NURTOMI

Privacy policy

How photos, garden records, and account information are handled.

Updated 1 November 2026

Who we are

Nurtomi is operated by Second Wind Limited. Contact support@secondwindltd.xyz for privacy questions or requests. This policy describes the intended Nurtomi service; release availability is shown on the home page.

Information you choose to provide

Nurtomi processes plant photos, names, room and light descriptions, care observations, optional care background, and care history when you use those features. You can enter a broad location or timezone to make care and reminders more relevant. The app does not need your contacts, microphone, continuous camera access, or precise background location. Photos are processed on your device before upload to reduce size and remove unnecessary metadata.

Account and garden records

Firebase Authentication manages an anonymous or linked account. Your Firebase account identifier associates your private plants, tasks, logs, care background, preferences, and saved AI results with you. Nurtomi’s API and database run on Cloudflare Workers and D1; private photos and exports use Cloudflare R2. Account identifiers, request status, usage counters, verified subscription status, and the records needed to operate those features are retained while the account is active.

AI processing

When you explicitly request a photo diagnosis, pruning guidance, or a watering and feeding draft, the relevant photos and text are sent through our service to Alibaba Cloud’s configured Token Plan or DashScope AI service. You receive a disclosure before the first request. Do not include people, sensitive personal information, or documents unrelated to plant care. Provider processing locations and retention depend on the service and configuration in use; this policy does not promise zero provider retention. General application logs should not contain your photos, full personal notes, or authentication tokens.

Temporary and saved photos

Photos submitted only for an AI request are temporary. The service removes temporary input after the request finishes, and retains cleanup references until deletion succeeds. A photo is retained as part of your garden when you choose to save it. Saved garden photos are private and accessed through authorization checks. Deleting a photo or its plant removes the related saved content through the service’s deletion process. Cached copies on your device may be available offline until cleared or removed by the app or operating system.

Reminders and notifications

Notifications are optional. When enabled, Nurtomi stores a device messaging token, notification permission state, timezone, reminder preferences, and the limited delivery history needed to avoid repeats. Firebase Cloud Messaging and Apple Push Notification service transport notifications. A reminder can include a plant name or care task on your lock screen; use your device’s notification preview controls if you prefer to hide this. Turning reminders off stops future scheduled notifications; messages already accepted by the operating system may still appear. Notifications do not automatically submit new photos or generate paid AI requests.

Purchases

Apple or Google processes purchases; RevenueCat helps verify and associate subscription access with your account. Nurtomi’s backend confirms access and usage limits. We do not receive your full payment card number. Stores and RevenueCat retain their own transaction records under their policies.

Public reference content

Taxonomy and reference photos are separate from your private garden. Source links and photo credits are provided with reference images. Opening an external source subjects that visit to the source’s own privacy practices. External image hosts may receive standard network information when an image is requested.

Export, deletion, and support

Use Settings → Privacy & your data to request an export or delete your account data. Deletion removes your garden records and stored private media, then the Firebase identity. The service may keep a minimal deletion receipt or safety marker needed to complete the request and prevent delayed tasks from recreating data. Provider logs, backups, and legally required transaction records follow their respective retention rules. If you cannot use the app, follow the web deletion instructions. Deleting an account does not cancel an Apple or Google subscription.

Your choices and changes

You can choose photo access, notification permission, optional observations, and whether to link an account. We do not sell your personal data or use it for targeted advertising. Nurtomi is not intended for children under 13. Contact us about access, correction, deletion, or a child’s account. We update this page when data handling changes.