1. Introduction
Built by Foundry, Inc., formerly known as Playpen Games, Inc. ("Foundry," "we," "us," or "our"), operates the Vine Guard mobile application ("App") for UCLA Wines. This Privacy Policy explains how we collect, use, share, and protect information when you use the App or contact us about it.This Privacy Policy describes the personal information we collect, where it comes from, why we use it, when we disclose it, and the choices available to you.Controller and contact: Built by Foundry, Inc. (f/k/a Playpen Games, Inc.), 2261 Market Street, Suite 86046, San Francisco, California 94114, United States. For privacy requests, email privacy@builtbyfoundry.io. For general questions: hello@builtbyfoundry.io2. Information We Collect
2.1 Information You Provide
• Vineyard photos you capture or select from your photo library for diagnosis or varietal identification
• Vineyard names you choose to tag scans with (stored locally on your device unless you create an account)
• Private notes you add to scans (stored locally on your device unless you create an account)
• Account details if you choose to sign in: email, display name, and sign-in identifiers from Apple
• Support requests and feedback you send us, including any information you include in the message2.2 Automatically Collected Information
• Device and app information: device type, operating system, app version, language settings
• Usage and analytics: screens viewed, features used, scan counts, session events
• Crash and error diagnostics used to fix bugs
• Approximate location inferred from IP address
• Subscription state returned by our billing providers (active, trial, expired) to unlock Pro features
• Apple App Tracking Transparency status if the App ever requests it2.3 Location (When Attached to a Scan)
If you allow location access, the App may attach approximate or precise coordinates to a scan you capture so you can recall where a vine was photographed. Location is attached to the scan record only; the App does not track your location in the background. You can turn location access off at any time in your device settings.2.4 Permissions
Camera access lets you photograph vines inside the App. Photo library access lets you select existing photos. Local and push notifications are optional and used only to remind you to check back on a vine you flagged. You can revoke any permission at any time in your device settings.2.5 AI-Assisted Diagnosis and Care Plans
When you submit a photo for diagnosis, the App uploads the photo to our backend so an AI model can analyze it and return a likely issue, tissue, confidence score, and care plan. We may use OpenAI, Google Gemini, or other models, and the provider or model may change for testing, availability, or performance.
The model provider may retain or log inputs and outputs or use them to improve services or models under its own terms and configuration. Foundry does not guarantee zero data retention or that a provider will never use submitted data for training.
Please avoid submitting photos that contain unnecessary sensitive personal information.Sources of information: We receive information from you, automatically from your device and use of the App, and from the app store, sign-in provider, or other service you choose to connect. The categories above describe what we collected during the preceding 12 months; we do not collect a category unless the App uses the related feature.3. How We Use Your Information
• Run AI-assisted vine diagnosis and generate care plans
• Identify likely varietals from leaf photos
• Save and organize scans by vineyard in your Pro library
• Send optional reminders to check back on a flagged vine
• Authenticate your account and restore your data when you sign back in
• Process subscriptions, free trials, renewals, restores, and customer support requests
• Monitor product performance, debug issues, and improve the App
• Detect abuse, enforce our terms, and comply with legal obligations4. Third-Party Service Providers
We disclose only the information reasonably needed to service providers and contractors that host, secure, analyze, support, or process purchases for the App. They process information under their agreements with us and their own legal obligations.Infrastructure and Authentication: Supabase (database, storage, auth, edge functions). Data processed in the United States.AI Inference: OpenAI, Google Gemini, or other available model providers for diagnosis and care-plan generation. Provider retention, logging, training, and processing locations are governed by the applicable provider's terms and configuration and may vary.Subscriptions and Payments: RevenueCat for subscription management. Apple App Store for payment processing. Apple handles refunds.Analytics: PostHog for product analytics (screens viewed, features used, scan counts).Crash Reporting: Sentry for crash and error diagnostics, where integrated. Text inputs are not captured.Distribution: Apple App Store for distribution, in-app purchases, and TestFlight beta testing.No sale or behavioral-advertising sharing: We do not sell personal information for money or share it for cross-context behavioral advertising. We have not done so during the preceding 12 months. We may disclose information if required by law, to protect people or the App, or as part of a merger, financing, or sale of the business, subject to appropriate safeguards.5. International Data Transfers
Foundry is based in the United States. We and our providers may process information in the United States and other countries where privacy laws may differ from those where you live.EEA/UK/Swiss users: Where required, we rely on an adequacy decision, approved standard contractual clauses, or another lawful transfer mechanism. You can ask about safeguards for a particular transfer by contacting privacy@builtbyfoundry.io.6. Data Retention and Deletion
We keep personal information only as long as reasonably needed for the purposes described here, including to provide the App, maintain security, resolve disputes, and meet legal or accounting duties. Retention depends on the type of information, whether your account is active, and applicable law. When it is no longer needed, we delete or de-identify it. Copies may remain temporarily in backups or where law requires retention.Account information, subscription state, and scans saved to your Pro library are kept while your account is active. Vineyard names and private notes stored only on your device are removed when you clear App data or uninstall the App unless you separately enable a sync feature. After a verified deletion request, we remove or de-identify eligible active account data, subject to temporary backups and security, transaction, accounting, or other legal retention. Analytics, diagnostics, support, and subscription records are kept only as reasonably needed for their stated purposes.7. Your Privacy Rights
Depending on where you live, you may ask to access, correct, delete, or receive a copy of personal information, or object to or restrict certain processing. You may withdraw consent at any time where processing relies on consent, without affecting earlier processing.Legal bases for processing
Legal bases: We process information as needed to provide the App and perform our contract with you; for legitimate interests such as security, support, product improvement, and fraud prevention; with consent where required; and to comply with law.EEA, UK, and Swiss users
You may also have rights to data portability and to complain to your local data protection authority. We may ask for information necessary to verify and complete your request.United States state privacy rights
Residents of California and certain other states may have rights to know, access, correct, delete, or obtain personal information and to receive information about categories of recipients. We do not discriminate against you for exercising a privacy right. Where applicable, you may use an authorized agent and may appeal our response by replying to it.How to Exercise Rights
Email privacy@builtbyfoundry.io with the App name, the email or account identifier you used (if any), and your request. You may also use an account-deletion control where the App provides that control. We will verify requests as reasonably necessary and respond within the time required by applicable law.Some information may be exempt from a request or retained where permitted by law. We may charge a reasonable fee or decline requests only where applicable law allows it.8. Children's Privacy
Vine Guard is not directed to children under 13. We do not knowingly collect data from children under 13.Parents: If your child under 13 has provided information, contact privacy@builtbyfoundry.io. We will investigate and delete the information when required.Teens (13-17): Review this policy with a parent or guardian.9. Data Breach Notification
We maintain an incident-response process. If a security incident affects personal information, we will investigate, contain, and provide notices to regulators or affected people when and as required by applicable law.Report security concerns: privacy@builtbyfoundry.io10. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls and protections offered by our hosting and authentication providers. No method of storage or transmission is completely secure.You should: Protect your device, credentials, and connected accounts and tell us promptly if you suspect unauthorized access.11. Vine Guard Is a Diagnostic Aid, Not Professional Advice
Vine Guard is an AI-assisted diagnostic aid. It is not a substitute for a licensed Pest Control Adviser (PCA), farm adviser, extension service, certified agronomist, or laboratory testing. Before applying any treatment, confirm the diagnosis and the care plan with a qualified professional. Check PHI (preharvest interval) and REI (restricted-entry interval) labels before re-entry or harvest. Varietal ID is assistive only; for certification-grade identification, confirm with a DNA test through a qualified lab.12. Updates to This Policy
We may update this policy as the App or law changes. The Last Updated date shows when it was revised. If a change materially affects how we use personal information, we will provide notice in the App, by email when available, or by another reasonable method before the change takes effect where required.