MyArbora

Privacy policy

In plain language: what we collect, why, and what you can ask for.

Last updated: July 2026

Usage analytics and session replay (PostHog)

PostHog only loads if you accept in the notice at the bottom of the page. It is hosted in the European Union (Frankfurt). If you refuse, nothing is loaded and nothing is sent.

With your permission, PostHog records the pages you view, clicks, and funnel steps (for example: generating a guild, exporting a PDF), and it records the session: pointer movement and taps, so we can see where the site confuses people.

In recordings, ALL input fields are masked — your email, your password and anything you type are never visible. The sign-in pages (/auth) are not recorded at all.

We never send your email or your name. If you are signed in, events are linked only to your account's internal identifier.

Recordings and events are kept for at most 90 days and then deleted automatically.

You can change your mind at any time with “Usage analytics choice” in the footer or on this page. Withdrawing stops all collection and clears what PostHog stored in your browser.

The basic usage counts we already rely on (no cookies, no identifier that outlives the tab) keep working regardless of this choice.

Who handles your data

MyArbora is a small project, made in Portugal, that helps you design edible forests. The data controller is the person who runs MyArbora, and you can reach her at dunesinfos@gmail.com.

What we collect

Newsletter and guide email: if you request the 7-layers guide, we store your email, the language you were using and where the sign-up came from.

Account: if you create an account, we store your email and an encrypted password.

Your land and your forests: land name, location and the boundary you drew on the map, conditions (soil, climate, sun) and the guilds you saved.

We collect no payment data, we run no advertising and we sell nothing to anyone.

Why we use it

To send you the guide and, if you want, MyArbora news (consent, which you can withdraw at any time).

To give you an account and store your forests (performing the service you asked for).

To improve plant suggestions for the climate and soil you told us about.

Plant identification photos

When you send a photo to identify a plant, it is sent to an artificial intelligence model that analyses it and returns the candidates. The photo is NOT stored on our servers and is not linked to you — it is processed and discarded.

We only keep the facts about the species (name, layer, role) in MyArbora's public plant catalogue.

Who helps us (processors)

Database, authentication and hosting: Supabase.

Artificial intelligence models, to generate guilds, species texts and photo identification.

Satellite maps and address search: Esri and OpenStreetMap/Nominatim. When you open the map, your browser contacts those services directly.

These providers process data on our behalf and only for these purposes.

Cookies and local storage

We use no advertising or tracking cookies.

We use your browser's local storage for two things: keeping you signed in and remembering the language you chose. If you're creating a land without an account, we also keep that draft in your browser so you don't lose it.

How long we keep it

Your newsletter email stays with us until you ask to leave.

Account data and saved lands and forests stay while you have an account. If you ask us to delete your account, we delete it, and your forests with it.

Your rights

Under the GDPR you have the right to know what data we hold about you, to correct it, to delete it, to take it with you and to object to its processing. You can also withdraw consent for the newsletter at any time.

To exercise any of these rights, write to dunesinfos@gmail.com. We reply within 30 days.

If you think we handled it badly, you can complain to the CNPD (the Portuguese data protection authority).

Contact

For any privacy question, write to:

Anonymous usage statistics

We record anonymous usage steps (for example: you viewed the landing page, started a land, generated a guild), the language, the page and the site you came from.

These records use a random session identifier kept only in your browser tab's memory. It is not a cookie, it does not identify you and it is not linked to your account. We never record the content of your land.

We do not use Google Analytics or any other third-party tracker. MyArbora's hosting (Lovable) also provides aggregate visitor statistics.

This is only used to understand which parts of the app are used and where people get stuck.

You haven't chosen yet.

For any privacy question, or to exercise your rights under the GDPR, write to: dunesinfos@gmail.com