Privacy Policy
Updated 2026-05-21.
Summary
- Plant photos, plant journal entries, and diagnoses live in your private iCloud (CloudKit). We can't see them.
- When you scan a plant, the photo is sent to our server for analysis and deleted within 30 days.
- We use Sign in with Apple. If you choose to hide your email, we never see your real email.
- We don't sell data. We don't run ads. We don't track you across other apps.
What we collect
- Photos you scan. Held server-side only long enough to analyze and cache the diagnosis. Auto-purged within 30 days. Never used to train a third-party model.
- Apple user identifier. A stable opaque ID provided by Sign in with Apple.
- Subscription receipt. Apple's verification payload for Pro entitlement. Stored to prevent re-purchase.
- Diagnostics. Crash logs via Apple's MetricKit. Opt-in.
Who processes the data
We use Cloudflare Workers for compute and short-term cache, and third-party LLM providers for the diagnosis step. No vendor is allowed to retain or train on your photos. Citation links point to public horticultural authorities (UC IPM, RHS, Extension.org) — visiting those is between you and those sites.
Children
Plant Doctor is not directed to children under 13.
Your rights
Email mitsi@uptrail.ai to request export or deletion of your server-side data. We respond within 7 days.
Medical / regulated devices
Plant Doctor provides general houseplant and home-garden care information. It is not a medical device and does not diagnose human or animal disease. It does not advise on poisonous-plant ingestion — call your local poison control.