Most grow apps can read everything you log. Canna GLAP is built so that we cannot. Here is exactly what that means, including the parts we can see.
Encryption is AES-256-GCM, done on your device. Your passphrase is stretched with Argon2id, so guessing it is slow and expensive.
We would rather tell you than have you find out. The app needs some things readable to run, bill and keep accounts safe: your account details, subscription status, your sensors' names and when they report, your farm name and town for weather, who is on your team, and security records such as sign-in times and IP addresses. The privacy policy lists every item.
A thief gets scrambled grow data and no key to open it. A court order gets the same answer: we cannot hand over what we cannot read. Account details are readable, which is why we keep that list short and public. The whole picture, in plain words: What if we get hacked? and Can the government see my grow journal?
Because only you hold the key, a forgotten passphrase is opened with your 24 word recovery phrase. Lose both and your grow is gone, even to us. We think that is the right trade for a journal this private. Write the phrase down and keep it somewhere safe.
Cannie, the AI helper, only sees what you send when you ask a question: your message, any photo, the recent chat, the plant stage and a summary of room conditions. That goes to our AI provider to produce the answer. It is the one place grow information leaves your phone readable, and only when you choose to ask.
No. Your plants, logs, photos, harvests, stock, Cannie history and room sensor readings are encrypted on your device before they are uploaded. We store only scrambled data and we never hold the key that opens it.
What the app needs to run and bill: your account details, subscription status, sensor names and reading times, farm name and town for weather, team membership, and security records such as sign-in times and IP addresses. The privacy policy lists all of it.
Someone who takes the database gets scrambled grow data they cannot open, because the key that unlocks it is not there. The same is true of a court order: we cannot hand over what we cannot read. Account details are a different matter, which is why the privacy policy lists them.
Your 24 word recovery phrase opens your grow again. If you lose both the passphrase and the recovery phrase, nobody can recover it, including us. That is the price of a journal we cannot open.
Only when you ask Cannie a question. Your message, any photo you attach, your recent chat, the plant stage and a summary of your room conditions go to our AI provider to answer it. That is the one place grow information leaves your device in readable form.