Phyt Cloud Privacy Policy

Version: 1.0 Last Updated: January 2026

1. Introduction

This Privacy Policy explains how Dixon Development LLC ("Company," "we," "us," or "our") collects, uses, shares, and protects your information when you use Phyt Cloud ("Service").

By using Phyt Cloud, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

This policy applies to the Phyt Cloud platform. If you participate in our Beta Hardware Program, additional data practices apply as described in the Beta Hardware Program Agreement.

2. Information We Collect

2.1 Account Information

When you create an account via Google OAuth, we collect:

| Data | Source | Purpose | |------|--------|---------| | Email address | Google | Account identification, communications | | Display name | Google | Personalization | | Profile photo URL | Google | Display in the app |

2.2 Journal and Grow Data

When you use the Service, you provide:

Grow Information: Names, start dates, plant types, growing medium, environment settings
Growth Stages: Current stage, stage history, stage transition dates
Journal Entries: Notes, observations, dates
Measurements: pH, EC, temperature, humidity, VPD, CO2 levels (manually entered)
Plant Varieties: Selected varieties, custom variety information

2.3 User-Generated Content

Photos: Images you upload of your plants and grows
Knowledge Artifacts: Notes, tips, feeding schedules, and other documents you create
Tags and Categories: Organization labels you apply to content

2.4 AI Interaction Data

When you use AI features, we collect:

Prompts: Questions and requests you send to the AI
Context: Grow information shared with the AI for context
Responses: AI-generated responses (stored for conversation continuity)
Photo Submissions: Images you submit for AI analysis
Usage Metrics: Credits consumed, token counts, interaction timestamps

2.5 Device and Sensor Data (Optional)

If you connect Phyt hardware devices:

Sensor Readings: Soil moisture, temperature, flow measurements
Device Information: Device IDs, firmware versions, connection status
Automation Data: Watering events, valve states, schedules
Error Logs: Device diagnostics and error reports

2.6 Billing Information

For paid subscriptions:

Subscription Status: Current tier, billing period, renewal dates
Payment History: Transaction records (amounts, dates)

Note: Payment card details are collected and processed exclusively by Stripe. We do not store your full card number.

2.7 Technical and Usage Data

We automatically collect:

Session Data: Login timestamps, session duration
Feature Usage: Which features you use and how often
Credit Usage: AI credit consumption and patterns
Browser Information: Browser type, operating system (for compatibility)
Push Notification Data: Subscription endpoints for browser notifications

2.8 Communication Data

Support Requests: Communications with our support team
Feedback: Suggestions and feedback you provide

3. How We Use Your Information

3.1 Providing the Service

We use your information to:

Create and manage your account
Store and display your grows, entries, and content
Provide AI-powered features and recommendations
Connect and communicate with your hardware devices
Process subscription payments and manage billing
Send push notifications you've enabled

3.2 Improving the Service

We use aggregated and anonymized data to:

Understand feature usage and popularity
Identify and fix bugs and performance issues
Develop new features based on usage patterns
Improve AI model quality (using anonymized conversation patterns)

3.3 Communications

We may contact you to:

Send service-related notifications (password resets, billing issues)
Notify you of significant changes to the Service or these policies
Respond to your support requests
Send optional product updates (if you've opted in)

3.4 Safety and Compliance

We may use information to:

Detect and prevent fraud, abuse, and security threats
Enforce our Terms of Service
Comply with legal obligations

4. AI and LLM Processing

4.1 How AI Features Work

When you use AI features in Phyt Cloud:

Your prompt (question/request) is sent to our servers
We add relevant context (grow info, variety details) to improve responses
The combined prompt is sent to a third-party AI provider
The AI response is returned to you and stored for conversation history

4.2 AI Providers

We currently use the following AI providers:

OpenAI (GPT-4o and related models)
Anthropic (Claude models)

These providers process your prompts to generate responses. Their processing is subject to their respective privacy policies:

OpenAI: https://openai.com/privacy
Anthropic: https://www.anthropic.com/privacy

4.3 What Data is Sent to AI Providers

When you interact with AI features, we may send:

Your message/prompt
Relevant grow context (name, stage, medium, variety information)
Recent journal entries for context
Images (if you request photo analysis)

4.4 AI Provider Data Retention

OpenAI: Per their enterprise API terms, prompts are not used for model training
Anthropic: Per their API terms, prompts are not retained beyond processing

We select AI providers with enterprise-grade data handling practices.

4.5 Opting Out of AI Features

You can choose not to use AI features. The journal, knowledge library, and other features work independently of AI.

5. Data Retention

5.1 Retention Periods

We retain data based on your subscription tier:

| Data Type | Free | Starter | Grower | Pro | |-----------|------|---------|--------|-----| | Journal Data | 1 year | 2 years | 5 years | Indefinitely | | Photos | 1 year | 2 years | 5 years | Indefinitely | | AI Conversations | 7 days | 30 days | 90 days | Indefinitely | | Knowledge Artifacts | 1 year | 2 years | 5 years | Indefinitely | | Sensor Data | 30 days | 1 year | 2 years | 5 years |

5.2 Account Closure

When you close your account:

Your data is retained for 30 days to allow reactivation
After 30 days, personal data is scheduled for deletion
Some data may be retained in anonymized form for analytics
Backups may contain your data for up to 90 days after deletion

5.3 Legal Retention

We may retain data longer if required by law or to protect our legal rights.

6. Data Sharing

6.1 We Do Not Sell Your Data

We do not sell your personal information to third parties.

6.2 Service Providers

We share data with service providers who help operate Phyt Cloud:

| Provider | Purpose | Data Shared | |----------|---------|-------------| | Google | Authentication | Email, profile info (OAuth) | | Stripe | Payment processing | Billing info, transaction data | | OpenAI/Anthropic | AI features | Prompts, context, images | | Cloud Hosting | Infrastructure | All data (encrypted) | | Push Services | Notifications | Notification content, endpoints |

These providers are contractually obligated to protect your data.

6.3 Legal Requirements

We may disclose information if required by law, including:

Court orders or subpoenas
Government requests (with valid legal process)
To protect our rights or safety
To prevent fraud or illegal activity

6.4 Business Transfers

If Dixon Development LLC is acquired or merged, your data may be transferred to the new owner. We will notify you of any such transfer.

6.5 With Your Consent

We may share information with third parties when you explicitly consent.

7. Data Security

7.1 Security Measures

We implement security measures including:

Encryption: Data encrypted in transit (TLS/HTTPS) and at rest
Access Controls: Role-based access for employees
Authentication: Secure OAuth-based authentication
Infrastructure: Enterprise-grade cloud hosting with security certifications
Monitoring: Automated security monitoring and alerting

7.2 Your Responsibilities

You are responsible for:

Maintaining the security of your Google account
Using a secure, updated browser
Not sharing your account credentials
Reporting suspicious activity immediately

7.3 Security Incidents

In the event of a data breach affecting your personal information, we will:

Investigate and remediate the incident
Notify affected users as required by law
Provide information about steps you can take

8. Your Rights and Choices

8.1 Access Your Data

You can access your data through:

The Phyt Cloud dashboard (view all your grows, entries, and content)
Data export feature (download your data)

8.2 Export Your Data

You can export your data in various formats depending on your tier:

Free: CSV export
Paid Tiers: Full export (CSV, JSON)

8.3 Delete Your Data

You can delete:

Individual grows, entries, photos, and artifacts (through the app)
Your entire account (through settings)

Account deletion requests are processed within 30 days.

8.4 Correct Your Data

You can update your journal entries, grows, and other content directly in the app.

8.5 Notification Preferences

You can manage:

Push notification settings (enable/disable specific alert types)
Quiet hours (when notifications are suppressed)
Email preferences

8.6 Communication Opt-Out

You can unsubscribe from marketing emails by clicking "unsubscribe" in any email. You cannot opt out of essential service communications (security alerts, billing issues).

9. Cookies and Tracking

9.1 Cookies We Use

| Cookie Type | Purpose | Duration | |-------------|---------|----------| | Authentication | Keep you logged in | Session | | Preferences | Remember your settings | Persistent |

9.2 What We Don't Use

We do not use third-party advertising cookies
We do not sell data to advertisers
We do not engage in cross-site tracking

9.3 Analytics

We may use privacy-respecting analytics to understand Service usage. Any analytics are aggregated and do not track individual users across sites.

10. Children's Privacy

Phyt Cloud is not intended for users under 18 years of age.

We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from someone under 18, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at support@phyt.ai.

11. International Users

11.1 Data Location

Phyt Cloud is operated from the United States. Your data is stored and processed in the United States.

11.2 International Transfers

If you access Phyt Cloud from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

11.3 GDPR (European Users)

If you are in the European Economic Area, you have additional rights under GDPR:

Right to Access: Request a copy of your data
Right to Rectification: Correct inaccurate data
Right to Erasure: Request deletion of your data
Right to Portability: Receive your data in a portable format
Right to Object: Object to certain processing
Right to Restrict: Limit how we process your data

To exercise these rights, contact us at support@phyt.ai.

Legal Basis for Processing (GDPR):

Contract: Processing necessary to provide the Service
Legitimate Interests: Improving and securing the Service
Consent: Where you've provided explicit consent (e.g., marketing)

11.4 California Residents (CCPA)

California residents have the right to:

Know what personal information we collect
Request deletion of personal information
Opt out of the sale of personal information (we do not sell data)
Non-discrimination for exercising privacy rights