GreenGlass Privacy Policy

GreenGlass is a planted-aquarium journaling app. It is built to work fully on your device, without accounts. This page describes what data the app uses, where that data lives, and the limited cases where data leaves your device.

What stays on your device

The vast majority of what you put into GreenGlass never leaves your phone. This includes:

• Tanks, plants, livestock, equipment, water readings, journal notes, tasks, CO₂ measurements, CO₂ profiles.
• Tank, plant, and livestock photos you take or import.
• App preferences (theme, units, notification settings).
• Backup files you export (these stay where you save them — on-device or wherever you share them).

None of that data is sent to GreenGlass servers, third parties, or analytics services. There is no account system and no advertising identifier collection.

The shared plant & livestock catalog (optional)

GreenGlass includes a community-curated species catalog. The app downloads the public catalog so you can autocomplete species names. You may also contribute entries — submitting a new species, correcting a catalog field, or suggesting a hero photo. Contribution is opt-in and surfaces only when you tap “Submit” or “Suggest” in the app.

When you submit a catalog entry, the following is sent to our AWS backend:

• The species name and any taxonomy / care fields you typed.
• The photo you chose to suggest, if any.
• An anonymous device-attestation token (Apple App Attest on iOS, Google Play Integrity on Android) used to prove the request came from a real GreenGlass install. The token is not personally identifiable and is not linked to any account.

Submissions are reviewed by a moderator before becoming public. If a submission is approved, the fields and photo become part of the public catalog and are visible to other GreenGlass users. If rejected, the record is deleted.

You can stop contributing at any time by toggling Settings → Contribute to community catalog off. The local catalog continues to work in read-only mode.

Camera and photo library

GreenGlass asks for camera and photo-library permission only so you can attach photos to tanks, plants, livestock, and equipment. Photos stay on your device unless you choose to share a backup or contribute them to the catalog as described above.

Notifications

The app uses local notifications to remind you about scheduled tasks and to alert you when a CO₂ cylinder is projected to run low. Notifications are scheduled and delivered entirely on your device. No push servers are involved.

Analytics and tracking

GreenGlass does not embed third-party tracking SDKs, does not use advertising identifiers, and does not track you across apps or websites.

The app includes an optional, opt-in anonymous-usage analytics path. It is off by default. If you turn it on under Settings → Privacy → Help improve GreenGlass, the following lightweight events are sent to our AWS backend so we know which parts of the app are getting used and worth investing in:

• App launches and which feature areas (Tasks, Water, CO₂, Plants, Creatures, Equipment, Fertilizer, Backup/Restore, Share, Catalog Browse) you opened during a session.
• Rough bucketed counts (0, 1, 2-5, 6-20, 20+) of the tanks, plants, and creatures you have — never the actual count or any identifying detail.
• Whether you ran a backup, share, or catalog submission, and which format (PDF / Markdown / etc.) you picked.
• Your theme, units, and time-format preferences.
• Your app version and platform (iOS / Android).

What is not sent: tank names, plant names, creature names, photos, water readings, journal notes, dates, exact counts, IP address, advertising identifier, or any other content you’ve entered into the app.

Each install is identified to the analytics backend only through a random per-install UUID, which the server immediately folds with the current calendar day and a server-only secret to produce a daily bucket key. The raw UUID never lands on the server’s disk, and the daily bucket keys cannot be linked across days. Raw analytics events auto-expire after 90 days. Toggling analytics off clears the install UUID and discards any locally-buffered events; toggling back on later generates a fresh, unlinkable identity.

Children

GreenGlass is not directed at children under 13 and does not knowingly collect personal information from anyone under 13.

Your choices

• Don’t contribute. Leave Contribute to community catalog off. Nothing leaves your device.
• Don’t share usage analytics. Leave Help improve GreenGlass off (this is the default). No usage events are sent.
• Withdraw a submission. Email us (below). Provide the rough submission date and the species name; we will purge the record and any associated photo.
• Reset device attestation. Reinstalling the app generates a new attestation key. The previous key is unusable for new submissions.
• Wipe local data. Deleting the app removes everything stored on the device.

Data retention

Approved catalog entries are retained indefinitely as part of the public catalog. Rejected submissions are deleted by the moderation flow. Anonymous usage-analytics events (when you’ve opted in) auto-expire after 90 days. Server-side request logs are kept for up to 14 days for operational debugging and abuse prevention.

Contact

Privacy questions or removal requests: hello@apotropaiclabs.com.

Changes to this policy

If this policy is updated, the effective date above will change. Material changes will be surfaced in the app’s Settings screen the next time you open it.