SproutlyLifeReview draft — not effective. Provider contacts, public URLs, vendor details, retention and operational workflows require verification before release.
Controller and scope
This draft describes Sproutly Life's current code paths, not an assertion that every optional service is enabled. The app identifies Guangzhou Deep Sea Miracle Information Technology Co., Ltd. as its provider. Verify its address, privacy contact, processing regions and effective date before publishing.
Data and purposes
Tasks and steps, timer/focus events, plants and growth, preferences, local profile identifiers and synchronization metadata are stored in the app's local SQLite database and preferences. They support local tasks, recovery and the garden. Tokens for configured remote sessions are held using secure device storage. Export and share actions create copies chosen by you; recipients and files outside the app are not removed by clearing local data. Device or OS backups may contain app data according to your system settings.
If enabled, email, Apple or Google sign-in processes identity and authentication information to establish an account and session. Optional cloud AI sends the selected task, request identifier and authentication information to configured servers; it does not send the full task history, garden or contacts through that decomposition request. Remote infrastructure may process network addresses and operational/security records. Exact operators, fields, regions, retention and subprocessors require production verification. Optional sync may transmit the associated account's records only under its configured feature and authorization.
Permissions and third parties
Speech is initiated by you and handled by the system speech service, which may use a network service; microphone permission is required. Do not assume on-device-only processing. Notifications use local schedules and OS authorization. File selection/sharing uses system facilities. No advertising or analytics integration was identified in the current dependency review; this is not a claim that every third-party processor collects nothing. See the service inventory. An AI supplier's no-training or data-residency promise must not be made without contractual evidence. Where user data is shared with third-party AI, disclose the recipient and purpose and obtain the required permission before transfer.
Retention, security and control
Local records remain until deleted or cleared, subject to backups and exported copies. Uninstall behavior follows the OS. Server deletion, fraud/security records and legal retention depend on actual infrastructure; specify exact periods or determination criteria before launch. We use scoped authentication and platform secure storage where implemented, but do not promise end-to-end encryption or absolute security. You may refuse optional permissions, use manual input, and request access, correction or deletion through a verified privacy channel. Account deletion differs from local clearing, subscription cancellation and revoking Apple/Google authorization.
International processing and rights
Confirm lawful bases, cross-border safeguards and applicable regional rights with counsel, including access, correction, deletion, restriction, portability, objection and complaint rights where applicable. No sale, targeted-advertising or statutory exemption declaration is finalized by this draft. Material data-use changes require notice and new consent where needed. The final policy must be accessible in the app and on a public, non-geofenced webpage.