Last updated: September 14, 2026

This Privacy Policy describes how Hadaa ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website at hadaa.app and our Hadaa mobile applications, including the Hadaa apps for iPhone and Android (together, the "Service"). It applies to every way you reach the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect the following types of information to provide and improve the Service:

Account Information: When you sign up, we collect your email address, your name if you provide one, and your password (stored only as a salted hash). If you sign in with Google, we receive your email address, name, and profile picture from Google — never your Google password. If you sign in with Apple, we receive an identifier that is unique to Hadaa and your email address — never your Apple password. Apple lets you hide your real address and forward through a private relay instead; if you choose that, the relay address is all we ever see, we use it only for service email about your account, and we exclude it from marketing sends. Apple gives us your name only on the very first sign-in and never again.
User-Provided Content: We collect the images you upload — photos of your garden or property, sketches, and satellite or drone imagery — along with the briefs, prompts, instructions and preferences you provide to generate designs, and the designs generated for you. When uploading images that contain identifiable individuals, you are responsible for taking steps to blur or otherwise obscure faces to protect their privacy.
Precise Location — optional: If, and only if, you turn on "Use my location," your device's browser or the Hadaa app asks your permission and then sends us your GPS coordinates (latitude and longitude). We use them to work out your city and climate zone so plant recommendations suit where you actually live, and we store them on your account so you are not asked again. This feature is entirely optional: the Service works without it, you can decline the permission, and you can turn it off at any time in your account settings, which clears the coordinates it stored. We do not track your location in the background or when you are not using the Service.
IP Address and Approximate Location: Each time you sign in we record your IP address. We send it to an IP lookup service to estimate your approximate location — your city, region and country, with coordinates for that area rather than for you — and we store the result on your account, replacing it at each sign-in. We use it to set sensible regional and climate defaults when you have not shared a precise location, and to keep the Service secure and prevent abuse. It cannot place you more precisely than your internet connection's area.
Your Property's Location: To build a map of your garden you search for your address or place a pin on your plot. We send that search or pin to a mapping provider to show and capture the satellite view of your property, and we store the plot's coordinates, its traced outline and the satellite image with your project. We also look up the city or region from those coordinates to tailor your design to the local climate. This is the location of your property, and the map feature cannot work without it. Deleting the project, or your account, deletes it.
Purchase Information: When you buy renders, credits or a subscription we record what you bought, when, and the amount, so we can credit your account and support you. Card and bank details are handled entirely by our payment processors — the App Store on iPhone, Google Play on Android, and our card processor on the website — and never reach our servers.
Usage and Device Data: We automatically collect information about how you access and use the Service, such as your IP address, browser and device type, operating system, app version, the pages and screens you view, and the actions you take. On the web we also use cookies and similar technologies for this. In the Hadaa app we do not use an advertising identifier and we do not serve ads.
Session Recordings: We use a product-analytics tool that records how the Service is used — pages and screens viewed, clicks, taps, scrolling and navigation — so we can find and fix problems and improve the product. These recordings are linked to your account. See "Who We Share Information With" below.
Push Notification Token: If you use the Hadaa app and allow notifications, we store the notification token your device is assigned so we can tell you when your designs are ready. Revoking the notification permission stops this.

How We Use Your Information

We use the collected information for the following purposes:

To provide and maintain the Service.
To generate the designs, plans, planting guides and documents you request — which requires sending your uploaded images and instructions to the AI providers named below.
To manage your account, process your purchases, and apply your credits.
To tailor plant and material recommendations to your climate, if you have shared your location.
To notify you when a design is finished, and to send service and account emails.
To monitor use of the Service, diagnose faults, prevent abuse, and improve functionality.
To comply with our legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for third-party advertising.

Who We Share Information With

We share personal information only with service providers who process it on our behalf, under contract, for the purposes below — and where the law requires it. We do not sell your data or share it with data brokers.

AI processing providers — the images you upload and the instructions you write are sent to third-party cloud AI platforms to generate your designs. This is how the Service works; it cannot generate a design without it. They process your images for us under contract, for that purpose only, and not for their own purposes or to train their own models.
Cloud hosting and storage providers — running the Service and storing and delivering your uploaded and generated images.
Google — if you choose Sign in with Google, to authenticate you; and, in the Android app, to deliver push notifications to your device.
Apple — if you choose Sign in with Apple, to authenticate you; and, in the iPhone app, to deliver push notifications to your device.
Payment processors — taking payment and validating receipts. In the Hadaa apps, purchases are processed by the App Store on iPhone and by Google Play on Android. Card and bank details go to the processor, never to us.
Product analytics providers — measuring how the Service is used, including the session recordings described above.
Mapping and location providers — the address you search for and your plot's coordinates, to show the satellite view of your property and look up its region; and your IP address, to estimate your approximate location.
Email delivery providers — sending you service, account and marketing email.
Website analytics providers — measuring how the website is used. These run on the website only; they are not loaded in the Hadaa app.

These providers operate in the United States and elsewhere, so your information may be transferred and processed outside your country. We may also disclose information if required by law, to protect our rights, or in connection with a merger or acquisition.

Sharing a Design Publicly

Your designs are private to your account unless you choose to publish one. On the website you can create a public share page for a finished design; if you do, that page and the designs on it become publicly viewable by anyone with the link and may be indexed by search engines. Your name, your location and your original photos are never included unless you explicitly opt in to sharing the photos. Publishing is always your choice, and the Hadaa app does not create public share pages at all.

Data Retention and Deletion

We retain your personal information for as long as your account is active, and afterwards only as long as necessary for the purposes set out in this policy — to comply with our legal obligations, resolve disputes, and enforce our agreements.

You can delete your account and its data at any time. In the Hadaa app and on the website, go to Profile → Account & security → Delete account. You can also request deletion at hadaa.app/account-deletion, or by emailing us at the address below.

When you delete your account you are signed out at once, and your email address, name, IP addresses, stored location and notification tokens are removed from the account straight away. Your projects, uploaded images, generated designs, garden maps and property locations, briefs and survey answers, planting guides and blueprints are then deleted, normally within an hour, and any public share pages you created stop working. Your email address is also removed from our mailing list. We keep payment, subscription and credit records, because tax and accounting law requires it; they are no longer linked to your email address. Session recordings held by our product analytics provider expire on its retention schedule.

Your Data Protection Rights

Depending on your location, you may have the following data protection rights:

The right to access, update, or delete the information we have on you.
The right to rectify your information if it is inaccurate or incomplete.
The right to object to our processing of your personal information.
The right to request that we restrict the processing of your personal information.
The right to data portability.
The right to withdraw consent at any time where we relied on your consent to process your personal information.

To exercise any of these rights, email us at the address below. We respond within 30 days.

Children's Privacy

Our Service is not intended for individuals under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us and we will delete it.

Data Security

The security of your data is important to us. All traffic to and from the Service is encrypted in transit over HTTPS, passwords are stored only as salted hashes, and access to production data is limited to staff who need it. We strive to use commercially acceptable means to protect your personal information, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date above. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, or want to exercise any of your rights, email us at support@hadaa.app.