Privacy Policy

Updated 2026-05-21.

Summary

• Plant journal entries, diagnoses, protocol logs, and saved Q&A live on device in SwiftData.
• When you scan a plant, the photo is sent to our server for analysis and deleted within 30 days.
• No account is required in v1. StoreKit handles purchases and restore.
• We don't sell data. We don't run ads. We don't track you across other apps.

What we collect

• Photos you scan. Held server-side only long enough to analyze and cache the diagnosis. Auto-purged within 30 days. Never used to train a third-party model.
• Device identifier. A local anonymous ID used to enforce free scan limits and rate limits.
• Subscription receipt. Apple's verification payload for Pro entitlement. Stored to prevent re-purchase.
• Diagnostics. Crash logs via Apple's MetricKit. Opt-in.

Who processes the data

We use Cloudflare Workers for compute and short-term cache, and third-party LLM providers for the diagnosis step. No vendor is allowed to retain or train on your photos. Citation links point to public horticultural authorities (UC IPM, RHS, Extension.org) — visiting those is between you and those sites.

Children

Plant Doctor is not directed to children under 13.

Your rights

Email mitsi@uptrail.ai to request export or deletion of your server-side data. We respond within 7 days.

Medical / regulated devices

Plant Doctor provides general houseplant and home-garden care information. It is not a medical device and does not diagnose human or animal disease. It does not advise on poisonous-plant ingestion — call your local poison control.