Privacy policy
Last updated: 9 October 2026. It covers the Tomate & Basilic app (version 7 and later) and the website tomate-et-basilic.fr. This is a translation of the French version, which prevails in case of discrepancy.
In short: your garden data stays on your device and, if sync is on, in your private iCloud. We don't receive it. What we do receive: usage analytics, which you can switch off, and technical error reports. If you had a Tomate & Basilic account before version 7, it still exists on our servers until you delete it (see section 3).
1. Who is the data controller
The data controller is Ovega, a French simplified joint-stock company (Société par Actions Simplifiée) with share capital of €4,000, registered with the Lyon Trade and Companies Register under number 879 181 568, with its registered office at 60 avenue Maréchal Foch, Bureau 3, 69006 Lyon, France.
For any question about your data: contact@ovega.fr.
2. Your garden data stays on your device
Your gardens (including their location), beds, plants, journal, photos, reminders, plans, weather alerts and records, seed bank and custom plants are stored locally, inside the app, on your Apple device.
The app works without an account. No Ovega server hosts what you create in the app: we can neither access it, read it nor restore it.
3. If you had a Tomate & Basilic account
Up to version 6, the app required an account, and gardens were stored on Ovega's servers. If you had such an account, our servers still hold:
- the account information: email address, first and last name, username, password or "Sign in with Apple" identifier, profile picture, language;
- the content saved at the time: gardens, beds, plants, reminders, journal, photos, weather alerts;
- the technical token that was used to send notifications to your device.
The app only contacts these servers if you sign in to that account: to bring its data back onto your device (recovery assistant), to change it or to delete it. While you are signed in, the app also sends the device's notification token at each launch.
Deleting that account: in the app, Settings → Manage account → Delete account. The account and all the data it holds are then permanently deleted from our servers. The garden stored on your device is not affected. You can also write to us at contact@ovega.fr.
Retention period: [TO BE COMPLETED: retention period of old accounts].
Legal basis: performance of the contract (the service you had signed up for, then the recovery of your data).
4. iCloud
iCloud sync is off by default. You turn it on in Settings → iCloud sync.
One exception: the first time the app is launched on a device, if your iCloud already contains a Tomate & Basilic garden (because you are reinstalling the app or adding a device), sync turns itself on so that you get your garden back. You can turn it off in the same place.
When it is on, your garden data, journal and photos are copied to your own private iCloud space, under your own Apple Account, in a private database. They then come back on your other devices signed in to the same Apple Account. Ovega has no access to that space: we can neither read, export nor delete what is in it.
If you turn sync off, nothing is erased: your data stays on this device, it simply stops travelling. iCloud content can be deleted from the app or from your Apple Account settings.
5. Usage analytics
To understand how the app is used and know what to improve, we use Mixpanel, whose servers used for this processing are located in the European Union.
What we receive
- usage events: opening the app and some screens; creating a garden, a bed, a reminder, a journal entry or a custom plant; using the design tools; reaching a limit of the free version; seeing the offer and buying Permaculture+; the outcome of recovering an old account;
- usage profile information: number of gardens, beds and plants, free version or Permaculture+, whether weather alerts are set, language, app version, date of your first sowing and first harvest noted in the journal;
- technical information about the device: model, system version;
- an approximate location (country, region, city), which Mixpanel derives from the connection's IP address;
- a random identifier, created at first launch. It is stored with your garden data: if iCloud sync is on, it is the same on all your devices and survives a reinstall. The same identifier is used for error reports (section 6). If you recover an old account, that account's number is sent once, at the end of the recovery: the identifier is then linked to that account.
What we never receive
Not your name, your email, the names of your gardens and plants, your photos, the text of your journal, or what you type in a search.
How to switch it off
Usage analytics is on by default. You can switch it off at any time in the app: Settings → Privacy settings → Help improve the app. Nothing more is sent, and pending events are erased. The app keeps working exactly the same.
Legal basis: our legitimate interest in improving the app (Article 6(1)(f) GDPR), which you can object to at any time with that setting.
6. Error and crash reports
To fix the app's defects, we use Bugsnag (SmartBear). The app sends it:
- a report when it closes unexpectedly, freezes or runs out of memory: the place in the code, the device model, the system and app versions;
- a report when some operations fail without crashing: the technical error message and, when a server was involved, the address of the request and the server's response;
- with each report, the app's latest technical actions (screens opened, state changes), whether you use the free version or Permaculture+, and the random identifier described in section 5;
- a signal each time the app opens, used to compute the share of sessions without a crash.
These reports contain neither your journal's content nor your photos. They cannot be switched off in the app; you can object to this processing by writing to contact@ovega.fr.
Legal basis: our legitimate interest in keeping the app working properly and securely.
7. Purchases
Permaculture+ is purchased from Apple, through the App Store. The rights attached to that purchase are managed with RevenueCat, which receives an anonymous purchase identifier and the transaction receipt provided by Apple.
Ovega never sees your payment method: no card number, no bank details, no billing address. That information stays with Apple.
Legal basis: performance of the contract.
8. Weather
Your garden's forecasts and weather history are provided by Apple Weather (WeatherKit). To get the weather for the right place, the coordinates of the garden you placed on the map are sent to Apple's weather service with each request. They are not sent to any Ovega server.
Legal basis: performance of the contract, for the feature you asked for.
9. Device location
If you allow it, the app reads your device's location to help you place your garden on the map and choose the growing periods for your region. This location is used on the device and is not sent to any Ovega server; the garden location you save follows section 2. You can refuse this permission, or withdraw it later in iOS Settings: the app keeps working, and you can place your garden by hand.
Legal basis: your consent, given through the iOS permission, which you can withdraw at any time.
10. Notifications
The reminders and weather alerts you create trigger local notifications, scheduled and displayed by your device, without going through a server. The app also registers with Apple's notification service: iCloud uses it to signal that a change is waiting to be synced, and the old account described in section 3 to reach you if you are signed in to it.
11. Images
A few images in the app that are not bundled with it (for example some insect photos or older plant pictures) are downloaded from an Amazon Web Services storage service. As with any web page, that service sees the device's IP address at download time.
12. Retention periods
- Garden data: kept on your device (and in your iCloud if sync is on) until you delete it. Uninstalling the app erases local data.
- Old account: see section 3.
- Usage analytics: kept for 24 months at most, then deleted.
- Error and crash reports: kept for 12 months at most.
- Purchases: kept as long as needed to manage your rights and meet applicable accounting obligations.
13. Your rights
Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port the data about you.
- Garden data: it is not with us; you can view, change and delete everything in the app.
- Old account: you can recover and delete it from the app (section 3), or write to us.
- Usage analytics and error reports: write to us at contact@ovega.fr. As this data does not carry your name, we will ask you for something to find it with (for example the email address of your old account, if you had one).
You also have the right to lodge a complaint with the French data protection authority (Commission nationale de l'informatique et des libertés, CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the authority of the country where you live.
14. Transfers outside the European Union
Usage analytics data is stored on servers located in the European Union. Error reports (Bugsnag) are processed in the United States. Apple, RevenueCat and Amazon Web Services may process some technical data outside the European Union. These transfers are covered by the European Commission's adequacy decision on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise by the European Commission's standard contractual clauses.
15. Children
The app is not specifically aimed at children and does not knowingly collect personal data from children under 15.
16. The website tomate-et-basilic.fr
This is a showcase website. It sets no cookies, uses no analytics tool and loads no external resources. The only data processed is what the hosting provider records in its technical connection logs.
17. Changes
This policy may change, in particular if the app changes. The date of the last update is shown at the top of this page. In case of a substantial change, we will let you know in the app.
18. Contact us
Ovega — 60 avenue Maréchal Foch, Bureau 3, 69006 Lyon, France — contact@ovega.fr
See also: Terms of use · Legal notice (French)