Privacy Policy
LEGAL_REVIEWED: true to config.js once it's been reviewed to remove this notice.
The Hope Harvest Group LLC ("The Hope Harvest Group," "Morphora," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use Morphora and related services (the "Service").
By using the Service, you acknowledge the practices described in this Privacy Policy.
1. Scope
This Privacy Policy applies to personal information collected through Morphora, including when you create an account, manage your plant collection, upload photographs or files, make a purchase, contact us, or otherwise interact with the Service.
It does not apply to third-party websites, applications, payment platforms, integrations, or services that have their own privacy policies.
2. Personal Information We Collect
Account and identity data: Full name, email address, account credentials, account identifiers (source: directly from you).
Payment and transaction data: Subscription or lifetime-purchase details, payment status, transaction identifiers, and billing details (source: from our payment processor, or directly from you).
Plant catalog and uploaded content: Plant records, notes, photographs, uploaded files, messages, care-related inputs (source: directly from you).
Device and online activity data: IP address, browser type, operating system, device identifiers, pages or features used, interactions (source: automatically from your device or browser).
Approximate location data: General location inferred from IP address or device/browser settings when available (source: automatically, or from you).
Communications: Messages, questions, support requests, feedback, and correspondence (source: directly from you).
Security and diagnostic data: Authentication events, error reports, crash information, fraud-prevention signals (source: automatically, from our service providers).
Payment-card details are collected and processed directly by our payment processor. We may receive limited payment-related information, such as transaction status, the payment method type, a partial card reference, a customer identifier, and billing country or address information.
Photos and files may contain personal information, including metadata, location-related information, or images of identifiable people or property. Please review content before uploading it.
3. How We Use Information
We may use personal information to:
- Create, authenticate, and manage your account.
- Provide and maintain plant cataloging, storage, and other Service features.
- Process subscriptions, lifetime purchases, refunds, renewals, and other transactions.
- Enforce plan limits and administer free and paid plans.
- Communicate with you about your account, transactions, support requests, security matters, policy changes, and Service-related updates.
- Diagnose issues, troubleshoot problems, maintain backups, monitor performance, and improve reliability.
- Analyze use of the Service to understand demand, identify trends, develop and evaluate new features, and improve the Service.
- Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms.
- Comply with legal obligations, enforce agreements, resolve disputes, and protect the rights, privacy, safety, and property of users, us, and others.
- Send marketing communications only where permitted by law and subject to available opt-out choices.
We do not use AI features to process User Content as part of the Service based on our current practices. If that changes materially, we will update this Privacy Policy and provide notice or obtain consent where required.
4. Cookies and Similar Technology
The app itself does not use advertising or tracking cookies. It keeps a small amount of information in your browser's own storage on your device — such as a saved copy of your collection for offline use, and your display preferences — which stays on your device and is not used to track you across other sites. Some outside services listed in Section 12 below (for example, Google Fonts, if you use the default appearance) may receive a request directly from your browser as an ordinary part of loading their content; these are not advertising cookies and are not used by us for tracking.
You can control or clear your browser's storage through your browser's own settings. Doing so may affect the app's ability to keep you signed in or work offline.
5. How We Share Information
We may share personal information with:
- Service providers: hosting, cloud storage, authentication, database, payment, email, and infrastructure providers that process information for us or help us operate the Service. See Section 12 for the specific providers we currently use.
- Payment processors: providers that process payments, administer subscriptions, prevent payment fraud, manage refunds, and maintain transaction records.
- Professional advisers and business partners: lawyers, accountants, insurers, auditors, and similar advisers when necessary for legitimate business, legal, or security purposes.
- Authorities and legal recipients: government agencies, regulators, courts, law enforcement, or other parties when required by law, legal process, or to protect rights, safety, property, and security.
- Business-transfer recipients: a buyer, investor, successor, lender, or other party involved in a proposed or completed merger, acquisition, financing, reorganization, sale of assets, insolvency, or similar transaction.
- With your direction or consent: other parties when you request or authorize the disclosure.
We do not sell personal information for money. We do not knowingly share personal information for cross-context behavioral advertising. If our practices change, we will update this Privacy Policy and provide any required choices, notices, or consent.
6. International Processing
Morphora is operated from the United States. Because the Service is available globally and uses third-party providers, your information may be collected, stored, processed, or transferred in the United States and other countries where we or our service providers operate.
Those countries may have privacy laws that differ from the laws of your location. Where required, we will use appropriate safeguards for international transfers, such as contractual commitments or another lawful transfer mechanism.
7. Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain your account, meet legal and accounting obligations, resolve disputes, enforce agreements, maintain security, and preserve backup systems.
Our retention periods generally follow these criteria:
- Account information: kept while your account remains active and for a reasonable period afterward for security, legal, dispute-resolution, and audit purposes.
- Plant records, photos, files, and messages: kept while your account is active, subject to deletion requests, account termination, and limited backup retention.
- Transaction records: kept as long as necessary for accounting, tax, fraud-prevention, legal, and audit purposes.
- Logs and diagnostics: kept for a limited period appropriate for security, troubleshooting, and Service improvement.
- Support communications: kept as long as needed to respond, maintain records, and resolve related issues.
Using "Delete my account" inside the app removes your plants, photos, settings, and login right away. Deletion from active systems may not immediately remove information from backup systems, and we may retain a limited purchase record (your email, the date, and the amount) unless you also ask us to erase it, so you can resume access later if you choose. We may also retain information where required or permitted by law.
8. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encrypted connections and database rules that ensure each account can only read and change its own data.
However, no online system, data transmission, or storage method is completely secure. You should use a strong, unique password, keep your account credentials confidential, and contact us promptly if you believe your account has been compromised.
9. Your Privacy Choices and Rights
Depending on where you live and subject to applicable law, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete personal information.
- Request deletion of certain personal information.
- Request a portable copy of certain information.
- Object to or restrict certain processing.
- Withdraw consent when processing depends on consent.
- Opt out of marketing communications.
- Appeal a decision concerning a privacy request, where applicable.
- Lodge a complaint with a data-protection authority, where applicable.
Many of these are available directly inside the app: a downloadable backup file, an Excel export, and a photo download are all available under Account, and "Delete my account" handles a full deletion request immediately. For anything else, email thehopeharvestgroup@gmail.com with the subject line "Privacy Request." State your name, the email address associated with your account, your country or state of residence, the right you wish to exercise, and details sufficient for us to process your request.
We may need to verify your identity before completing a request. We may deny or limit a request where allowed by law, including where fulfilling it would affect others' rights, compromise security, conflict with legal obligations, or be technically infeasible.
You can opt out of non-essential marketing emails by using the unsubscribe link in those messages or by contacting us. You will still receive essential communications about your account, payments, security, and the Service.
10. California Privacy Information
This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), applies to Morphora.
We collect the categories described in Section 2 for the business and commercial purposes described in Section 3. We disclose information to the categories of recipients described in Section 5.
We do not sell personal information for monetary consideration and do not knowingly share personal information for cross-context behavioral advertising. We do not knowingly sell or share personal information of consumers under 16 years of age.
California residents may have rights to know, access, correct, delete, receive a portable copy of, and limit certain uses or disclosures of sensitive personal information, as applicable. California residents also have the right not to receive discriminatory treatment for exercising applicable privacy rights.
To exercise a California privacy right, contact thehopeharvestgroup@gmail.com with the subject line "California Privacy Request." You may use an authorized agent where permitted by law; we may request proof of the agent's authorization and independently verify your identity.
CCPA/CPRA applies only to businesses meeting defined thresholds. Even if The Hope Harvest Group does not currently meet those thresholds, these disclosures are intended to support transparent privacy practices.
11. Children's Privacy
Morphora is not directed to children under 16, and we do not knowingly collect personal information from children under 16.
If you are under 16, do not create an account or submit personal information through the Service. If we learn that we have collected personal information from a person under 16 without appropriate authorization, we will take reasonable steps to delete it.
If you believe a child under 16 has provided personal information to us, contact thehopeharvestgroup@gmail.com.
12. Third-Party Services
The Service depends on the following outside providers for important functions. Each processes personal information under its own terms and privacy policy, and under contractual obligations to us where applicable:
| Who | What for | What they receive |
|---|---|---|
| Supabase | Hosting the database, signing you in, and storing your uploaded photos | Everything you save in the app |
| Resend | Sending account emails, such as the sign-up confirmation | Your email address |
| Cloudflare | Hosting the website itself and managing our domain | Your IP address and the pages you load |
| Stripe | Processing payments and subscriptions | Your email and payment details |
| GBIF (Global Biodiversity Information Facility) | Botanical name suggestions as you type | The name you are typing, sent directly from your browser |
| iNaturalist, Wikimedia Commons, and Openverse | The "find photos online" search | The botanical name you searched, sent directly from your browser |
| Google Fonts | Showing the app's default typefaces | Your IP address, sent directly from your browser. Choosing "Device default" under Appearance avoids this. |
The last three rows are requests your browser makes directly to those services as part of loading a page; they are not routed through our own servers.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, law, or the Service. We will post the updated version, change the effective date, and provide additional notice when required by law.
Your continued use of the Service after an updated Privacy Policy takes effect is subject to the updated policy to the extent permitted by law.
14. Contact Us
For questions, concerns, or privacy requests, contact:
The Hope Harvest Group LLC
Tampa, Florida, USA
Email: thehopeharvestgroup@gmail.com