Privacy Policy

Last updated October 2, 2026

Planty identifies plants from your photos, writes care guides and, with Premium, helps you look into what has changed with a plant. This policy explains what leaves your device when you use it, where it goes, and how long it is kept. Planty is provided by Anton Mitrafanau, IE (“we”).

1What you send, and where it goes

Identifying a plant. When you take or choose a photo to identify, the app makes it smaller and sends it to our server, which passes it to Kindwise, the company behind Plant.id. Kindwise answers with the plants it most likely shows, and reference photos of each from its own database: photos of other plants, never of yours. As soon as it has answered, our server asks Kindwise to delete the identification, which holds your photo.

Searching. What you type to search for a plant is sent through our server to Kindwise’s plant database. Our server keeps each search term, with the plants it found and nothing that identifies who searched, for up to 7 days, so that the next search for the same plant is answered at once.

Care guides. For a plant you open, our server asks Kindwise’s plant database for its details and picture, and asks OpenAI to write a care guide from the plant’s name, including whether the plant is known to be toxic. A guide is about the species, not about you, so our server keeps it, with nothing that identifies who asked, for up to 180 days and shows it to anyone who opens the same plant.

Assessments (Premium). When you ask Planty to assess a plant, the photo you choose, the plant’s name, what you describe, the growing conditions you recorded and your recent care notes are sent through our server to OpenAI, whose model suggests what to check and what to do next. The app tells you this and asks before sending anything. The photo is not added to your care journal; the result is saved there only if you choose to save it.

Our server does not store your photos or notes. OpenAI does not use what the app sends to train its models, and keeps it for up to 30 days to detect abuse, unless the law requires it to keep it longer. Kindwise handles your photo under its own privacy policy until it is deleted.

Your garden, the photos you save to it, your reminders and your care journal are stored only on your device. Deleting a plant, or the app, deletes them.

2An identifier for your device

The app creates a random identifier and keeps it in your device’s keychain. It is not your name, your email, your Apple ID or the advertising identifier. On devices that support it, the app also uses Apple’s App Attest, which creates a key on your device, to prove that requests come from the genuine app. We use them to count your free identifications and guides, and to stop abuse.

The identifier stays in the keychain if you delete the app, so that reinstalling does not renew the free allowance. Erasing the device removes it.

3Records of each request

For each request our server records the time, your device identifier, whether the request was attested, the feature used (identification, care guide or assessment), whether your subscription was active, the AI model that answered and how many tokens it took, and whether the request succeeded. Never your photos, search terms, plant names or notes.

We use these records to limit how much one device can use in a day, to find abuse, and to keep the cost of the service in check. They are deleted after 90 days.

Our server also keeps how many free identifications and guides your device has used. The free allowance is for the lifetime of the install, so this count is kept for as long as the service runs.

4Server logs

Our server’s logs hold the same details as the records, and may include the IP address and the time of each request. They are deleted after 90 days. IP addresses are also held in memory for ten minutes to limit how quickly requests can be made.

5Subscriptions

Payments are handled entirely by Apple; we never see your payment details. The app sends our server the transaction Apple signed, so that the server can check your subscription itself. We check it and do not keep it; the request records only note whether a subscription was active.

6Analytics

The app uses Firebase Analytics, a service by Google, to learn how it is used: for example, whether onboarding was finished, when the Premium offer was shown and from which screen, and whether a purchase went through, together with the app’s version. Firebase Analytics uses an identifier of its own for the app on your device. Google handles this data as its Privacy Policy and Firebase’s privacy information describe. We use it only to improve the app.

The app does not ask for permission to track you, so it has no access to your device’s advertising identifier.

7What we don’t do

The app shows no advertising and does not track you across other companies’ apps or websites. We do not sell your data, and do not share it with anyone except as described here. In the words of the California Consumer Privacy Act, we do not sell or share your personal information.

8Who handles your data

They process your data only to provide their service to us, under terms that protect it at least as well as this policy.

9How long it is kept

10Your choices and rights

Planty needs no account. You can decline when the app asks before an assessment, and nothing is sent. To stop sending data, stop using the app and delete it; the records of your requests are deleted within 90 days.

Depending on where you live, you may have the right to access, correct or delete personal data about you, or to object to how it is used. Write to us to exercise any of them. The records hold no name or email, so we may not be able to tell which are yours; they are deleted after 90 days in any case.

11This website

This website sets no cookies and runs no analytics or scripts.

12Children

Planty is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has used it, contact us.

13Changes

When this policy changes, the new version is published here with a new date.

14Contact