Privacy policy
Version 2026-10-27
BetterSeed is operated by Ihsan Fuadi. Contact: danzku290906@gmail.com.
Guest use: your garden stays on your device. Android may back up app preferences according to your device settings. Manual exports are controlled by you.
Account data: for email accounts we store your email, a password hash, and verification status. For Google accounts we store your Google identifier and email; we do not receive your Google password or request Drive access. We store accepted terms version, login sessions, encrypted authenticator secrets, hashed recovery codes, and temporary verification challenges to secure your account.
Cloud sync: while signed in, BetterSeed uploads habits and titles, completion history, water and tree progress, garden appearance and placement, and selected sound/motion preferences. Avoid putting sensitive personal information in habit titles. Local MP3 files, notification permission, and wallpaper images are not uploaded. Sync occurs while the app is active and connected. Conflicting device versions require your choice.
Purchases: Google Play processes payments. Our server verifies purchase tokens with Google and stores coin transactions and unlocked packs. We do not receive payment-card details. Purchase information cannot be edited through garden backup or sync.
Service providers: our hosting provider stores the MySQL database. Google provides sign-in and payment services. Verification and password-reset email is sent through Gmail Relay (gmailrelay.vercel.app) and Gmail; the relay receives your destination email and message, including the time-limited code. These services may process data outside your country. No advertising or analytics SDK is added by this account system.
Retention: account and synced garden data remain until you delete your account. Email codes expire after 10 minutes; login challenges after 5 minutes. Undelivered messages are removed when expired; completed messages are removed immediately. Rate-limit identifiers are keyed hashes and expire after their window. Expired sessions and challenges are cleaned by a maintenance worker. Unverified accounts older than 7 days are removed. Database backups are retained for at most 30 days under the deployment policy.
Deletion: Settings → Account & sync → Delete account permanently removes account identity, cloud garden, sessions, authenticator data, and entitlements from the active database. A keyed anonymous purchase fingerprint and financial deltas remain to prevent duplicate delivery/fraud; these contain no email or Google identifier. Deleting an account does not issue a Google Play refund. You may also request deletion using the support email above and the public /delete-account page; identity verification is required. Device exports and Google-managed purchase records are outside our control. Other offline devices may retain downloaded progress or local recovery copies. Clear app data or uninstall on those devices to erase those local copies; deleted accounts cannot sync them back.
Your choices: use guest mode, export your garden, sign out, manage two-factor authentication, or delete your account. Contact us to request access or correction. We do not knowingly collect account information from children under 13 (or a higher local minimum age). Ask a guardian for help if applicable.
We use HTTPS, server-side authorization, password hashing, encrypted secrets, and limited retention. No service can promise absolute security. Changes to this policy are published here with a new version.