Privacy Policy
Effective 21 September 2026. This policy explains what personal data Jaboticaba.in collects through this website and the Jaboticaba.in app, why, and the choices and rights you have.
1. Who we are
Jaboticaba.in is a plant collection and growing-knowledge platform based in Cherthala, Alappuzha, Kerala, India. In this policy, “Jaboticaba.in”, “we” and “us” mean the operator of the website at jaboticaba.in and the Jaboticaba.in app for iPhone and Android. For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here.
2. What we collect
You can browse the species library and growing guides without an account. We collect personal data only as described below.
| Data | What it includes | Where it comes from |
|---|---|---|
| Account details | Your name, email address and profile photo, and an identifier for your Google or Apple account. | Google or Apple, when you sign in. We never see your Google or Apple password. |
| Sign-in and security information | When you signed in, the IP address you last signed in from, and for each signed-in session the IP address and the type of browser or device. | Your device, each time you sign in or use your account. |
| Your garden | The plants you record and everything you add to them: names, species, dates, notes, photographs, care schedules, care history and expenses. | You. |
| Articles you write | The title, text, photographs and topic of articles you draft or submit for publishing, and our review notes. | You, and our team when reviewing. |
| Saved species | The species you save as favourites. | You. |
| Notification details | A push notification token for your phone, its platform (iPhone or Android), and your notification and email preferences. | Your phone, only after you allow notifications. This applies whether or not you have an account. |
| App launch list | Your email address and the kind of phone you use, if you ask to be told when the app is available. | You, on the Get the app page. |
| Server logs | Technical records of requests to our servers, including IP address, the page or feature requested, the time and the browser or app version. | Your device, automatically, when you use the website or app. |
| Messages you send us | Whatever you include when you contact us by WhatsApp or email. | You. |
We do not collect payment card details, your precise location, your contacts, or any other data from your phone beyond what is listed here.
3. How we use it
- To provide the service: to create and run your account, keep your garden records in sync between the website and the app, and show you your own information.
- To send reminders and notifications: care reminders you schedule, and occasional announcements about the platform, such as new species, guides or features. Care reminders are sent by email only if you turn email on.
- To review and publish your articles: our team reads, may edit, and publishes or declines articles you submit, and tells you the outcome by notification.
- To keep the platform secure: to protect accounts, detect misuse and investigate problems, using sign-in information and server logs.
- To understand and improve the platform: for example, how many people use it, which features and species are popular, and which countries and regions our users are in, based on IP address. We look at this in summary form, not to profile individuals.
- To respond to you when you contact us, and to meet our legal obligations.
We do not sell your personal data, show advertising, or send marketing email without asking you first. We process your personal data on the basis of your consent, which you give when you sign in or allow notifications, and for the legitimate uses the law permits.
4. What others can see
Your garden records, photographs, notes, care history, expenses, email address and IP addresses are private to your account, and so are articles you have not yet published.
When an article you wrote is published, anyone can read it, with your name shown as the author. Your name links to your public author profile, which shows only your name, the month you joined, when you started writing, and your published articles. It never shows your email address or photo.
6. How we protect it
Your data is encrypted in transit using HTTPS (TLS) and encrypted at rest using AES-256. Access to our servers and database is restricted and protected by authentication, and sign-in session tokens are stored only in a form that cannot be read back.
No system is perfectly secure. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as the law requires.
7. How long we keep it
- Account details, your garden and saved species: for as long as your account exists.
- The IP address you last signed in from: for as long as your account exists, and replaced each time you sign in.
- Session records (IP address and browser or device for each sign-in): deleted automatically when the session ends, at most 30 days after it began.
- Server logs: kept for at least one year, as the law requires for security purposes.
- App launch list: until we have emailed you that the app is available, or sooner if you ask us to remove you. We use it for that one email and nothing else.
- Notification tokens: until you remove the app, turn notifications off, or the token stops working.
When you delete your account, we permanently delete your account, your garden records and photographs, your saved species, and any articles you have not published. Articles already published stay published, credited to “Former member”, with no link to you. We keep a limited record of the deletion: your name and email address, when you joined and when the account was deleted, your last sign-in time and IP address, and how many plants and photographs the account held. We keep it to show that the deletion was carried out, to handle any later questions or disputes, and to prevent misuse of the platform.
8. Your rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- get a summary of the personal data we hold about you and how we use it;
- have inaccurate or incomplete data corrected and updated;
- have your personal data erased. You can delete your account yourself at any time from your Profile, on the website or in the app;
- withdraw your consent at any time. This does not affect processing already carried out, and without it we may no longer be able to provide your account;
- have a grievance addressed by us; and
- nominate someone to exercise these rights for you in the event of your death or incapacity.
To use any of these rights, contact us as described in section 13. We may need to confirm your identity first. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
10. Notifications
The app sends notifications only after you allow them on your phone. You can turn them off at any time in your phone’s settings, and signed-in users can choose which reminders they receive in the app’s notification settings.
11. Children
Jaboticaba.in is intended for adults. If you are under 18, please use it only with the involvement of a parent or guardian.
12. Changes to this policy
We will update this policy when our practices change and show the new effective date at the top. If a change significantly affects how we use your personal data, we will let you know in the app or by email.
13. Contact and grievances
For any question about this policy, to use your rights, or to raise a grievance, contact us. We aim to respond within 30 days.
- Email: Email address loading…
- WhatsApp: +91 90373 88996