Privacy Policy

1. Information we collect

Account data: email address, name or nickname, profile image (as provided by Google sign-in), sign-in method, registration date.

Service data: plant information (scientific name, cultivar, nickname), photo files and capture dates, notes, plan and sync status.

Support data: enquiry type, message, reply-to email, and app version, language and device information when you agree to attach them.

Automatically collected data: access timestamps and error records (error message, screen, app version, device and operating-system information).

Operational statistics: for free and paid accounts, we store per-installation counts of plants, growth records, photos and care records, photo storage size, pending sync operations and problems, a random installation identifier, app version and collection time. We also store the country code observed from the access network. These summaries do not include raw IP addresses or the photo and note contents of free accounts.

External search data: when you use scientific-name search, the query and connection information generated in transit may be sent to the GBIF search service.

Payment data: handled by the payment provider. The Operator does not store card numbers or other payment credentials.

When a selected photo is newly saved, your device redraws it and encodes a WebP image without copying the original photo’s EXIF location or other metadata into that output file. The capture date may be saved separately with the record. This does not mean existing stored files or originals you keep separately are retrospectively cleaned.

2. Purpose of processing

Creating accounts, verifying identity and maintaining sign-in sessions.

Providing the Service, including storing, syncing, backing up and restoring plant records.

Managing plans and usage limits, and processing payments and refunds.

Receiving and answering enquiries, resolving incidents and improving quality.

Meeting legal obligations and preventing abuse.

3. Retention periods

Account and service data are deleted from active systems without undue delay when you delete your account. Records required by law are segregated and limited to necessary fields: contract and payment records for 5 years, consumer complaints and dispute records for 3 years, then destroyed. Account deletion does not immediately end an external payment provider’s separate statutory retention duties.

Cloud photos and synced server records after a BARCHIVE PRO subscription ends: deleted 30 days after the plan change. Local device records remain.

Cloud photos and synced server records after a confirmed refund with revocation, chargeback or voided payment: kept for backup for 7 days after the account changes to FREE, then deleted, only if no other valid PRO entitlement remains. Other valid entitlements and photos and records stored on your device remain.

Support enquiries: kept for 3 years from receipt, then destroyed (dispute handling).

Error records: kept for up to 1 year, then destroyed.

Security audit records of administrator permissions, PRO changes and operating-rule changes are kept for up to 3 years. Other security details are kept for 30 days, daily request summaries and device aggregates for 90 days, and request-deduplication identifiers for up to 2 days. Expired records are deleted at the next cleanup run.

4. Service providers and external services

Supabase Pte. Ltd. processes authentication, database and photo-storage data on our behalf. BARCHIVE’s primary database and photo storage are in Seoul, Republic of Korea.

Plus Five Five, Inc. (Resend) sends sign-up confirmation, password-reset and support-notification emails on our behalf for both Android and the web.

Cloudflare, Inc. delivers web pages and app files and provides HTTPS and security services. Google sign-in, Google Play and Paddle purchases, and GBIF search involve processing by those providers under their own policies and the feature-specific information below. Android ads and Firebase are described separately.

5. International transfers

Processing and storage needed to perform the service contract, such as authentication, record storage and email delivery, rely on an applicable legal basis and safeguards, including Article 28-8 of Korea’s Personal Information Protection Act. Optional advertising and transfers requiring separate consent use the relevant consent process. This notice itself is not that consent.

Supabase Pte. Ltd. (Singapore; primary data storage in Korea): account identifiers, email, records and photos are processed over encrypted connections when you authenticate or sync to the cloud, to perform the service contract. Account-deletion and PRO-expiry retention follows section 3. Support and subprocessor countries and tasks: https://supabase.com/legal/subprocessors. Contact: [email protected]. Refusing necessary processing prevents account authentication and cloud use.

Google LLC (United States): choosing Google sign-in or a Play purchase sends account identifiers, email and profile data, or order and subscription identifiers, over encrypted connections for authentication, billing, subscription management and fraud prevention. Retention depends on Google’s data-specific deletion rules and legal duties: https://policies.google.com/technologies/retention. Privacy requests: https://support.google.com/policies/answer/9581826. Email sign-in is an alternative to Google sign-in; refusing purchase information prevents that purchase.

Plus Five Five, Inc. (Resend, United States): confirmation, password-reset and support emails send your email address and authentication link, or message and optional device details, over encrypted connections. Processing lasts as needed for delivery, troubleshooting and statutory duties. Processing terms, subprocessors and deletion information: https://resend.com/legal/dpa and https://resend.com/legal/privacy-policy. Contact: [email protected]. Refusal prevents those email functions.

Cloudflare, Inc. (United States and its global delivery network; web visits): HTTPS requests include IP address, access time, URL, browser and routing information for delivery and security. Local plant photos and notes are not uploaded to this web host. Locations, retention and deletion: https://www.cloudflare.com/privacypolicy/ and its published subprocessor list. Contact: [email protected]. Refusing necessary transmission prevents use of the website.

GBIF, Global Biodiversity Information Facility (Denmark, with countries used by its subprocessors): scientific-name suggestions send your query and connection information such as IP over HTTPS, without your BARCHIVE account, photos or notes. GBIF independently processes this for search and service operation; its policy provides for deletion of Internet-service usage data after 30 days. Contact: [email protected], +45 35 32 14 70. Locations, subprocessors and rights: https://www.gbif.org/terms/privacy-policy. To avoid scientific-name search, choose Simple entry in Settings.

The UK seller and the data, purpose, retention and refusal effects for Paddle web purchases are explained below under “Web billing, cancellation and refunds (Paddle)”. See “Android ads and privacy choices” for AdMob, UMP, Firebase and how to change your choices.

6. Disclosure to third parties

We do not sell personal data. Processing by service providers and transfers to external services are described below for each feature.

Processing on our behalf and features processed independently by external providers follow the service, transfer and purchase-channel information in this policy. Disclosures to legal or accounting advisers or authorities also require a lawful basis and are limited to necessary information.

7. Your rights

You may access, correct or delete your personal data, or request that processing be suspended, at any time.

You can edit or delete records and delete your account directly in the app. Free-plan users can download their on-device data as a ZIP backup.

For any other request, contact [email protected] and it will be handled without delay.

Where applicable law provides these rights, you may withdraw consent, object to or restrict processing, and request a portable copy or transfer to another service. Contact [email protected]; after verifying your identity, we respond within the statutory time limit and explain any lawful restriction. You may complain to your local data-protection authority. Acknowledging this policy is not blanket consent for optional ads or transfers requiring separate consent.

The Service is intended for people aged 14 and over. We do not offer a parental-consent registration process for children under 14. If we learn that data from a child under 14 has been collected, we verify the situation and take appropriate steps, including deletion. Contact [email protected] with concerns.

8. Destruction of data

Personal data is destroyed without delay once the retention period expires or the purpose of processing is achieved.

Electronic records are deleted by means that prevent recovery, and stored photo files are permanently removed.

9. App and browser storage and authentication

Optional feature-usage analytics are not collected.

Sign-in state, language and theme preferences, and Free-plan records and photos are stored in secure app storage and app-specific device storage.

Deleting the app or clearing its data in device settings may also delete Free-plan records held only on that device. Keep regular ZIP backups.

Free web records and photos use IndexedDB in the current browser. Sign-in state, language and theme use browser storage; offline app files use a service worker cache. The web app does not use advertising or behavioural tracking technologies.

Clearing browser data, ending private browsing or automatic storage cleanup may remove local records. An installed PWA and its browser may have separate storage. Free-plan users should keep regular ZIP backups.

Free local records do not automatically sync between devices or browsers, even with the same account. Cloud sync requires a valid PRO entitlement.

10. Security measures

Data is encrypted in transit (HTTPS), access rights are minimised, and row-level access control restricts each user to their own data.

Passwords are stored in a form that cannot be decrypted; the Operator cannot see your password.

11. Data protection officer and contact

Data protection officer: 오수정

For privacy complaints in Korea you may also contact the Korea Internet & Security Agency privacy centre (privacy.kisa.or.kr, 118).

Business: 럼플랜트 (operating brand: lumplants)

Representative: 오수정

Business address: 대한민국 36952 경상북도 문경시 새동네2길 5-25, 101호(모전동)

Public telephone: +82 10-2427-3845

Email: [email protected]

Business registration number: 408-22-25814

Korean mail-order business registration: 2026-경북문경-104

Website hosting provider: Cloudflare, Inc.

12. Changes to this policy

Any change to this policy will be announced in advance inside the Service.

Effective date of this version: 2026-10-29

13. Operational and security indicators

To limit repeated signups, we briefly retain server-keyed pseudonymous IP and email identifiers. Identifiers older than 24 hours are deleted by the next cleanup; daily security-check summaries are kept for 30 days. Verified access-country evidence is compared with app report receipts for review, without automatic blocking based only on a missing report.

For account protection and operations, we process authentication events, access denials, rate limits, server requests and observable photo transfer bytes. Security indicators use a server-keyed pseudonymous IP identifier instead of raw IP. Content-free record identifiers prevent duplicate counts across devices.

Optional feature analytics for active days, record creation times, compare, grid and sharing have been discontinued. Related settings and admin analytics have been removed. Existing optional activity details expire after 30 days; daily data, consent and creation-time summaries expire within 90 days.

New security details: 30 days; daily request summaries: 90 days; request deduplication identifiers: up to 2 days; device record snapshots: up to 90 days since the last report. Existing separate payment/admin audit retention is unchanged.

New logs contain no photos, notes, passwords, tokens, secret keys or request bodies. Access requires a server-verified administrator. Device-reported operational counts are reference data.

14. Web billing, cancellation and refunds (Paddle)

When preparing or processing checkout, BARCHIVE sends the verified account email and checkout-link identifier to Paddle over encrypted connections. Customer, transaction and subscription IDs, product, price, status, paid period and refund outcomes are received to manage PRO. Plant photos and notes are not sent to Paddle; BARCHIVE does not collect or store card numbers or payment authentication details.

The seller for South Korean buyers is Paddle.com Market Limited (United Kingdom). When a purchase is requested, the API and Paddle Checkout process information for payment, receipts, tax, subscription management, refunds and fraud prevention. Paddle independently processes address and payment details entered directly by buyers. Other seller entities and international transfers are described in its Buyer Terms and Privacy Notice (https://www.paddle.com/legal/privacy).

Paddle retains purchase data for its transaction relationship, legal retention and disputes or claims. Request access, correction or deletion at https://preferences.paddle.com or [email protected]. Withholding required information prevents web purchase; free local recording remains available.

BARCHIVE stores the acknowledgement time, display language, text version and displayed wording for immediate service, renewal, cancellation and refunds with the checkout record. Billing-link records follow contract, payment and dispute retention rules. After account deletion, transaction and notification records may remain with account links removed; Paddle legal retention is separate. If a refund leaves no other valid entitlement and the account becomes FREE, cloud copies are kept for backup for 7 days, then deleted. Photos and records stored on your device remain.

15. Android ads and privacy choices

Some image-sharing tools in the free Android app may offer Google AdMob rewarded ads. Google may process IP addresses, device and app information, identifiers and ad interactions to serve and measure ads and prevent fraud. Ad requests do not include your plant photos, plant names, notes, care records or sign-in email.

Ads are requested only after Google’s User Messaging Platform (UMP) confirms that requests are permitted. A consent form is provided where required. You can change your choices or withdraw consent through “Ad privacy options” when it appears in Settings. Non-personalised ads may still process information needed to deliver ads and maintain security.

Firebase Remote Config processes an installation identifier and app and device information on Google’s servers when checking whether ads are enabled. Your plant photos and records are not sent. There is no periodic background polling.

Firebase Analytics collection is disabled. Google’s Privacy Policy (https://policies.google.com/privacy) explains its data processing, retention and your rights. This advertising feature is not used in the web app.

16. Revision history

Privacy policy 2026-10-29: clarified existing platform-specific and provider processing and corrected misplaced paragraphs. This does not start new collection or turn acceptance of the Terms into ad consent. Previous text: https://barchive.app/legal/archive/20261028/en/privacy/