Privacy Policy

This Privacy Policy explains how CALORIE COUNTER APP LIMITED (“we”, “us”, or “our”) processes information when you use the Plantsy iOS application and the Plantsy website (the “Service”). We are the controller of the personal information described in this policy, except where a provider acts independently under its own terms.

This policy covers both information needed to deliver Plantsy and optional analytics or advertising processing. Your consent choices are separate from accepting the Terms of Use. Refusing optional analytics or advertising tracking does not prevent you from using the app’s core features.

1. Information We Collect

1.1 Account and user identifiers

Plantsy uses an account identifier to associate your activity and saved content with your account, including when you begin with guest access. If you register or sign in, we process the account information provided by you or your sign-in provider, which may include your email address and display name. Authentication information is handled through Firebase Authentication.

1.2 Photos and plant information

We process photos you select or take for plant identification, health checks, assistant conversations, and garden records. This can include plant names, botanical results, health reports, growing conditions, garden groups, notes, care schedules, task history, and progress photos.

Photos submitted for analysis are uploaded and processed through cloud services. Uploaded images and their previews are stored in Firebase Cloud Storage under your account; related plant records and references are stored in Firebase databases. The app also keeps local drafts, upload files, and cached content to support the features you use. Cloud access is restricted by account ownership and service access controls. Photos are not published as a public gallery. Completing an analysis does not automatically delete its uploaded photos. Archiving a plant is not the same as deleting it. Plantsy does not keep all content exclusively on your device. Avoid including people, documents, precise location information, or other unnecessary personal details in your plant photos.

1.3 Assistant messages and voice input

We process the questions, messages, images, and relevant plant context you submit to the AI assistant. Conversation history may be stored to let you return to previous chats. If you choose voice input, microphone audio is sent through our backend to Google Speech-to-Text to produce text used in your conversation. Voice audio is processed for transcription and is not saved as a recording in our Firebase Storage or databases. Temporary recording files on your device are removed by the voice-input flow. The transcript becomes stored conversation content when you send it as a message.

1.4 Location and weather preferences

You can select a city for plant weather information. With your permission, Plantsy may use your device’s location to help select that city. We process the selected city or coordinates needed to retrieve weather conditions and forecasts. Location permission is optional and can be changed in iPhone Settings.

1.5 Notifications

If you enable notifications, we process notification preferences, device delivery tokens, care schedules, and related status information to send updates such as care reminders, weather alerts, and processing or purchase updates. You can manage permissions in iPhone Settings and preferences in Plantsy.

1.6 Product interaction and technical data

With your usage analytics consent, the app uses Mixpanel and Google Analytics for Firebase (Firebase Analytics) to understand feature use and improve Plantsy. Events include app openings, onboarding, screens and features used, scan and care activity, assistant activity, errors, subscription offers, trials, and purchases. Event properties may include app and operating-system versions, language, subscription or credit status, product identifiers, prices, currency, photo counts, and plant identification results. Google’s SDK may also collect device information, app-instance identifiers, automatic interaction events, and approximate location derived from network information. Technical service logs may contain request information and bounded error categories needed for operation and security.

Mixpanel uses a random installation identifier and Google Analytics uses an app-instance identifier. We do not attach your Firebase account ID, email, sign-in credentials, photo files, assistant message text, voice recordings, or personal plant notes to these usage analytics events. Pseudonymous identifiers still allow events from the same installation to be associated. Mixpanel IP-based geolocation is disabled in our event requests; providers still receive network information needed to deliver requests.

1.7 Purchases

We process subscription status, product identifiers, transaction information, purchase history, and credit balances to verify purchases and provide access. Apple handles App Store payments. We do not receive your full payment-card information.

1.8 Support requests and website use

When you email us or use the contact form, we receive the information you include, such as your name, email, and message. The contact form sends these details through Formspark to handle your support request. Hosting services may process standard request information, such as IP addresses and browser details, for delivery and security. This website does not load an advertising pixel or a separate client analytics service.

1.9 Advertising and install attribution

When you separately agree to advertising measurement and allow tracking through Apple’s App Tracking Transparency (ATT) prompt, Google’s Firebase Analytics SDK may access your Identifier for Advertisers (IDFA) and share advertising identifiers, app interactions, and conversion events such as trials and purchases with Google for Google Ads campaign measurement and attribution. This requires usage analytics consent as well. Google may associate these signals with information from other apps or websites to attribute advertising results. Advertising personalization is disabled in the app’s Google consent configuration. We do not send IDFA to Mixpanel or include it in our custom event parameters or account database.

With usage analytics consent, we also use Apple AdServices to determine whether an installation came from Apple Ads. Our backend processes Apple’s attribution response, installation identifiers, app and operating-system versions, installation time, country where available, and associated purchase information. These installation records are linked to your account and may be stored in Firebase and our backend database infrastructure, including MongoDB. This separate Apple Ads integration does not read IDFA.

1.10 Sources of information

We receive information directly from you when you submit content, choose preferences, or contact support; from your device and app when you use features; and from sign-in, purchase, cloud-processing, and attribution providers. Apple or Google sign-in may supply the profile information you authorize. Apple supplies purchase verification and attribution information, and AI or weather services return results for your requests.

2. Information We Do Not Require

You do not need to provide contacts, financial account information, or unrelated personal documents to identify or care for a plant. Plantsy does not require access to your address book. Camera, microphone, location, and notification permissions are requested for the features that need them and can be controlled in device settings. Photos and text you choose to submit are needed for the corresponding analysis or assistant request. If you decline a feature permission, that feature may be unavailable, but you can use other available features. For example, you can select a photo instead of taking one, type instead of using voice input, or select a city manually instead of sharing device location.

3. How We Use Information

• Identify plants and provide the AI analysis, health insights, or assistant response you request.
• Save and synchronize garden records, conversations, notes, and care activity.
• Deliver reminders and weather information according to your settings.
• Authenticate accounts, validate purchases, and manage subscription and credit access.
• Maintain, secure, troubleshoot, and improve the Service.
• Analyze product usage with your consent and measure installs, trials, purchases, and advertising campaign results subject to your analytics, advertising, and tracking choices.
• Respond to support and privacy requests and comply with applicable legal requirements.

Where data-protection law requires a legal basis, we rely on performance of our agreement with you for requested features, consent where required for optional processing, legitimate interests in operating and protecting the Service where permitted, and compliance with legal obligations.

Requested account, storage, AI, purchase-validation, and reminder services rely on the information necessary to perform those services. Optional usage analytics, installation attribution, and advertising measurement rely on your consent where required. Operational security and fraud-prevention processing is separate from optional product analytics and is based on legitimate interests or legal obligations where applicable. You may object to processing based on legitimate interests, subject to applicable law.

Plantsy generates automated plant identifications, health assessments, and assistant replies from the content you submit. These outputs are advisory, can be inaccurate, and should be checked before you act on them. They are not decisions about your legal rights or eligibility for employment, credit, or insurance.

4. Data Linking and Tracking

Your account identifier connects saved content, purchases, settings, and, with usage analytics consent, our installation attribution records. It is separate from Mixpanel’s installation identifier, Google’s app-instance identifier, and Apple’s advertising identifier. Usage analytics and advertising measurement have separate consent controls. Allowing one does not automatically allow the other.

You can use Plantsy without agreeing to optional usage analytics or advertising tracking. Google Ads measurement is enabled only while usage analytics consent, advertising measurement consent, and the current iOS ATT authorization are all granted. Denying or revoking ATT prevents the IDFA advertising integration; ordinary Mixpanel and Google usage analytics may continue if you have allowed usage analytics. Disabling Usage Analytics stops both those analytics services and the Google Ads measurement that depends on them. You can change these choices in Plantsy Settings and tracking authorization in iPhone Settings → Privacy & Security → Tracking.

We do not sell personal information for money. Sharing advertising identifiers and conversion information with Google may be considered “sharing” for cross-context behavioral advertising or a “sale” under some privacy laws. You can opt out of that advertising sharing through the advertising measurement control and ATT. The website does not load a cross-site advertising tracker.

5. Service Providers

We use providers that process information needed to deliver the Service, including:

• Google Firebase and Google Cloud: authentication, cloud storage, databases, backend processing, analytics, and notifications.
• Mixpanel: consent-based product usage analytics.
• Google Analytics for Firebase and Google Ads: consent-based usage analytics, and advertising measurement and attribution subject to your separate advertising consent and ATT authorization.
• MongoDB infrastructure: backend storage of installation and purchase attribution records.
• Google Gemini: AI analysis of submitted plant photos, questions, and relevant plant context.
• Google Speech-to-Text: transcription when you choose voice input.
• WeatherAPI: weather conditions and forecasts for your selected location.
• Apple: sign-in, App Store payments, subscription management, Apple Ads attribution, and related platform services.
• Website hosting and email providers: delivery of the website and handling support correspondence.

Formspark: processing and delivery of website contact form submissions, including your name, email, and message.

We share information with providers as needed for these functions. Providers’ handling of information is also subject to their applicable terms and privacy practices. We may disclose information where required by law, to protect rights or security, or as part of a business transfer subject to applicable protections.

Learn more about Google’s privacy practices, Firebase privacy and security, Mixpanel’s privacy practices, and Apple’s privacy practices. Submitted photos, messages, and relevant plant context are shared with Google’s cloud AI services to deliver the analysis or reply you request. We do not send these photos or message contents to Mixpanel or Google Ads.

6. Storage and Retention

Account information, uploaded photos and previews, analysis results, garden records, notes, care history, and conversations are stored in cloud services to provide your saved history and synchronization. Local copies may remain on your device as drafts, queued uploads, or caches. We retain saved content while needed for these features, until it is deleted through the available content controls, Clear Data, or Delete Account. Uploaded analysis photos are not automatically removed immediately after processing, and archiving content does not erase it. Temporary processing data, security logs, backups, transaction records, and provider-held data may follow separate retention schedules according to their purpose and applicable obligations.

Account deletion removes account-owned uploaded media, garden and analysis records, conversations, associated account settings, and the Firebase authentication account from our active systems. The app clears associated local account data after successful deletion. Account-linked installation attribution records and associated backend copies are also removed through our deletion process. Minimal deletion-status, transaction, security, and fraud-prevention records may remain where needed for legal obligations, enforcing deletion, or resolving disputes; backup copies may remain until the applicable backup cycle expires. These records are not used to restore your deleted garden or conversations. Uninstalling the app alone does not delete cloud account data.

Turning off analytics or advertising measurement stops the corresponding future collection and resets or clears relevant local analytics data; it does not automatically erase events already received by Mixpanel or Google. Their stored data is subject to the retention settings and processes of the relevant service. Account deletion does not itself issue an automatic deletion request to those analytics providers. Contact us for help with access or deletion of provider-held information. Because usage analytics identifiers are separate from your account ID, we may need additional information to locate the relevant records. Irreversibly anonymized aggregate statistics may be retained.

7. Your Rights and Choices

7.1 Delete your account or clear saved data

To permanently delete your Plantsy account, open Plantsy Settings → Account & Privacy → Delete Account and confirm the deletion. This in-app deletion process is available for guest and registered accounts. An internet connection and an authenticated session are needed to delete cloud data. The app shows progress and confirms completion; if deletion fails, use Retry or contact support. We do not treat a failed request as completed deletion.

Clear Data in the same account area removes saved app content while retaining the account. Use Delete Account if you also want the authentication account removed. These actions are permanent. They do not delete original photos from your iPhone photo library or automatically cancel an Apple subscription. Manage or cancel your subscription separately through Apple’s subscription settings.

7.2 Permissions, consent, and privacy requests

For additional privacy requests or help with deletion, email support@plantsy.app and optionally use “Plantsy — Data Request” as the subject. We may need information to verify your request without exposing another user’s data.

• Change Usage Analytics and advertising measurement in Plantsy Settings → Privacy. Manage ATT in iPhone Settings → Privacy & Security → Tracking. Withdrawing optional consent does not prevent access to the app’s core features.
• Manage camera, photo, microphone, location, and notification permissions in iPhone Settings.
• Manage subscriptions separately in your Apple Account. Account deletion does not cancel a subscription.
• Depending on applicable law, request access, correction, deletion, portability, restriction of processing, or object to certain processing.
• Withdraw consent where processing relies on consent, without affecting prior lawful processing.

7.3 Access, portability, and handling requests

You can request confirmation of whether we process your personal information, a copy of relevant records, correction of inaccurate information, or a portable copy where applicable law provides that right. Describe the data and approximate dates involved and provide the account email or other information that helps us locate your records. Guest users can also contact us for assistance. Do not send passwords, authentication tokens, or full payment-card information.

“Plantsy — Data Request” is a suggested subject line, not a requirement for exercising your rights. We may verify your identity or the authority of someone acting for you, using information proportionate to the request. We respond within the applicable legal deadline; UK and EEA access requests are generally answered within one month, with extensions where the law permits. If a request is limited or refused, we explain the reason and available complaint options as required by law. Withdrawal of consent stops the relevant future processing but does not invalidate processing that was lawful before withdrawal.

European Economic Area and United Kingdom

Subject to the conditions of applicable data-protection law, you may exercise the rights above and lodge a complaint with your local supervisory authority, including the UK Information Commissioner’s Office where applicable. You can contact us first to help resolve a concern, but you are not required to do so before contacting your supervisory authority.

California residents

Where California privacy law applies, you may request information about the categories and specific pieces of personal information processed, request correction or deletion, and exercise applicable opt-out rights. Advertising measurement sharing with Google may fall within the law’s definitions of sale or sharing, even without a monetary payment. To opt out, disable advertising measurement in Plantsy and revoke tracking permission in iPhone Settings. You can also contact us to exercise applicable rights concerning information already collected. We will not discriminate against you for exercising applicable privacy rights.

8. Children’s Privacy

The Service is not directed to children under 13 or a higher minimum age required by applicable law. Where a young person requires parental or guardian permission under applicable law, that permission is required for use of the Service. If you believe a child below the applicable minimum age has provided personal information, contact us so we can investigate and delete it as appropriate. Do not include unnecessary information about children in photos or messages.

9. International Processing

We are based in the United Kingdom. Our providers may process information in the United States and other countries. Where required by applicable law, international transfers must use an appropriate safeguard, such as an adequacy decision or applicable contractual protections.

10. Security

We use reasonable technical and organizational safeguards, including encrypted network connections, authentication, and access controls. No online service or storage system can be guaranteed completely secure. Keep your account and device secure and avoid including unnecessary personal information in submitted content.

11. Changes to This Policy

We may update this policy as features or data practices change. The current version will appear here with an updated date. For material changes, we will provide additional notice where required, for example through the app or an available contact channel. If a change requires new consent, we will obtain it before the relevant new consent-based processing. Changes to this policy do not themselves override the choices you have made in the app or iPhone Settings.

12. Contact Us

For privacy questions and requests, contact the controller below. Mention Plantsy so we can route your request correctly. We respond within the time required by applicable law.