The Green Thumb Privacy Policy

Effective date: July 16, 2026 Last updated: July 16, 2026

The Green Thumb ("The Green Thumb," "we," "us," or "our") is operated by Horreya LLC, a Virginia limited liability company. This Privacy Policy explains what information the The Green Thumb mobile application (the "App") collects, how we use and share it, and the choices and rights you have. We built The Green Thumb to be a generous, trustworthy companion — and we treat your data the same way.

By using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.

1. A quick summary

• We collect the information needed to run your garden: your account, your plants and (optional) photos, your location for local weather and care timing, and your conversations with the in-app assistant.
• We use trusted service providers to deliver the App (hosting, AI, analytics, weather, maps, subscriptions, notifications). We list them in Section 5.
• We do not sell your personal data, and we do not use it for cross-context targeted advertising.
• Photos are always optional. Location is used only with your permission.
• You can access, correct, export, or delete your data — including deleting your entire account from within the App.
• We are based in Virginia, and this Policy is governed by Virginia law. Virginia residents have specific rights under the Virginia Consumer Data Protection Act (Section 8).

2. Information we collect

2.1 Information you provide

• Account information. When you create an account we collect your email address and a password (passwords are stored in hashed form by our authentication provider). You may also start using the App with an anonymous session, in which case no email is collected until you choose to save your garden by registering.
• Profile information. A display name (optional), and your general growing context such as your location (see 2.2), time zone, and growing/hardiness zone.
• Garden content. The plants you add, care plans, tasks, notes, and any optional photos of your plants. Photos are never required to use the App.
• Assistant conversations. The questions you ask the in-app assistant and any photos you attach to a conversation, so the assistant can respond and so you can review your history.
• Support communications. If you contact us, we keep your messages and contact details to help you.

2.2 Information collected with your permission

• Location. With your permission, we use your device location (or a place you search for) to localize weather forecasts and time your plant-care recommendations. You can use the App without granting precise location by entering a place or zone manually. You can change location permission at any time in your device settings.
• Camera and photo library. With your permission, you can take or attach photos of your plants. You can decline and still use every core feature.
• Push notifications. With your permission, we register a push token so we can send care reminders and weather alerts. You can turn notifications off at any time.

2.3 Information collected automatically

• Usage and device information. To understand how the App is used and to improve it, we collect app events (for example, screens viewed and actions taken), a device/installation identifier, app version, device model, and operating system version, via our analytics provider.
• Subscription status. When you start a trial or subscribe, we receive your subscription status and related identifiers from Apple and our subscription-management provider. We do not receive or store your payment card details — payments are handled by Apple.

We do not knowingly collect precise background location, contacts, health data, or biometric data.

3. How we use your information

We use your information to:

• Provide and personalize the App — manage your garden, generate care plans, and answer your questions;
• Localize weather and time care tasks and reminders;
• Send notifications you've enabled (care reminders, weather alerts);
• Operate trials and subscriptions and provide "restore purchases";
• Maintain security, prevent abuse, debug, and improve the App;
• Respond to your requests and provide support;
• Comply with legal obligations.

We rely on your consent for optional device permissions (location, camera/photos, notifications), and on our legitimate interest in operating and improving the App for the remaining uses.

We do not use your personal data for cross-context behavioral/targeted advertising, and we do not sell it.

4. AI features

The Green Thumb's plant identification, care-plan generation, and assistant features are powered by AI. When you use these features, the relevant content — such as your question text and any plant photos you choose to submit — is sent to our AI provider (Anthropic, the maker of Claude) to generate a response. We send only what's needed to produce your result. Our AI provider processes this content to return a response and does not use your submissions to train its models on our behalf. AI output can be imperfect; it is guidance, not professional horticultural, agricultural, or safety advice.

5. How we share information (service providers)

We share information with vendors who process it on our behalf to run the App. Each is bound to use it only to provide their service to us. Our key providers are:

We may also disclose information: (a) to comply with law or valid legal process; (b) to protect the rights, safety, and security of our users, the public, or The Green Thumb; and (c) in connection with a merger, acquisition, financing, or sale of assets, in which case we will honor this Policy or notify you of any material change.

Some providers are located in, or process data in, the United States. If you use the App from outside the U.S., you understand your information will be processed in the U.S.

6. Data retention

We keep your information for as long as your account is active or as needed to provide the App. When you delete your account, we delete or de-identify your personal data within a commercially reasonable period, except where we must retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements. Aggregated or de-identified data that cannot reasonably identify you may be retained.

7. Your choices

• Access and edit most of your information directly in the App.
• Delete your account at any time in Settings → Delete account, which removes your garden and associated personal data as described in Section 6.
• Device permissions. Turn location, camera/photo, and notification permissions on or off in your device settings.
• Restore purchases and manage or cancel your subscription in your Apple account settings.

8. Your Virginia privacy rights (VCDPA)

If you are a resident of the Commonwealth of Virginia, the Virginia Consumer Data Protection Act ("VCDPA") gives you the right to:

• Confirm and access whether we process your personal data and obtain a copy;
• Correct inaccuracies in your personal data;
• Delete personal data we have about you;
• Obtain a portable copy of personal data you provided to us; and
• Opt out of (i) the sale of personal data, (ii) targeted advertising, and (iii) certain profiling. We do not sell personal data, engage in targeted advertising, or conduct profiling that produces legal or similarly significant effects, so there is nothing to opt out of today — but if that ever changes, we will update this Policy and provide a clear opt-out.

How to exercise your rights. Email support@the-green-thumb.com or use in-app account controls. We will verify your request using your account information and respond within the timeframe required by law (currently 45 days, extendable once as permitted).

Right to appeal. If we decline your request, you may appeal by replying to our decision or emailing support@the-green-thumb.com with the subject "VCDPA Appeal." We will respond within 60 days. If your appeal is denied, you may contact the Virginia Attorney General's Office at oag.state.va.us/consumer-protection.

We will not discriminate against you for exercising these rights.

Depending on where you live, you may have similar rights under other laws (for example, California or the EU/UK). We are happy to honor comparable requests — contact us at support@the-green-thumb.com.

9. Children's privacy

The Green Thumb is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact support@the-green-thumb.com and we will delete it.

10. Security

We use administrative and technical safeguards to protect your information, including encryption in transit, access controls, and row-level security on user-owned data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work hard to protect your garden.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice in the App. Your continued use of the App after an update means you accept the revised Policy.

12. Contact us

Horreya LLC Email: support@the-green-thumb.com (general) / support@the-green-thumb.com (privacy requests) Mailing address: 3906 Cherrywood Lane, Annandale, VA 22003

This Policy is governed by the laws of the Commonwealth of Virginia, without regard to its conflict-of-laws rules.