Skip to content
Spriggo

Privacy

Our approach: collect the strict minimum, share nothing, keep everything transparent. GDPR compliant.

Data controller

The personal data controller is Eric LEROY, operating under the trade name Play3rs, 18b rue Bricka, 06160 Juan-les-Pins, France. Contact: hello@spriggo.site.

Data collected on this site

The Spriggo website (spriggo.site) does not require any account creation, does not use any advertising tracking cookies and does not integrate any user profiling tool.

The only technical data automatically collected by our host Railway are standard server logs: request IP address, browser user-agent, page accessed, HTTP status code, timestamp. These logs are used exclusively for security purposes (attack detection) and technical diagnosis (performance, errors).

Purposes and legal basis

The processing of server logs is based on the legitimate interest of the controller (Article 6.1.f of GDPR): ensuring service security and availability.

Retention period

Server logs are retained for a maximum of 30 days, then automatically deleted by the Railway infrastructure. No personal data is archived for a longer period.

Cookies and trackers

No cookies are placed by this site. No behavioral analysis tool (Google Analytics, Facebook Pixel, etc.) is integrated. If you see a cookie from spriggo.site in your browser, it's a bug to report to hello@spriggo.site.

Transfers outside the European Union

Our host Railway Corp. is established in the United States. Server logs may therefore transit through servers outside the EU. Railway relies on the European Commission's standard contractual clauses to ensure an adequate level of data protection. See Railway's data protection policy.

DNS is managed by Cloudflare, Inc. (United States), certified under the EU-US Data Privacy Framework.

Your GDPR rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights over your personal data at any time:

  • Right of access: obtain confirmation that data concerning you is being processed and obtain a copy.
  • Right to rectification: have inaccurate data rectified.
  • Right to erasure ("right to be forgotten"): request deletion of your data.
  • Right to object: object to processing based on legitimate interest.
  • Right to restriction: restrict the processing of your data.
  • Right to portability: receive your data in a structured, readable format.

To exercise these rights, write to hello@spriggo.site. We will respond within a maximum of one month.

Complaint to a supervisory authority

If, after contacting us, you believe your rights are not respected, you can file a complaint with the Commission nationale de l'informatique et des libertés (CNIL), the French data protection authority: www.cnil.fr/en/plaintes. EU residents can also contact their national data protection authority.

Spriggo mobile app

This page is the official privacy policy for the Spriggo. Plant Health mobile app (package com.play3rs.spriggo, publisher Play3rs), published on Google Play. The app is a distinct product from the website: installing the app sends no data to the website, and vice versa. This section covers all data processed by the app.

Android permissions requested

  • Camera: required to photograph your plants for analysis. The camera is only activated when you tap the "Take a photo" button.
  • Photo and media access: required to select existing images from your gallery for analysis. Only the images you explicitly choose are read.
  • Internet access: required to send photos to the analysis service, save your history, and display ads when applicable.
  • Notifications (optional): if you enable watering reminders, the app displays scheduled local notifications. No commercial push notifications are sent.

1. User account

  • Email and name (if provided) via Firebase Authentication (Google).
  • Google sign-in data if you use "Continue with Google".
  • Retention: as long as your account exists. Deleted within 30 days after an account deletion request.

2. Plant images

  • Photos you take or select are sent to OpenAI (United States) for AI analysis.
  • These images are not retained by OpenAI after processing (OpenAI API zero data retention policy).
  • Your photos are saved to Firebase Storage (Google Cloud, European region) so you can review your analysis history.
  • Retention: as long as you keep the analysis in your history. You can delete an individual analysis at any time from the app. All your photos are deleted when you delete your account.

3. Usage data

  • Analysis history (AI results, dates) stored in Firebase Firestore (Google Cloud, European region).
  • Preferences (language, reminders, tracked plants).
  • Purchase data (subscriptions, packs) handled by Google Play Billing. We do not store your payment details: Google Play is the sole processor.
  • Retention: as long as your account exists.

4. Advertising (free users only)

  • The app displays ads via Google AdMob for users without paid subscription.
  • AdMob may collect your Android Advertising ID (AAID) to personalize ads. You can reset it or disable personalization from Android Settings > Privacy > Ads.
  • Subscribed users see no ads and no advertising identifier is shared.

5. Diagnostic and crash data

  • The app may send anonymized crash reports to Google (Firebase Crashlytics) to fix bugs. These reports contain neither your photos nor your identity, only the technical stack trace.
  • Retention: 90 days maximum on the Firebase Crashlytics side.

App subprocessors

The app's subprocessors are: Google (Firebase Authentication, Firebase Firestore, Firebase Storage, Firebase Crashlytics, Google Play Billing, AdMob) and OpenAI (AI photo analysis). These subprocessors may transfer data to the United States. Google and OpenAI rely on the EU-US Data Privacy Framework and standard contractual clauses to ensure an adequate level of protection.

Deleting your account and your data

You can delete your account and all your data at any time via two means:

  • From the app: Settings > Account > Delete my account. Confirmation required. Deletion is immediate on the app side, and effective within 30 days on the Firebase servers side (technical propagation delay).
  • By email: send a request to hello@spriggo.site from the email address associated with your account. Confirmation sent within 72 hours, deletion effective within 30 days.

Account deletion results in the definitive and irreversible deletion of: your user profile (email, name), all your saved photos, all your analysis history, all your preferences. Your Google Play purchases (subscriptions) are not affected: they remain managed by Google Play independently.

Data export

You can request a full copy of your data in a structured format (JSON) by writing to hello@spriggo.site. The export is provided within 30 days maximum and contains: your profile, your analysis history, your preferences. Photos are provided as a ZIP archive.

Your GDPR rights for the app

The GDPR rights listed above (access, rectification, erasure, objection, restriction, portability) also apply to data processed by the app. To exercise them, contact hello@spriggo.site from the email address associated with your account. We respond within a maximum of one month.

Children

The app is rated PEGI 3 on Google Play but is not intended for children under 13. In accordance with GDPR Article 8 and the US COPPA, we do not knowingly collect personal data of children under 13. If you are a parent or guardian and believe your child has created an account without your consent, contact us at hello@spriggo.site for immediate deletion.

Changes to this policy

This privacy policy may be updated to reflect changes in our practices or for legal reasons. The last update date is indicated below. Changes take effect upon publication on this page.

Last updated: May 19, 2026.

Diagnose my plant