Jardingo
Privacy policy
Last updated: 12 October 2026
This is a translation. In case of any difference, the French version prevails.
- Without an account, your garden stays on your device. With an account, it is also stored on our server, in France, so that it can be synchronised between your devices.
- We only collect what is needed to run the app. No advertising, no audience measurement, no trackers, and we neither sell nor rent any data.
- Your friends can visit your garden, but never find out its address: its location is sent to them offset.
- You can delete your account at any time from the app, and request a copy of your data.
1. Who is responsible for your data
The data controller is Maxime DELACHAVONNERY, publisher of Jardingo in a personal capacity (see the legal notice).
For any question about your data: contact@jardingo.app.
2. Without an account
Jardingo works without an account. Your garden, your plants and your photos are then stored only in your browser's or the app's storage, on your device. We receive none of it, unless you send us feedback (see section 3).
Some features nevertheless query external services from your device (aerial photos, cadastre, weather): see section 6.
3. The data we process, and why
When you create an account, the following data is stored on our server.
| Data | What it is used for | Legal basis |
|---|---|---|
| Account: username, email address, password (stored in irreversibly encrypted form, never in plain text), registration date. | Signing you in, synchronising your devices. The email address (and, when you change it, the new one, kept pending until you confirm it) is used only to confirm it and to let you choose a new password if you forget it: no newsletter or advertising. If you sign in with Google, we receive from Google your Google identifier, your email address and your first name (suggested as a username, which you choose). If you sign in with Apple (on iPhone and iPad), we receive from Apple your Apple identifier and your email address, or Apple's relay address if you choose to hide yours. | Performance of the service you request (contract). |
| Gardens: name, exact location and outline of the plot, altitudes and map features from the IGN, the French national mapping agency (buildings, roads, watercourses), and what you draw on it: beds, structures, terraces and paths, fences, string lights, relief; your animals (species, name, coat); garden thumbnail. | Displaying your garden in 3D, calculating sun and shade, finding your plants. | Contract. |
| Plants: name, species, location, size, planting date, photo, and the GPS position recorded when you add the plant. | Placing the plant in your garden and recognising it. | Contract. |
| Calendar: tasks ticked off or ignored, with their date. | Not suggesting them to you again, on all your devices. | Contract. |
| Network: your friends, friend requests, your invite code, the notes you leave in a garden's guestbook or on one of its plants (500 characters at most), and whether they have been read. | Running garden visits between friends and the guestbook. | Contract. |
| Blocks and reports: the people you block; when you report a note, a garden or a person, the reason you choose, any details you add, the person reported and the text of the reported note (copied, so the evidence remains even if the note is deleted). The person reported is not told who reported them. | Protecting you from someone, and allowing us to review every report and remove content or accounts that break the terms of use. Each report also reaches us by email, in our contact inbox. | Legitimate interest (user safety and content moderation). |
| Notifications, if you turn them on in the app: your device's notification identifier (provided by Google on Android, by Apple on iPhone and iPad), the device type and the date. | Letting you know about a friend request, a note left in your garden, a reply to your note, or that a bug you reported has been fixed or an idea you suggested has been implemented. | Consent: you turn them on, and you can turn them off at any time (in the app or in your phone's settings). |
| Plant identification: the date of the request, the suggested species and its probability. The photo sent for identification is not kept: it is only passed on to Pl@ntNet. | Identifying the plant; counting your requests for the day (daily quota). | Contract; legitimate interest (sharing the free quota between users). |
| Feedback (bug, idea or other message), with or without an account, only if you send some from the app: your message, its date, your account if you are signed in, or otherwise the email address you give so that we can reply to you (optional); the app version, the device type (browser, Android, iPhone), the language, the page open, the screen size, the identification of the browser and of the graphics card; and, if you leave it ticked, a screenshot of your garden view. | Understanding and fixing problems, improving the app, replying to you, and letting you know when it is done. Each piece of feedback also reaches us by email, in our contact inbox. | Legitimate interest (improving the app based on what you write to us); it is you who chooses to send feedback and to attach the screenshot. |
| Technical data: server logs (date, page requested, response, browser type). Your IP address is used for a brief moment to limit the number of requests against abuse, in memory only: it is not stored. When the app or the server runs into an error, an error report is sent to Sentry (see section 6): the error message and where it occurred in the code, the app version, the type of device and browser, the language, the open page and the last actions before the error (pages opened, buttons tapped, requests, without their parameters; for map services, only their domain name). Never your account, your email address, your IP address or the content of your garden. | Security and proper functioning of the service; detecting and fixing bugs. | Legitimate interest. |
Location. With your permission, the app reads your device's precise location at two moments only: when you add a plant (to place it, and to locate the garden the first time), and when you centre the map on yourself while drawing your plot (that location is not stored). Never continuously, never in the background. You can refuse: you then simply place your plants by hand.
Photos and screenshots. Before upload, and again on the server, photos are re-saved without their metadata (GPS position where the photo was taken, device, date). They are accessible via a long address, impossible to guess, but anyone who knows this address can display the photo. The same applies to the screenshot attached to feedback, which only our team receives.
4. What other users see
- All signed-in users can find your username by searching for it, in order to send you a friend request. Your email address is never shown to anyone.
- Your friends can visit your gardens set to “Friends” (default setting; “Private” so that only you can see it). They see the garden, its plants and their photos, your animals' names and the guestbook. They do not receive its address: the garden's location is sent to them offset by several kilometres (up to around thirty), without street and place names, without the IGN altitudes and without the plants' GPS positions.
- People you invite to edit a garden see it in full, including its exact location.
- Guestbook notes are visible, with your username, to everyone who can visit the garden.
5. Where your data is
Your data is hosted in France, by OVHcloud: on a server dedicated to Jardingo, and, for the photos and garden thumbnails and the screenshots attached to feedback, in OVHcloud's file storage in Paris. A full backup of the server is made every day, also with OVHcloud, and kept for 7 days.
6. External services
Jardingo relies on the following services. Only OVHcloud and Brevo receive your email address.
| Service | What for | What it receives |
|---|---|---|
| OVHcloud (France) | Hosting of the server, its backups, the photos, the thumbnails and the screenshots attached to feedback, and of our contact email inbox. | The data in section 3, as a processor. |
| Sign-in with your Google account, if you choose it. | Google knows that you are signing in to Jardingo, under its own privacy rules. It receives no data about your garden. | |
| Apple | Sign-in with your Apple ID, if you choose it (on iPhone and iPad). | Apple knows that you are signing in to Jardingo, under its own privacy rules. It receives no data about your garden. |
| Brevo (France) | Sending address-confirmation and forgotten-password emails, and forwarding your feedback to our contact inbox. | Your email address, your username and the content of these emails (for feedback: your message and its technical information, without the screenshot), as a processor. |
| Sentry (Functional Software, United States; data hosted in the European Union, in Germany) | Error reports from the app and the server, to detect and fix bugs. | The error reports described in section 3 (technical data), as a processor: never your account, your email address, your IP address or the content of your garden. A transfer to the United States remains possible; it is governed by the European Commission's standard contractual clauses. |
| Pl@ntNet (French public research consortium) | Plant identification from a photo. | The photo, without metadata, sent by our server: Pl@ntNet does not know who took it. |
| Google, Firebase Cloud Messaging (Android) | Delivering notifications to your phone, if you have turned them on. | Your device's notification identifier and the text of the notification: a friend's username and the name of a garden. Never the content of a note. |
| Apple, Apple Push Notification service (iPhone and iPad) | Delivering notifications to your device, if you have turned them on. | As for Google above: your device's notification identifier and the text of the notification, never the content of a note. |
| IGN, Géoplateforme (France) | Aerial photos, cadastre, altitude, buildings and roads, address search. | Called directly from your device: your IP address, the area of your plot and the address you type into the search. |
| National mapping services: IGN-NGI, SPF Finances and Digitaal Vlaanderen (Belgium), Kadaster and PDOK (Netherlands), swisstopo and geodienste.ch (Switzerland) | Aerial photos and cadastre, when your plot is in one of these countries. | Called directly from your device, only for that country's map: your IP address and the area displayed. |
| Esri, ArcGIS Location Platform (United States) | Satellite imagery outside France, Belgium, the Netherlands and Switzerland; address search outside France. | Called directly from your device: your IP address, the displayed area of the map, the address you type into the search and the centre of the displayed map. |
| OpenFreeMap | Base map for the plot map. | Called directly from your device: your IP address and the displayed area of the map. |
| Photon, by komoot (Germany) | Address search outside France, when Esri's is unavailable. | Called directly from your device: your IP address, the address you type into the search and the centre of the displayed map. |
| Open-Meteo | Weather forecasts and climate for the calendar (watering, frost, heatwave). | Called directly from your device: your IP address and the garden's location rounded to about 1 km. |
| Google Play (Android) | Device location, via Google Play services. | Under Google's rules, as for any Android app that uses location. |
7. On your device
The app stores on your device a copy of your gardens (to work offline), your sign-in tokens and a few display and sound preferences. It uses no advertising or audience-measurement cookies: everything it stores is necessary for it to work, which is why it does not ask for your consent. Signing out erases this data from the device (it remains on the server). On Android, it is not included in the device's backup to Google. Calendar reminders, if you turn them on, are scheduled on the device itself: they go neither through our server nor through Google or Apple.
8. How long we keep it
- Account and content: for as long as your account exists.
- Deleted plant, garden or note: erased from the server immediately, photos included.
- Deleted account: all its data is erased (gardens, plants, photos, calendar, friends, notes, identification history, feedback sent, blocks).
- Feedback: erased from the server, screenshot included, no later than 2 years after it was sent, or earlier together with your account. The copy received by email in our contact inbox is deleted within the same time limits.
- Reports: erased from the server no later than 1 year after they were sent, as is the copy received by email. If you delete your account, the reports you made remain until then, without your name; your blocks are erased with it.
- Backups: erased data may remain in the server backups until they are replaced, for 7 days at most.
- Notification identifier: erased when you turn off notifications in the app, when you sign out, or when Google or Apple inform us that the app has been uninstalled.
- Technical logs: erased on an ongoing basis (automatic rotation, limited volume).
- Error reports: erased by Sentry after 30 days.
9. Security
Exchanges with the server are encrypted (HTTPS). Passwords are stored in irreversibly encrypted form. Access to gardens is controlled (owner, friends depending on the setting, people invited to edit). The server only accepts key-based connections and receives security updates automatically.
10. Your rights
You can at any time access your data, have it corrected, receive a copy of it in a reusable format, object to processing based on legitimate interest, or request its restriction or erasure.
Deleting your Jardingo account: in the app, open the account menu (the cloud-shaped icon, at the top), then “Delete my account”, and confirm with your password (or, for an account created with Google or Apple without a password, by typing your username). Deletion is immediate and permanent: gardens, plants and their photos, calendar, friends, notes left, feedback sent and identification history are erased from the server and from the device. Nothing is kept, except in the server backups until they are replaced, for 7 days at most (section 8).
Without access to the app, write to contact@jardingo.app from your account's email address, or stating your username. We may ask you to confirm that the account really is yours. Deletion is then carried out within 30 days at most.
For any other request, use the same address. We reply within one month. If you consider that your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
11. Minors
Jardingo is open to everyone. If you are under 15, ask a parent's permission before creating an account. A parent can request the deletion of their child's account at the address above.
12. Changes
This policy may change along with the app. The date at the top of the page shows its latest version. In the event of a significant change, we will let you know in the app.