Effective 23 October 2026

Privacy Policy

Who runs HaljasVaade, which providers process your data and where, how long we keep it, and how to use your rights.

Analytics choice

Your analytics choice is saved in this browser. You can accept or decline optional analytics at any time.

No choice saved

Controller

HaljasVaade is operated by J&L Serverid OÜ, registry code 11478495, VAT number EE101657514, Haaviku tee 9, Külitse, 61702 Tartu County, Estonia. Contact: info@haljasvaade.ee.

What we process and why

We process your account details (name, email or Apple/Google sign-in), the photos and prompts you upload, the designs generated from them, your purchase status, and technical data needed to run and protect the service. If you join the waitlist, we process your email address.

We use this data to provide your account and designs, handle purchases, send notifications you turn on, keep the service secure, and meet legal obligations. Our legal bases are contract, consent (AI processing, notifications, optional analytics, waitlist), legal obligation, and legitimate interest (security and cookie-free page statistics). We do not sell personal data or use advertising tracking.

Service providers

Hosting and storage: our servers are in the EU.

AI processing: to create and refine your designs, we send your garden photo (without location data) and your wishes to OpenRouter, OpenAI, Google, Meta and Anthropic (all in the USA). OpenRouter receives each request and forwards it to the others. Your name, email and payment details are not sent.

Usage analytics: PostHog (EU), in the app only if you turn it on and on this website if you accept. With your consent this website also uses Google Analytics (USA); it uses Cloudflare (USA) for delivery and cookie-free page counts.

Crash reports: Sentry (EU). Reports contain technical details, not your name or email address.

Purchases and sign-in: Apple, Google and RevenueCat (all USA). Push notifications: Google Firebase (USA), only if you turn them on. Account emails: an email delivery provider.

Some providers are in the USA. For these transfers we rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.

Service providers process data on our behalf. Apple and Google process store and payment data as independent controllers under their own policies.

AI consent and analytics

From version 1.5.6 the app asks for your consent before any photo is sent to the AI providers, and usage analytics is off unless you turn it on in Settings › Privacy. In earlier versions, a photo is sent to the AI providers when you use it for a design, without a separate consent step, and usage analytics is on by default. Updating the app gives you both choices.

You can change both choices at any time in the app’s Settings, and website analytics on this page. Withdrawing consent does not affect processing done before the withdrawal.

How long we keep data

Account, photos, designs and reports you send: until you delete your account. Deleting your account in the app removes them from our service; some short-term technical records are kept for a limited time.

Purchase records: up to 7 years (accounting law), without your account ID after deletion.

Backups and crash reports: for a limited period. After an account is deleted we keep limited records to prevent abuse of one-time offers (legitimate interest). Waitlist email: until you unsubscribe.

Your rights

You have the right to access, correct, export, delete, restrict or object to the processing of your personal data, and to withdraw consent at any time. You can export your data and delete your account in the app settings. For anything else, contact info@haljasvaade.ee.

You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI): https://www.aki.ee/en.

Changes

We may update this policy as the service changes. The current version is always on this page.

Website analytics