Privacy Policy

Who is responsible for your data

The data controller is [DO UZUPEŁNIENIA: imię i nazwisko lub nazwa firmy, adres]. For privacy questions, email [DO UZUPEŁNIENIA: adres e-mail kontaktowy].

What data we process

• Account data. You sign in with Apple or Google. They give us your account identifier, email address (with Apple this can be a private relay address) and your name if you choose to share it.
• Session data. When you sign in we store a session token, its expiry, and the IP address and device name (user agent) you signed in from.
• Plant photos. Photos you take or choose for identification are sent to our server and stored so you can see them in your history. Before uploading, the app downsizes the photo and removes its metadata, such as location.
• Identification results. The species name, care tips, the language of the answer and the date.

We do not collect your location, contacts or other data from your phone. The camera is only used when you photograph a plant. We show no ads, use no analytics or tracking tools, and do not sell data.

Why, and on what legal basis

• Running your account, identifying plants and keeping your history: the service you ask for (Art. 6(1)(b) GDPR).
• Security, abuse prevention and daily identification limits: our legitimate interest (Art. 6(1)(f) GDPR).

Identification by artificial intelligence

To identify a plant, we send the photo to an AI model ([DO UZUPEŁNIENIA po wyborze modelu AI]) through Cloudflare AI Gateway. The model receives only the photo and an instruction, never your name or email. Results can be wrong, so treat them as guidance.

Who processes data for us

We use providers that process data on our behalf, only as far as needed to run the app:

• Cloudflare, Inc.: API servers, photo storage (Cloudflare R2) and routing requests to the AI model.
• Neon, Inc.: the database with accounts, sessions and identification history, on AWS servers in Frankfurt, Germany.
• AI model provider: [DO UZUPEŁNIENIA po wyborze modelu AI], only to analyse the photo.
• Apple and Google: sign-in. Their own privacy policies also apply when you sign in.

Some providers are based in the US. Transfers outside the European Economic Area rely on the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep data

We keep your data for as long as you have an account. When you delete your account in the app (Settings → Delete Account), we immediately delete your photos, identification history, sessions and account data. For accounts created with Apple, we also disconnect the app from your Apple ID. Database backups are overwritten within 6 hours, after which the data is gone completely.

Your rights

You have the right to access, correct and delete your data, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. You can delete your account and all data yourself in the app. For anything else, email us.

You can also lodge a complaint with your data protection authority (in Poland: the President of the Personal Data Protection Office, uodo.gov.pl).

Children

PlantCare is intended for people aged 16 and over.

Changes

If we change how we process data, we will update this page and the date at the top. We will announce significant changes in the app.