Orto Privacy Policy

Version: 1.3 · Last updated: 28 October 2026

Controller

PROFILES S.R.L., Via Marconi 30, 50131 Florence, Italy. Contact: support@orto.help.

What data we process and why

• Garden data (plants, dates, completed actions, progress): to run the planner. Without an account it stays on your iPhone; with an account we also store it on our server to sync it (performance of contract).
• Approximate location (city or area and hemisphere): to match the calendar to your season. If you use your phone's location we only store rounded coordinates and the city name, never your exact position. Location is optional: you can type your city instead.
• Account: email (or Apple's anonymous relay address) and display name. You can use Sign in with Apple: Apple only shares an identifier, your email (possibly the anonymous relay) and, if you choose, your name. You can delete your account at any time in the app (Profile › Delete account).
• Recent garden weather: to tailor suggestions we store on our server, linked to your garden, the observed weather of the last few days (for example rain and temperatures) obtained from Open-Meteo using the garden's rounded coordinates. Recent weather and forecasts are also sent to the artificial intelligence model (through OpenRouter) when you use the assistant or photo analysis, to adapt the advice; coordinates are never sent to the AI.
• Board: listings, photos and contact details you choose to publish are visible to other users. We only show your approximate area.
• Community: the posts, photos, comments and likes you publish are visible to other users, together with your display name and level; if you link a post to a plant of your garden we only show the crop name. Photos are downscaled and stripped of location metadata. When you delete a post or comment it disappears at once and is permanently erased after 30 days (performance of contract; handling of reports).
• Reports and blocks: to moderate the board and the Community and comply with the DSA.
• Check-in photos: stay on your iPhone.
• AI photo analysis (only when you ask for it, after your explicit consent): the photo, downscaled and without location metadata, is sent to our servers and from there, through OpenRouter, Inc. (USA), which routes the request, to the model we use on our behalf: currently Alibaba Cloud's Qwen, alternatively Google's Gemini (Google Cloud Vertex AI). The photo is sent only for the analysis: Orto does not keep it. Requests exclude providers that use data to train models or retain it for that purpose; with Gemini we also use only zero data retention endpoints, which are not available for Qwen today. We keep the analysis result and the monthly count, linked to your account, for 12 months. Legal basis:. You can withdraw consent in Profile.
• Garden assistant questions (only when you ask, under the same consent as the AI analysis): your question, the latest messages of the conversation and a summary of your garden (plants, dates, beds, recent tasks and harvests, the area name you typed and the weather forecast; never coordinates) are sent to the same model through OpenRouter. We keep the question and the answer, linked to your account, for 12 months together with the monthly count.
• Weather alerts (only if you turn them on): your gardens' coordinates, rounded to about 1 km, are sent to our server and from there to Open-Meteo for the forecast; Open-Meteo receives no account data. With an account we store rounded coordinates, thresholds, language and time zone to send alerts even when the app is closed, and the list of alerts sent so that none is sent twice (performance of contract).
• Automatic check of public photos: photos published in the Community and on the board are analysed by an artificial intelligence model through OpenRouter to detect prohibited content (for example nudity, violence, personal data). We keep the result of the check, not an extra copy of the photo. Legal basis:.
• Public garden (only if you turn it on): display name, the area you typed, level, chosen badges, bio, garden names, number of beds and crops being grown become visible to every Orto user. You can turn it off at any time.
• Professional sellers on the board: the business name, VAT number, address and e-mail you enter are shown to buyers (legal duty, DSA art. 30).
• Amazon links: when you tap a link we only record an analytics event (which product, no personal data); Amazon's privacy notice applies on Amazon.
• Orto Pro subscription: purchases are made with Apple; RevenueCat manages the subscription status on our behalf, linked to an identifier of your account. We never receive your payment details.
• Usage statistics (app events linked to a random device identifier, without email, name or contacts), collected with Mixpanel (EU servers), and crash reports (Sentry, without identifying data): to improve the app (legitimate interest). You can turn them off in Profile › Usage statistics.
• Notification token: only if you turn notifications on.

We do not sell your data and we do not do advertising tracking.

Where the data is

Providers that process data on our behalf (processors): Supabase (database and servers, European Union), OpenRouter, Inc. (routing of AI requests, USA), Alibaba Cloud (Qwen model for analyses, questions and photo checks), Google (Vertex AI, Gemini model, as an alternative), Open-Meteo (weather forecasts, rounded coordinates only), RevenueCat (subscription status), Mixpanel (statistics, European Union), Sentry (crashes), Apple (purchases and notifications). Some providers may process data outside the EU with the safeguards required by the GDPR (standard contractual clauses or adequacy decisions). In particular, photos and questions sent to the AI are transferred to the United States (OpenRouter) and processed by the model provider. Reminders are local notifications created on your iPhone; weather alerts and moderation notices may arrive as push notifications through Apple.

How long

As long as you have an account. If you delete your account we delete garden data, profile, listings, posts, comments, likes, published photos and consents; reports concerning you may be kept in reduced form for the period required by law.

Your rights

You can request access, rectification, erasure, restriction, portability and object to processing by writing to support@orto.help. You can delete your account directly in the app. You can lodge a complaint with your data protection authority.

Children

Orto is not intended for children under 14.