Sprigsy privacy policy

Effective date: November 13, 2026
Contact: sprigsy-app@pxkiln.com

Summary

Sprigsy is a one-plant windowsill game. There are no accounts, and we never ask for your email, phone number, location, photos or contacts. If you use Friends, the names you choose and a summary of your garden are shared with the friends you swap codes with. If you turn on cloud backup, your save file is stored on our server so you can restore it on a new phone. We do not sell personal data. Ads and purchases are provided by Google and Apple. Anonymous usage statistics can be turned off in Settings.

Data stored on your device

Your garden, progress, settings and consent choices are saved in the app's private storage. We do not receive this data unless you use Friends or cloud backup (below). It is deleted when you uninstall the app, unless your phone's own backup (Android Auto Backup or iCloud) restores it.

Advertising (Google AdMob)

Sprigsy shows optional rewarded ads that you start yourself. Ads never interrupt your garden. When an ad is requested, Google's SDK may collect the Android Advertising ID (the app does not request the iOS advertising identifier), approximate location derived from your IP address, ad interaction data and diagnostics, to serve and measure ads and prevent fraud. In the EEA, UK, Switzerland and other regions that require it, ads are requested only after you answer Google's consent form, and your choice decides whether ads are personalized. You can change it any time in Settings > Privacy options. See https://policies.google.com/technologies/ads.

Purchases (Google Play, Apple App Store)

Purchases are processed by Google or Apple; we never receive your payment details. The app learns only whether you own a product and keeps that on your device.

Anonymous usage statistics

If allowed, the app sends anonymous events to PostHog (EU region): first launch; session start and end with its length; care actions (which action, plant species and growth stage); a plant started, bloomed or harvested (species, day of bloom, seed count); cuttings created, shared, received and planted; invites shared; friends added and visited; friend rewards earned and friend errors (short reason codes); seasonal seeds earned; timelapses and photos shared; backups uploaded and restored; rewarded ad requests, views and rewards (which placement); purchases and failures (which product); and whether you allowed reminders and opened one.

Each event carries a random install identifier that is not linked to you, plus app version, platform, OS major version and language. We do not send your IP address for analytics, device model, advertising identifier, names, codes or free text. Where consent is required (EEA, UK, Switzerland) analytics is off until you turn on "Share anonymous usage stats"; elsewhere it is on by default and can be turned off. Turning it off stops sending and clears unsent events; "Reset analytics ID" creates a new identifier.

Friends (our server, run on a rented server from Contabo behind Cloudflare)

Only if you open Friends, send a cutting, share an invite or enter a code, the app sends our server:

• a random device identifier and a secret token (stored as a hash);
• your friend code, and the gardener and plant names you type;
• a summary of your garden that friends can visit: plant species, growth stage, pot, window view and greenhouse shelf (not your journal, Dew or purchases);
• your friendships and blocks, the cuttings you sent and received, invite rewards, and any reports you make;
• a salted hash of your IP address, used only for rate limits and invite-abuse limits (the raw address is not stored).

Names are shown only to friends who swapped codes with you; you can report or block a friend in the app. Names are limited to 14 characters and links, handles and phone numbers are rejected. Nothing here is linked to your analytics identifier or advertising ID. Delete it any time in Settings > Delete my online data. It is also deleted after 180 days without use; unredeemed cuttings expire after 90 days.

Cloud backup (our server, run on a rented server from Contabo behind Cloudflare)

Cloud backup is optional and starts only when you turn it on in Settings. It uploads a copy of your save file (your garden, plants, journal, seeds, Dew, your chosen settings and purchase flags) to our server, tied to the random device identifier above, so you can restore it on a new phone. Settings shows a garden recovery code; enter it on the new phone to restore. Keep the code private: anyone who has it can restore your garden. Your save file contains no email, location or contacts.

Only your latest backup is kept. Delete it any time in Settings; deleting your backup does not delete the copy on your phone. It is also deleted after 180 days without use. Android Auto Backup, if you have it on, separately copies the save file to your Google account under Google's policies.

Sharing pictures and timelapses

The timelapse GIF and photo-mode card are created on your phone and shared only through your phone's share sheet to the app you choose. Nothing is sent to our server. Names you gave your plant or garden appear in the picture you share.

Reminders

Reminders are local notifications scheduled on your phone. We do not use push notifications and we do not receive your notification settings.

Technical data

Our server receives nothing beyond the above. Google, Apple, PostHog, Contabo (our hosting provider) and Cloudflare (our network provider) may log technical data (such as IP address) under their own policies.

Legal bases (EEA/UK)

Advertising and fraud prevention: consent where required, otherwise legitimate interests. Analytics: consent where required, otherwise legitimate interests. Friends and cloud backup: performance of the service you ask for. Purchases: performance of the contract, handled by the stores.

Sharing

Only with the providers above (Google, Apple, PostHog, Contabo, Cloudflare) and, for Friends, with the friends you choose. We do not sell personal data, track you across apps or sites, or show the iOS tracking prompt.

Retention

Analytics events: 12 months. Friends data and cloud backup: until you delete them, or 180 days without use. Google and Apple follow their own policies. Data on your device stays until you uninstall.

International transfers

Our providers may process data outside your country, including in the United States. They rely on standard contractual clauses or equivalent safeguards.

Your rights

Depending on where you live: access, correct, delete, export, object, restrict, withdraw consent, and complain to a supervisory authority. Most data is anonymous or on your device, so we usually cannot identify data about you; if you send us your garden recovery code or friend code we will help. Use Settings to delete your friends data and cloud backup, to change analytics and to manage ad choices (Settings > Privacy options). You can also reset or limit your advertising ID in your phone's settings.

Children

Sprigsy is a general-audience game and is not directed at children under 13 (or the age set by local law). We do not knowingly collect personal data from children. Ad requests are limited to PG content.

Changes

We may update this policy. The effective date shows the latest version and material changes will be described in the app or on the store listing.

Contact

Sprigsy is made by PxKiln. Questions, privacy requests or complaints: email sprigsy-app@pxkiln.com.