Privacy Policy

Information stored on your device

Gardens, plant finds, notes, tasks, settings, and photos are stored locally in your browser. This local information is not sent to Rasti merely because you use the app. Your browser and operating system control local storage, backups, and deletion.

Optional Google sign-in

If you connect Google, Rasti receives your Google account identifier, email address, display name, and profile picture through the openid email profile scopes. We use these details only to authenticate you, show your account, identify garden members, and provide sync and sharing. Rasti does not request access to Google Drive, contacts, mail, or other Google content.

Information stored on the Rasti server

After you connect an account and approve the initial sync, the server stores your account identity and the gardens you sync, including their plants, notes, tasks, membership information, and uploaded plant photos. Plant Finds and their lists currently remain local to the device and are not synced. Basic request logs may contain an IP address, browser information, time, and requested path for security and operation.

Cookies

Rasti uses secure, HTTP-only cookies for the sign-in transaction and your authenticated session. They are necessary for account sync and are not used for advertising or cross-site tracking.

Sharing

You can create a limited-time, one-use invitation to a garden. A person who accepts it can see the same garden data. A viewer can read it; a co-owner can also change it. Only share invitation links with people you trust.

How information is used and disclosed

• To provide optional account login, garden sync, photo storage, and sharing.
• To protect the service, investigate failures, and prevent misuse.
• To comply with a legal obligation when required.

Rasti does not sell personal information, run advertising, or use Google account data for profiling. Data is processed by the hosting infrastructure and by Google for the sign-in flow under their respective terms.

Retention and deletion

You can sign out from one device, which clears Rasti data from that device while retaining the copy saved in your account. You can instead remove data from the account while keeping an independent, editable copy on the current device. “Delete all my data” removes your account, synced gardens, and stored photo files, and clears the current device. Operational database backups may retain deleted account records until they rotate out; up to 30 dated database snapshots are retained. Photos are stored separately and are removed from active storage when no longer referenced.

Security and choices

Rasti uses HTTPS, restricted server access, and authenticated authorization checks. No online system can guarantee absolute security. You may avoid all server processing by using Rasti without connecting Google, and you may disconnect or delete your data from the profile page.

Contact and changes

Questions or privacy requests can be sent to support@ramigo.org. Material changes will be reflected on this page with a new effective date.