ViberzLab logoViberzLab
Beleaf · Privacy Policy

Privacy Policy

This policy explains what data Beleaf collects, why we collect it, who we share it with, and how you can control it. We will never sell your personal data.

Last updated: May 18, 2026

1. Overview

Beleaf is a plant care app developed by ViberzLab LLC. When you use Beleaf, we collect limited data to provide plant identification, health analysis, care scheduling, and personalised reminders. This policy applies to the Beleaf iOS application and any associated services.

2. Data you provide directly

Plant photos

When you scan a plant, your photo is sent securely to our backend server and then forwarded to Google Gemini AI for identification and health analysis. Photos are processed in real time and are not stored permanently on our servers after analysis is complete.

Observations and notes

Optional text you type before scanning (symptoms, observations) is sent to our backend alongside your photo to improve identification accuracy. This text is not stored after the analysis request completes.

App feedback

If you submit feedback through the in-app rating flow, your rating (1–5) and optional message are stored in our secure database (Supabase) along with your anonymous user ID, app version, OS version, and device model. This data is used solely to improve Beleaf and is not shared with third parties.

3. Data collected automatically

Location

If you grant location permission, we use your GPS coordinates to fetch local weather data from OpenWeatherMap. This improves the accuracy of your plant care schedule. Your coordinates are cached on your device only and are never sent to our servers or stored. If location permission is denied, we estimate your approximate location from your IP address via ipinfo.io solely for weather purposes.

Light meter readings

Lux values measured using your device's light sensor are sent to our backend to generate an accurate care schedule. These readings are not stored after processing.

Anonymous usage identifier

A random UUID is generated on your device the first time you open Beleaf and stored locally. This ID is used to link your analytics events in PostHog. It is not tied to your name, email, or any other personally identifiable information.

4. Third-party services

We use the following third-party services to operate Beleaf. Each is a data processor acting on our behalf under appropriate data processing agreements.

Google Gemini AI

Your plant photos and context data are sent to Google Gemini for AI-powered identification and health analysis. Google processes this data in accordance with their Privacy Policy.

PostHog (Product Analytics)

We use PostHog to understand how users interact with Beleaf — for example, which features are used most, where users encounter issues, and how the app performs over time. PostHog collects:

  • Anonymous user ID (the UUID generated on your device)
  • App events (screens visited, buttons tapped, features used)
  • App version and OS version
  • Attribution data forwarded from AppsFlyer

PostHog does not collect your name, email, or contact information. Data is stored on PostHog's US-based servers. See their Privacy Policy.

AppsFlyer (Mobile Attribution)

AppsFlyer helps us measure the effectiveness of our advertising campaigns by tracking app installs and attribution. AppsFlyer may collect:

  • Device advertising ID (IDFA) — only if you grant App Tracking Transparency (ATT) permission on iOS 14.5 and above
  • Install timestamp and app open events
  • Device model, OS version, and country
  • SKAdNetwork data (Apple's privacy-preserving attribution framework)

We request ATT permission before collecting the IDFA. If you decline, only privacy-preserving SKAdNetwork attribution is used. AppsFlyer is certified under GDPR and CCPA. See their Privacy Policy.

Meta (Facebook) Ads

We run advertising campaigns on Meta platforms (Facebook and Instagram). Meta may receive attribution signals from AppsFlyer to measure the performance of these campaigns. Meta does not receive your plant photos, notes, or feedback. See Meta's Privacy Policy.

TikTok Ads

We run advertising campaigns on TikTok. TikTok may receive attribution signals from AppsFlyer to measure campaign performance. TikTok does not receive your plant photos, notes, or feedback. See TikTok's Privacy Policy.

RevenueCat (Subscription Management)

RevenueCat manages in-app purchases and subscription state. RevenueCat collects an anonymous app user ID and your purchase history via Apple. No personal contact information is shared with RevenueCat. See their Privacy Policy.

OpenWeatherMap

Your approximate location (derived from GPS or IP) is used to request local weather data from OpenWeatherMap. This improves the accuracy of care schedules and watering recommendations. See their Privacy Policy.

Supabase (Feedback Storage)

Feedback submitted through the in-app rating flow is stored in Supabase. Data is hosted on Supabase's infrastructure and is only accessible to the Beleaf development team. See Supabase's Privacy Policy.

5. What we do not collect

  • No name, email address, or phone number
  • No account creation is required to use Beleaf
  • No access to your camera roll beyond the photo you deliberately capture
  • No microphone access
  • No contact list or address book
  • No browsing history or cross-app tracking (beyond ATT-consented IDFA)
  • We do not sell, rent, or trade your data with any third party

6. Data stored on your device

All plant data — including your plant photos, health snapshots, care schedules, and activity history — is stored locally on your device. This data does not leave your device except when photos are sent for AI analysis as described above. You can delete all locally stored data by deleting the Beleaf app from your device.

7. Notifications

Beleaf may send local push notifications to remind you of care tasks (watering, fertilizing, etc.) and health check-ins. These notifications are generated entirely on your device and do not require sending any data to our servers. You can disable notifications at any time in your device Settings.

8. App Tracking Transparency (ATT)

On iOS 14.5 and above, Beleaf requests ATT permission before accessing your device's advertising identifier (IDFA). This permission is used exclusively for measuring ad campaign attribution via AppsFlyer. If you decline, Beleaf functions fully and we rely only on Apple's privacy-preserving SKAdNetwork for attribution measurement. You can change this permission at any time in Settings → Privacy & Security → Tracking.

9. Data retention

Analytics events are retained by PostHog for up to 12 months. Feedback submissions are retained in Supabase indefinitely unless you request deletion. Plant photos sent for analysis are not retained on our servers after processing.

10. Your rights

Depending on your country of residence, you may have the following rights:

  • Access: request a copy of the data we hold about you.
  • Correction: request correction of inaccurate data.
  • Deletion: request deletion of your data. Since most data is stored locally on your device, deleting the app removes it. For analytics and feedback data, contact us directly.
  • Opt-out: you can opt out of analytics tracking by declining ATT permission and by contacting us to request deletion of your PostHog events.

To exercise any of these rights, contact us at contact@viberzlab.com.

11. Children

Beleaf is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with data, please contact us and we will delete it promptly.

12. International data transfers

Our third-party service providers (PostHog, AppsFlyer, Supabase, Google) may process your data outside your country of residence, including in the United States. Each provider implements appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure your data is protected in accordance with applicable law.

13. Changes to this policy

We may update this privacy policy from time to time as Beleaf evolves. When we make significant changes, we will update the "Last updated" date at the top of this page. Continued use of Beleaf after changes are posted constitutes acceptance of the updated policy.

14. Contact

If you have any questions about this privacy policy or how we handle your data, please contact us: