Privacy Policy

Updated 2026-05-21.

Summary

• Plant journal entries, diagnoses, protocol logs, and saved Q&A live on device in SwiftData.
• When you scan a plant, the photo is sent to our server, analysed, and never written to storage. It exists only in the memory of that one request.
• No account is required in v1. StoreKit handles purchases and restore.
• We don't sell data. We don't run ads. We don't track you across other apps.

What we collect

• Photos you scan — not retained. Your photo is sent to the diagnosis service, used to produce the observation and protocol in that same request, and then discarded with the request. It is not saved to any bucket, database, or cache, and it is never used to train a third-party model.
• A device identifier, stored one-way hashed. Your device generates a random local ID and sends it with each scan so we can enforce the free monthly scan allowance and rate limits. Before it is stored we replace it with a keyed one-way hash — the raw identifier is never written down. Those counters persist for up to about 35 days, so we disclose this as a Device ID on our App Store label.
• Your Pro entitlement. We verify Apple's signed StoreKit transaction and cache the product identifier — never your name, email, or card — against the same hashed device value for the length of your subscription period.
• Diagnostics. Crash logs via Apple's MetricKit. Opt-in.

Who processes the data

We use Cloudflare Workers for compute and short-term cache, and third-party LLM providers for the diagnosis step. No vendor is allowed to retain or train on your photos. Citation links point to public horticultural authorities (UC IPM, RHS, Extension.org) — visiting those is between you and those sites.

Children

Plant Doctor is not directed to children under 13.

Your rights

Email support@keenshift.ai to request export or deletion of your server-side data. We respond within 7 days.

Medical / regulated devices

Plant Doctor provides general houseplant and home-garden care information. It is not a medical device and does not diagnose human or animal disease. It does not advise on poisonous-plant ingestion — call your local poison control.