KindMeadow
English translation for your convenience. The Polish version of this document is the legally binding one. If anything is unclear, write to privacy@kindmeadow.pl and we will gladly explain it.

GDPR and privacy

KindMeadow privacy policy

Applies to the KindMeadow app and the website www.kindmeadow.pl. Last updated: 24 July 2026.

1. Data controller

The controller of your personal data is BeeToBee, Szczyrzyc 205, 34-623 Szczyrzyc, Poland, VAT ID (NIP) 7262290629.

General contact: info@kindmeadow.pl. Contact for privacy and GDPR matters: privacy@kindmeadow.pl.

2. What data we collect

  • Account data: email address, username, password stored in a secured form on the server, and the account identifier.
  • Profile data: display name, avatar, profile description, privacy settings and invitation code.
  • In-app activity: completed exercises, progress, drops, plant levels, challenges, practice history, app settings and the state of your garden.
  • User content: journal entries, written answers in exercises, comments and messages to friends.
  • Optional media: photos, audio and video recordings you add to the journal, the garden or selected app features.
  • Location data: only when a selected exercise requires on-site verification, and only after you grant the system permission.
  • Step count data: only after you consent to Health Connect access, used to confirm selected movement exercises.
  • Technical data: the push notification token and information needed to maintain your session, keep the service secure, run the app and handle errors.
  • Subscription data: information about your PRO access status processed through Google Play Billing and RevenueCat.

3. Purposes and legal bases

  • Creating and running your account and providing the app services: Article 6(1)(b) GDPR.
  • Storing your journal, garden, progress, challenges and social features: Article 6(1)(b) GDPR.
  • Notifications, location, steps and photo verification: your consent under Article 6(1)(a) GDPR, and for special category data Article 9(2)(a) GDPR.
  • Security, abuse prevention and technical diagnostics: Article 6(1)(f) GDPR.
  • Subscription settlement and legal obligations: Article 6(1)(c) GDPR.

4. System permissions

  • Camera: to take photos in the journal and in selected exercises.
  • Microphone: to record voice notes and audio material.
  • Gallery / media: to add photos and videos and to save downloaded material.
  • Location: only for selected outdoor exercises, after you give consent.
  • Steps / Health Connect: only for selected movement exercises, after you give consent.
  • Notifications: for reminders and information about garden activity, invitations and messages.

You can withdraw any permission in your device settings. Withdrawing a permission may limit how some features work.

5. Health Connect data (steps)

Some KindMeadow exercises are short movement activities, for example a walk. If you give consent, the app reads your step count from Health Connect to confirm that you completed such an exercise.

  • Read only - we never write any data to Health Connect.
  • We read only the aggregated step count within the time window of the exercise you started; we do not read step cadence (StepsCadence), routes, individual records or activity history.
  • We use Health Connect step data solely to verify movement exercises - never for advertising, marketing or training artificial intelligence models.
  • We do not sell or transfer Health Connect data to third parties.
  • Consent is optional and you can withdraw it at any time in Health Connect or your device settings; without consent you can confirm the exercise manually (on your honour).

6. Psychological consultations

In the first public version of the app, psychological consultations are not an active KindMeadow feature. We therefore do not collect messages addressed to a psychologist or separate consents for such a consultation.

If the feature is launched in the future, we will update the privacy policy, the terms of use and the consent mechanism before making it available to users.

7. Features that use AI

KindMeadow may use external artificial intelligence services for selected app features.

  • Google Gemini / Google AI services may be used to verify selected exercise photos. A photo is sent only with your consent and is deleted after verification, according to the app logic.
  • OpenAI may be used for short encouraging messages after an exercise. Limited exercise context and your optional written answer, if you provide one, are sent to the service.
  • ElevenLabs may be used for voice synthesis of prepared, static app texts. We do not send your notes, entries, photos, recordings or account data to this service.

Please do not enter document details, passwords, payment data, detailed medical information or data identifying other people in your answers.

8. External providers and sub-processors

We use providers needed to run the app: Amazon Web Services, including AWS S3 for media storage, Google Play and Google Play Billing, RevenueCat for subscriptions, Expo/Firebase/Google services for notifications and app services, Google Gemini / Google AI services, OpenAI and ElevenLabs.

We do not sell personal data to third parties.

9. Sharing content inside the app

Entries, comments and media in your garden can be private or shared with people you grant access to a plant or a garden. Content added in a friend's garden is visible according to that feature's settings. Calendar notes stay private.

10. Data retention

We keep your data for as long as your account exists. After account deletion, the data - including media and user content - is permanently removed from our servers within 30 days, unless the law requires us to keep selected information longer.

11. Deleting your account and data

You can delete your account in the app profile settings or request deletion through the page Delete account.

Deleting the account removes the app data linked to it. Deleting the account does not automatically cancel a Google Play subscription - you need to cancel it in the store settings.

12. Your rights

  • The right to access your data and receive a copy of it.
  • The right to rectify or complete your data.
  • The right to erasure.
  • The right to restrict processing.
  • The right to data portability.
  • The right to object to processing based on legitimate interest.
  • The right to withdraw consent at any time, without affecting processing carried out earlier.
  • The right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO): uodo.gov.pl.