Privacy Policy

We collect only the information necessary to provide our services, based on principles of lawfulness, fairness, necessity, and good faith. Below are the types of personal information we collect and their purposes:

1.1 Account Registration & Login

Sign-in methods: The International version (LivenForest) supports Apple or Google account sign-in; the China version (小森里) supports Apple account sign-in only and does not integrate Google. Google-related information in the table above applies to the International version only.

1.2 Profile Information

1.3 Device & Technical Information

1.4 User-Generated Content

1.5 Location Information

1.6 Transaction Information

To provide our services, we may request the following device permissions. We will not enable any permission without your consent, and you can revoke permissions at any time in your device settings.

To provide our services, our application integrates the following third-party SDKs. These SDKs may collect certain information:

Client-Side SDKs:

Server-Side SDKs/Services:

Note: This third-party SDK list may change with version updates. We will update this list accordingly.

We use the personal information we collect for the following purposes:

1. Core Services: Plant identification, asset generation, healing moment recording, cloud backup and synchronization.
2. Account Management: Creating, maintaining, and securing your account.
3. Transaction Processing: Processing in-app purchases, managing energy balances.
4. Service Optimization: Optimizing AI service routing and content based on your region and language preferences.
5. Security: Detecting, preventing, and addressing security incidents and fraud (via audit logging).
6. User Support: Responding to your inquiries and feedback.
7. Legal Compliance: Complying with applicable laws and regulations.

We will not use your personal information for purposes unrelated to those described above. If we need to use your information beyond these purposes, we will seek your consent again.

1. Storage Location (International and China versions are fully isolated): LivenForest operates as two completely independent systems — the International version and the China version. Their data is stored separately and is never shared or synchronized:

   • International version (LivenForest): Account and service data are stored on servers in Canada (Fly.io, Toronto), and media files are stored on the Cloudflare R2 global edge network; AI identification is processed by the Alibaba Cloud DashScope (Qwen) international service.
   • China version (小森里): Account data, service data, and media files are all stored within the People's Republic of China, on Volcano Engine (Beijing) servers and object storage (TOS); AI identification is processed within China by Volcano Engine Ark (ByteDance Doubao). Personal information of China-version users is stored entirely within China and is not transferred across borders.
   • The two systems use separate databases, object storage, and account systems. No personal data is ever shared or migrated between the International and China versions.

2. Retention Period:

   • During account existence: We retain your personal information for as long as you maintain your account.
   • After account deletion: When you submit a deletion request via My → Delete Account in the App, we will immediately delete all personal information and data associated with your account (including plant profiles, healing moments, status logs, media files, and energy/transaction records); this deletion is irreversible. The user identifier in security audit logs is simultaneously nulled (user_id set to NULL) and anonymized, so those records can no longer be associated with you.
   • Statutory retention: Only where expressly required by applicable laws and regulations will we retain the relevant records for the minimum necessary period, solely for the legal purpose, deleting them upon expiry.
   • Administrative audit logs: For security and compliance purposes, operational audit logs of the management backend are retained for at most 90 days before being automatically deleted.

3. Storage Security: We employ HTTPS encrypted transmission, database access controls, JWT token authentication, and other technical measures to protect your data.

1. Sharing: Except for the third-party SDKs disclosed in this Policy, we do not share your personal information with other third parties, unless:

   • We have obtained your explicit consent;
   • Required by law, regulation, or mandatory government request;
   • Necessary to protect our legitimate interests or those of other users;
   • Shared with our affiliates within the scope of this Policy.

2. Transfer: We will not transfer your personal information to any third party, unless:

   • We have obtained your explicit consent;
   • In connection with a merger, acquisition, or asset sale, in which case we will require the transferee to be bound by this Policy.

3. Disclosure: We will not publicly disclose your personal information unless we have obtained your explicit consent or as required by law.

4. Cross-Border Transfer:

   • China version (小森里): Your personal information is stored and processed entirely within the People's Republic of China and is not transferred across borders.
   • International version (LivenForest): Data is stored in Canada and on global CDN nodes. If you are located in another country or region, your personal information may be transferred outside your location (including to Canada) for storage and processing; we will implement protective measures in compliance with applicable laws (including but not limited to encrypted transmission and data processing agreements) to ensure your information security.

Under applicable laws, you have the following rights regarding your personal information:

1. Right of Access: You have the right to access the personal information we hold about you. You can view your account information and profile in the "Profile" section of the app.
2. Right of Rectification: You have the right to correct inaccurate personal information. You can directly modify your username, avatar, and bio within the app.
3. Right of Deletion: You have the right to request deletion of your personal information when:
   • The processing purpose has been achieved or the information is no longer necessary;
   • You withdraw your consent;
   • We process your information in violation of laws or our agreement with you;
   • You delete your account.
4. Right to Withdraw Consent: For processing based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing. You can withdraw consent by disabling device permissions (e.g., camera, location) in your settings.
5. Right to Data Portability: You can export your plant data, assets, and healing moments through the cloud backup feature.
6. Right to Delete Account: You have the right to delete your LivenForest account at any time. Open the App and go to My → Delete Account to do so directly; once submitted, all your personal data will be deleted immediately (this action is irreversible). If you encounter any issues, you may also reach us at support@livenforest.com for assistance.
7. Right to Complain: If you believe our data processing infringes upon your rights, you have the right to file a complaint with the relevant data protection authority.

How to Exercise Your Rights: You can exercise the above rights by sending an email to support@livenforest.com. We will respond within 15 business days of receiving your request.

1. We attach great importance to the protection of minors' personal information. Our Service is primarily intended for adults, and we do not knowingly collect personal information from children below the applicable minimum age: under 14 years of age in mainland China, and under 16 years of age in other countries/regions (or the minimum age set by the laws of your jurisdiction, e.g., 13 in the United States).

2. If you are a child below the applicable minimum age, please use our Service only with the accompaniment and guidance of your parents or guardians, and have them read this Policy carefully. Children below the applicable minimum age should not use the Service or provide any personal information to us without parental or guardian consent.

3. If we discover that we have collected personal information from a child below the applicable minimum age without parental consent, we will delete the relevant information as soon as possible.

4. If you are a guardian of a minor and have questions about your ward's personal information, please contact us at support@livenforest.com.

We implement the following measures to protect your personal information:

1. Transmission Security: All data transmissions use HTTPS/TLS encryption.
2. Access Controls: JWT token authentication ensures only authorized users can access personal data.
3. Storage Security: Sensitive information is stored using secure storage on the client (Flutter Secure Storage), with database access controls on the server.
4. Cryptographic Hashing: SHA-256 hashing is used for sensitive data digests.
5. Audit Trail: Audit logs record key operations for security incident tracing.
6. Least Privilege: System components are granted only the minimum permissions needed.

Incident Response: In the event of a personal information security incident, we will notify you within a reasonable timeframe via in-app notifications or email about the incident details, the measures we have taken or will take, and the measures you can take. If individual notification is impractical, we will issue a public announcement.

1. Local Database: Our app uses a local database (Drift/SQLite) to store your plant data and app configuration for offline use. This data is stored locally on your device.

2. Secure Credentials: Login tokens and sensitive information are encrypted and stored on your device via Flutter Secure Storage.

3. Language Preference: Our website uses localStorage to store your language preference so that the correct language is displayed on your next visit.

4. Shared Preferences: We use SharedPreferences to store basic app settings (such as reminder and display preferences). This data is stored locally on your device only.

1. We may update this Privacy Policy from time to time. When material changes are made, we will notify you through:

   • In-app pop-up or notification;
   • Website announcement;
   • Email (where applicable).

2. The updated Policy takes effect upon publication. If you continue to use our services after the update, you are deemed to have agreed to the updated Policy.

3. We recommend that you periodically review this Policy to understand how we protect your information.

4. Previous versions of this Policy will be available for review.

If you have any questions, comments, or suggestions about this Privacy Policy, or wish to exercise your personal information rights, please contact us:

• Email: support@livenforest.com
• Website: https://livenforest.com/contact
• Response Time: We will respond within 15 business days of receiving your request.

If you are unsatisfied with our response or believe our data processing has infringed upon your rights, you may file a complaint with the competent regulator:

• Mainland China users: the Ministry of Industry and Information Technology (https://www.miit.gov.cn), the Cyberspace Administration of China (https://www.cac.gov.cn), or your local market regulation / consumer protection authority.
• Users in other countries/regions: the data protection authority in your jurisdiction (e.g., your national data protection authority in the EU, or CNIL in France).