Privacy Policy

Bonsai Tracker is operated by Forgione USA, Inc., a Delaware corporation. We are the data controller for personal information processed through bonsaitracker.com and app.bonsaitracker.com.

• Account data: email, display name, password hash, language and region preferences.
• Tree data: photos, species, notes, care logs, calendar entries, NFC tag IDs.
• Usage data: device type, app version, crash reports, basic analytics.
• Billing data: processed by Stripe (see below). We receive transaction metadata (plan, status, country, last 4 of card) but not full card details.

• To run the Service: store your trees, sync across devices, send reminders.
• To provide optional AI guidance (see Section 5).
• To process payments and prevent fraud (via Stripe).
• To improve the product through aggregated, de-identified analytics.
• To send service emails (receipts, security alerts). Marketing emails only with consent.

Paid plans are sold and billed by Stripe (Stripe, Inc. and its affiliates) acting as the Merchant of Record on behalf of Forgione USA, Inc. Stripe collects payment information directly and is the data controller for that information, including for tax calculation, fraud prevention, and regulatory compliance. See Stripe's Privacy Policy.

If you use AI features, the relevant tree metadata, photos, and prompts may be sent to third-party AI providers — currently Google (Gemini) and OpenAI — to generate responses. These providers process the data under their own terms; we do not allow them to train models on your content.

Data is stored on managed cloud infrastructure with encryption in transit (TLS) and at rest. Access is restricted to authorised personnel.

You can access, export, correct, or delete your data at any time from account settings, or by emailing privacy@bonsaitracker.com. Depending on your jurisdiction (GDPR, CCPA, UK GDPR, etc.) you may also have the right to object to processing, request portability, or lodge a complaint with your local data-protection authority.

We keep your data while your account is active. If you delete your account, we remove your content within 30 days, except where we are required to keep billing records for tax and accounting purposes.

We use a minimal set of cookies for authentication and security. Stripe's checkout uses its own cookies for fraud prevention.

The Service is not directed to children under 13 (or the minimum digital-consent age in your country). We do not knowingly collect their data.

Material changes will be announced in-app or by email at least 14 days before they take effect.

Forgione USA, Inc. — privacy@bonsaitracker.com

See also our Terms and Refund Policy.