Privacy Policy

This Privacy Policy explains how Mavelli FZCO ("we", "us", or "our") collects, stores, uses, and shares your personal information when you use the Plantful mobile application and related services (collectively, the "Services").

If you do not agree with our policies and practices, please do not use our Services. For any questions or concerns, please contact us at contact@mavelli.io.

1. WHAT INFORMATION DO WE COLLECT?

Information You Provide:

• Email address
• Username
• Password
• Information entered when contacting support or filling out forms

Payment Information:

We use Apple Store and Google Play to process payments. Please refer to their respective policies: Apple, Google

Device and App Data:

• IP address
• Device model, operating system, browser version
• App version, usage logs
• Mobile carrier and device identifiers

Location Information:

With permission, we may collect precise or general geolocation data to enhance your app experience. You can revoke location access via your device settings.

Social Media Data:

If you sign up using a social login (e.g. Google or Facebook), we may collect your profile name, email address, and profile photo.

Automatically Collected Information:

• Log and usage data
• Device and connection information
• Cookies and similar technologies

2. HOW DO WE PROCESS YOUR INFORMATION?

We use your data for the following purposes:

• Create and manage your account
• Provide and personalize Services
• Respond to customer inquiries
• Enable social and community features
• Send promotional content (with your consent)
• Improve performance and usage analytics
• Comply with legal obligations

3. LEGAL BASES FOR PROCESSING

For EU, UK, and Swiss Residents (GDPR & UK GDPR):

We rely on the following lawful bases:

• Consent
• Performance of a contract
• Legitimate interests
• Legal obligations
• Protection of vital interests

For US Residents (including CCPA/CPRA):

You may:

• Request to know, access, or delete personal data
• Opt out of sale or sharing (though we do not sell data)
• Correct inaccuracies
• Limit use of sensitive data (we do not process such data)

For Canadian Residents (PIPEDA):

We collect, use, or disclose personal data only with consent, or as otherwise allowed by law (e.g., legal obligations or investigations).

For Other Regions:

We comply with applicable local privacy laws where the app is available and will support user rights accordingly.

4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

We may share your data with:

• Cloud service providers (e.g., Google Cloud Platform)
• Communication tools (e.g., Firebase)
• Analytics tools (e.g., Google Analytics)
• Ad networks (e.g., Google Ads)

We ensure our partners follow data protection agreements and process your data securely and only under our instruction.

We may also disclose your data:

• To comply with legal obligations
• During company mergers or acquisitions

5. COOKIES AND TRACKING TECHNOLOGIES

We may use cookies, beacons, and pixels for functionality, analytics, and advertising. You can manage your preferences in your browser or device settings.

6. SOCIAL LOGINS

If you use third-party social accounts to log in, we will access limited profile data based on your privacy settings with that platform. We recommend reviewing their policies directly.

7. INTERNATIONAL DATA TRANSFERS

Your information may be stored or processed outside your country of residence, including in countries with different data protection laws. We apply safeguards like Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) to protect your data.

8. DATA RETENTION

We keep your information for as long as necessary to fulfill the purposes outlined in this policy. When no longer needed, your data will be anonymized or securely deleted.

9. SECURITY

We use a combination of technical and organizational safeguards to protect your data. However, no online system can be completely secure. Use the Services at your own risk and practice safe browsing.

10. YOUR PRIVACY RIGHTS

You may have the right to:

• Access or correct your personal data
• Request deletion of your data
• Restrict or object to certain uses
• Withdraw consent
• Lodge a complaint with a data protection authority

To exercise any rights, contact us at contact@mavelli.io.

11. DO-NOT-TRACK CONTROLS

We currently do not respond to DNT browser signals due to lack of standardized protocol. If adopted, we will update this policy accordingly.

12. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

California residents have specific rights:

• Right to know, delete, or access personal information
• Right to correct inaccuracies
• Right to opt out of selling or sharing (we do not sell data)
• Right to limit use of sensitive data (not applicable)
• Right to non-discrimination

To exercise these rights, email us at contact@mavelli.io.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes are effective immediately upon posting. Material changes will be announced within the app or via email.

14. CONTACT US