This is a translation of the German original. In case of any discrepancy, the German version prevails.
Maximilian Naumow
c/o Adressgeber #2233
An der Alten Ziegelei 38
48157 Münster
Email: contact@verdello.app — see also the
legal notice (Impressum).
| Data | Where to | Purpose · legal basis |
|---|---|---|
| Plants, locations, watering times, wishlist, settings | on your device only | Care planning. We do not receive this data. |
| Place: coordinates (from location permission or place search) | directly from your device to Open-Meteo | Weather and evaporation for your place — this is the core of the watering recommendation. For this, the app uses the coordinates at the precision at which they are available (location service or place search). Legal basis: Art. 6(1)(b) GDPR (use of the app). |
| Place: coordinates, rounded to 0.1° (about 11 km) | to the Verdello server (/v1/season) |
Season calculation (start of growing season, last frost). The app rounds before sending; the server rounds once more before any processing and stores only season values per grid cell, with no link to a device. Art. 6(1)(b) GDPR. |
| Place name or postcode (place search) | to Open-Meteo (place search); a postcode additionally to zippopotam.us | Translating a place name or postcode into coordinates. For a postcode, the app queries zippopotam.us in turn for Germany, Austria and Switzerland; only the postcode and the country code are transmitted. Art. 6(1)(b) GDPR. |
| Plant photo for identification | to the Verdello server, from there to Google (Gemini API) | Species recognition by AI, only when you trigger an identification. The server forwards the photo to Google and does not store it; recognised species are only counted as an anonymous daily counter with no link to a device (only the botanical name, the day and the count are stored – no photo, no location, no device identifier). Purpose of the counter: to see which frequently identified species the app still lacks care knowledge for, and to add those first. Legal basis: your consent (Art. 6(1)(a) GDPR). The app asks for it before the first identification (“Agree”); without it, no photo leaves your device. You can withdraw it at any time in Settings under “Photo identification”. |
| Device identifier (random value) and access token | Verdello server | On first contact with the server, the app generates a random identifier and receives a token; the server stores the identifier, a hash of the token and the time. Purpose: protection against abuse and costs (daily quotas). No name, no hardware identifier, no advertising ID. On iPhone and iPad the identifier is also kept in this device's keychain (not synced via iCloud), so it survives deleting and reinstalling the app; “Delete all data” removes it there too. Art. 6(1)(f) GDPR. |
| Usage counter per device and day | Verdello server | Counts identifications against the daily quota. Art. 6(1)(f) GDPR. |
| Funnel telemetry | Verdello server | For each device we record whether and when it first reached these steps:
app_geoeffnet, onboarding_begonnen, onboarding_fertig, scan_gestartet, erkennung_fertig, pflanze_uebernommen, pflegeplan_gesehen, erste_aufgabe_erledigt, erkennung_fehlgeschlagen. In addition, a daily activity signal (device and day, without
content). No plants, no places, no photos. Purpose: to see where users drop
off and to improve the app. Art. 6(1)(f) GDPR. Can be switched off:
in the app's settings you can turn off usage statistics and crash reports;
you can also object at any time (see “Deletion and your rights”). |
| Feedback after watering (Just right / Was still moist / Was already dry) | Verdello server | Only if you answer. What is transmitted: plant species (botanical name), site characteristics (container, sun, covered), calculated water reserve and your rating — no custom plant name, no coordinates. The feedback is linked to the device identifier (and is removed with “Delete all data”). Purpose: to improve the watering model per species. Art. 6(1)(f) GDPR. |
| Crash reports | Verdello server (our own server, not a third-party service) | When an error occurs, the app can send a technical report: error type and message, location in the program code, app version, operating system and version, time, linked to the device identifier. No photos, no plant data, no coordinates. Purpose: fixing errors and ensuring stability. Retention: at most 90 days. Can be switched off in the app's settings. Art. 6(1)(f) GDPR. |
| Species images and image credits | retrieved from our server | The app loads plant photos from our server (which previously obtained them from Wikimedia Commons and iNaturalist). Your device does not contact Wikimedia or iNaturalist for this. |
| Plant catalogue (care knowledge, garden tasks, plant names) | retrieved from our server | At most once a day, the app asks our server whether a newer plant catalogue is available and then downloads it. The request contains no device identifier, no token and no data about you or your plants; it is the same for every device. The server technically only sees the IP address (see below). |
| IP address (connection data) | Verdello server; for direct requests also Open-Meteo and zippopotam.us | With every connection, the respective server technically sees your IP address. See “IP addresses and retention periods”. |
No IP address is stored in plain text in the database on our server. For the abuse limit (registrations per address and day) we store only a salted, irreversible hash of the address (IPv6 truncated to the /64 network beforehand) with a daily counter. These counters are deleted after 7 days. The web server (nginx) access logs contain only a truncated IP address (IPv4: last octet set to 0, IPv6: only the /64 network), the time and the requested address without query string (i.e. without parameters such as coordinates); we keep them for fault and attack prevention for at most 7 days. Legal basis: Art. 6(1)(f) GDPR.
Deleting in the app: Settings → Data → “Delete all data”. The app deletes all local data and instructs our server to delete everything relating to your device (usage counters, funnel, feedback, crash reports, device identifier). If you have no internet connection, the local data is deleted anyway; the app then tells you explicitly that the server part did not work, and you can repeat it later.
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the place of your habitual residence. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW, ldi.nrw.de). You can withdraw any consent you have given at any time with effect for the future. To do so, write to us at contact@verdello.app.
Users in the United Kingdom: If you use Verdello from the United Kingdom, the UK GDPR and the Data Protection Act 2018 also apply. You have the same rights as listed above under the corresponding articles of the UK GDPR. You can also lodge a complaint with the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom, telephone 0303 123 1113, ico.org.uk/make-a-complaint.
We can only link server data to a device via the random device identifier. Without it, we are unable to make such a link (Art. 11 GDPR); the easiest way is therefore deletion directly in the app.
Verdello is not directed at children. The app has no accounts and therefore does not ask for your age. Photo identification is based on your consent: if you are under 16, you may only give it with your parents' permission (Art. 8 GDPR). All other features of the app work without it. Parents can withdraw the consent in Settings and remove all of the device's data with “Delete all data”.
If you sign up for the waitlist on the website, we store your email address and the time — no name, no cookies, no third-party scripts. To prevent abuse, we count sign-ups per IP address and day (as a hash only, see above). Purpose: to inform you once about the launch. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw by message to contact@verdello.app; we will then delete the address. At the latest upon launch or discontinuation of the project, we delete the list completely.
Sign-up works by double opt-in: right after you sign up, we send you a single email with a confirmation link that is valid for seven days and can be used only once. Only when you click it is the sign-up confirmed. The email is sent on our behalf by Brevo (Sendinblue SAS, Paris, France) as our processor, which processes your address for that message. If you do not confirm, we delete the address 30 days after you signed up. Of the confirmation link we store only a hash, not the link itself, and after the click not even that.
Brevo embeds an invisible tracking pixel in the confirmation email that records when the email is opened. If your email client loads images, Brevo receives the time, your IP address and details about your email client. This cannot be switched off in the Brevo plan we use; we do not analyse this information. The legal basis is your consent to the sign-up (Art. 6(1)(a) GDPR). If you do not load images in the email, nothing is recorded, and the confirmation still works.
If you open the website through a link from us (for example with the suffix
?k=instagram), we count per day and tag how often the page was opened and
the TestFlight button was clicked; if you sign up, we store the tag with your address.
Only these counters and the link's tag are stored — no IP address, no referring
page, no cookies.
There is no automated decision-making within the meaning of Art. 22 GDPR. The AI identification is a suggestion that you confirm or discard.