Privacy Policy

Updated 2026-05-21.

Summary

• Plant photos, plant journal entries, and diagnoses live in your private iCloud (CloudKit). We can't see them.
• When you scan a plant, the photo is sent to our server for analysis and deleted within 30 days.
• We use Sign in with Apple. If you choose to hide your email, we never see your real email.
• We don't sell data. We don't run ads. We don't track you across other apps.

What we collect

• Photos you scan. Held server-side only long enough to analyze and cache the diagnosis. Auto-purged within 30 days. Never used to train a third-party model.
• Apple user identifier. A stable opaque ID provided by Sign in with Apple.
• Subscription receipt. Apple's verification payload for Pro entitlement. Stored to prevent re-purchase.
• Diagnostics. Crash logs via Apple's MetricKit. Opt-in.

Who processes the data

We use Cloudflare Workers for compute and short-term cache, and third-party LLM providers for the diagnosis step. No vendor is allowed to retain or train on your photos. Citation links point to public horticultural authorities (UC IPM, RHS, Extension.org) — visiting those is between you and those sites.

Children

Plant Doctor is not directed to children under 13.

Your rights

Email mitsi@uptrail.ai to request export or deletion of your server-side data. We respond within 7 days.

Medical / regulated devices

Plant Doctor provides general houseplant and home-garden care information. It is not a medical device and does not diagnose human or animal disease. It does not advise on poisonous-plant ingestion — call your local poison control.