hosting and database providers: authentication, US-East database, private storage, and server functions.
- Apple: Sign in with Apple, App Store and StoreKit, App Attest, notifications, and WeatherKit.
- Google: optional Google account authentication in Apple's sign-in sheet. Google returns your name, email address, and Google account identifier, which Lawny's authentication service uses to sign you in. Lawny requests no additional Google scopes and does not include Google's sign-in SDK.
- RevenueCat: subscription entitlement processing, subscription lifecycle analytics and paywall experiment measurement, and forwarding trial and subscription events to Meta for ad measurement.
- Meta Platforms: measurement of Lawny's ads on Facebook and Instagram, using the app-open, trial, and subscription events and identifiers described above, only if you allow tracking. Meta also processes this data as an independent controller under its own terms.
- OpenAI: AI processing of the photos and questions you submit, relevant recent chat history and linked scan results, language and treatment preferences, and a pseudonymous account identifier to generate the lawn advice you request. Requests are made by Lawny's server, not directly by the app.
- IP-to-country lookup providers: transient IP-to-country resolution for AI territory compliance. Lawny does not retain the raw address from this lookup.
- Transactional email delivery providers: transactional account email such as one-time codes and deletion challenges.
- Website hosting providers: hosting of lawny.app and its legal and support pages.
Some processing occurs in the United States or other countries. Where required, transfers rely on provider data-processing terms, Standard Contractual Clauses, adequacy decisions, or another lawful mechanism. Provider terms also apply where Apple or Google acts as an independent controller.
Retention and deletion
- Account records remain while your account is active unless you delete an individual item sooner.
- Diagnostic media remains private until its scan, linked lawn, or account is deleted. Active access is revoked immediately after deletion and queued storage objects are designed to be physically purged within 24 hours.
- Deleting a lawn removes records actually linked to that lawn. Other lawns and unlinked records remain.
- Security, rate-limit, and transaction records are retained only for bounded operational, fraud, legal, or accounting needs. Rate-limit counters are deleted after about a day, per-account AI request records after about a month, security events after 90 days, and network-derived country checks after 14 days. Subscription transaction records are kept for accounting.
- Anonymous daily usage totals and hourly AI totals are kept for up to 25 months.
- Provider-managed backups may retain encrypted copies until their normal retention period expires. They are not available in the active product and cannot be selectively removed earlier.
You can delete your account from Settings inside Lawny after completing the verification step. If you cannot access the app, contact support from the account email.
Your choices and rights
Lawny asks once whether it may track you across other companies' apps and websites. You can answer “Ask App Not to Track”, or change your answer at any time in iOS Settings → Privacy & Security → Tracking. Lawny works the same either way. If you decline, Lawny sends nothing about you to Meta.
Lawny honors paywall-analytics opt-outs saved in earlier app versions. Subscription records remain necessary to operate purchases, renewals, restore and billing support. Contact support with questions or to request deletion of previously collected analytics.
Lawny provides in-app access, correction, item deletion, and account deletion. Depending on where you live, you may also have rights to object, restrict processing, portability, withdraw consent, or complain to a data-protection authority. Email support@lawny.app to exercise a right, including requesting a portable copy where applicable. We may need to verify that the request belongs to you.
Security
Lawny uses Apple, Google, or email one-time-code authentication; device-bound Keychain session storage; row-level database isolation; private media; short-lived signed access; provider-account MFA; bounded inputs; and server-side subscription and AI authorization. No system is perfectly secure, so report suspected vulnerabilities privately without including another person's data.
Children
Lawny is not directed to children under 13, or a higher minimum age where local law requires it, and we do not knowingly collect their personal data without legally valid parental authorization.
Ad measurement, no ads, and no sale
Lawny shows no ads and does not sell personal data or give it to data brokers. It advertises itself on Facebook and Instagram, and uses Meta's measurement to learn which ads bring people who install the app and start a trial. Only if you allow tracking does Lawny send Meta the reports described under “Ad measurement” above, which Meta can link with what it knows about the ads you saw. If you decline, Lawny sends nothing about you to Meta; Apple's privacy-preserving attribution may still tell Meta, without identifying you, that an install came from one of its ads. The content you create in Lawny is never shared with Meta.
Changes and contact
Material changes will be posted here with a new effective date and, where required, presented in the app. Questions, privacy requests, and general support are available at support@lawny.app.