Plant Care
Sign in

Version: 1.0 · Effective date: 2026-08-18

Spanish is the legally authoritative version.

Privacy policy

Controller and contact

NATIBOO ORIENTA TU CONOCIMIENTO, S.L. (hereinafter, “NATIBOO”).

Tax ID B91965418. Address: Calle Victoria Kent, 1, 41920 San Juan de Aznalfarache, Seville. Privacy contact: info@natiboo.es.

NATIBOO does not currently have a Data Protection Officer.

Scope

This policy applies to the Plant Care websites, applications and services operated by NATIBOO, including plants.natiboo.es and app.plants.natiboo.es.

Data we use

Landing page. The public landing page may use technical data needed for operation, language preference and analytics preference.

If you expressly accept analytics, Google Analytics 4 may receive aggregated information about landing-page use and certain interactions. We currently measure events related to beta access, application access and language changes.

Custom parameters are currently limited to locale, element position, source locale and destination locale.

We do not send Google Analytics names, email addresses, internal user identifiers, plant data, photographs, assistant questions or other information entered into Plant Care.

Account and service. The account may include email, authentication, language preferences and necessary technical data. The service may include households, homes, spaces, locations, plants, care records, notifications and photographs you choose to save.

Coordinates and light profiles are used for location, time zone, weather and recommendations. Billing retains Stripe identifiers, subscription status, purchases and necessary records; NATIBOO does not store PAN or CVC.

Assistant questions and answers are stored on our domain to provide the conversation. Identification, health and visual-question images are processed and sent to the relevant provider only after contextual notice; they are not stored as persistent media by default.

Purposes and legal bases

Providing the account, collaboration and care features is based on contract performance or pre-contractual measures.

Security, abuse prevention and technical operation may be based on legitimate interest, subject to the relevant balancing test.

Billing and legally required retention may be based on a legal obligation where applicable.

Optional landing-page analytics is based on consent.

Future marketing communications will require a separate, voluntary and unticked choice.

This policy provides information; no blanket privacy consent is requested for registration.

Landing-page analytics

At plants.natiboo.es we use Google Analytics 4 only when you expressly accept analytics. Its purpose is to obtain aggregated website statistics and understand how elements such as beta access and the language selector work.

Google Analytics is not loaded before acceptance. If you reject analytics, Plant Care does not load the Google Analytics tag or send these events.

You can later withdraw your choice through Cookie preferences.

Providers and transfers

Depending on the configured functionality, the following are currently used or may be used:

  • Supabase for authentication, database and storage.
  • Stripe for payments.
  • Resend for transactional email.
  • OpenAI for the assistant when configured.
  • Pl@ntNet and Kindwise for identification or plant health when configured.
  • Google Analytics 4 for plants.natiboo.es analytics when consent exists.
  • Each provider must be reviewed for its terms, DPA, subprocessors, transfers and retention before commercial production.
  • We do not claim that Cloudflare or R2 are active unless their real use is expressly confirmed.

Rights and retention

You may request access, rectification, erasure, objection, restriction and portability where applicable, and withdraw optional consents, by writing to info@natiboo.es.

You may also complain to the Spanish Data Protection Agency (AEPD): https://www.aepd.es/.

Account and functional data are kept while the relationship exists and afterwards according to purpose and obligations. Billing and contractual evidence may be retained when necessary.

Persistent photographs remain until you delete them or close the account; temporary images do not become persistent media by default. Analytics preference is stored locally to remember your choice.