Privacy Policy
Last updated: 2025-11-28
AI Plant Doctor ("we", "us", "our") offers AI-assisted plant care through applications and websites. This policy explains what information is collected, how it is minimized and secured, and the rights you can exercise.
Information We Collect
Account & Authentication
Email, display name, identity-provider identifiers, security attestations, preferred locale, session tier, and consent records.
Plant Library & Photos
Plant nicknames, species context, room/location labels, care notes, treatment plans, and up to three photos per diagnosis. Media is encrypted at rest under user scope; EXIF data is discarded before analysis.
Diagnosis Jobs & AI Outputs
Job identifiers, image paths, platform/version metadata, plant context, AI-generated summaries, locale preferences, tier, timestamps, and processing metrics.
Reminders & Notification Preferences
Schedules, snooze settings, quiet hours, device tokens, notification channels, opt-in status, and automation history.
Credits, Purchases & Subscriptions
Balances, transaction history, product identifiers, order IDs, hashed purchase tokens, pricing, tax jurisdiction, refunds, and chargeback indicators.
Support & Communications
Support emails, attachments, screenshots, and troubleshooting notes.
Usage Analytics & Diagnostics
App interactions, lifecycle events, experiment cohorts, crash reports, device/OS information, and anonymized performance metrics.
Device Permissions
Camera, photo library, and notifications when enabled by you.
How We Use Information
- Deliver and improve diagnosis, treatment plans, reminders, plant libraries, and sync services
- Submit photos to AI inference partners for symptom interpretation and localization
- Operate backend services for synchronized, available data and offline recovery
- Send reminders, nudges, newsletters, notices, and support responses
- Process credits and subscriptions, verify receipts, detect fraud, and ensure compliance
- Monitor usage trends, reliability, and security telemetry
Data Processing and Sharing
We do not sell personal information. We use vetted subprocessors bound by confidentiality and data-processing terms:
Infrastructure Providers
Hosting, authentication, databases, encrypted storage, serverless execution, messaging, and observability.
AI Inference Partners
Analyze plant imagery and return diagnoses via encrypted channels.
App Store & Payment Platforms
Verify purchases, subscriptions, and refunds.
Communications Providers
Email, push notifications, support, legal, and compliance services.
Data is disclosed only to comply with law, respond to emergencies, investigate abuse, or support corporate transactions. Plant photos are not reused for external model training without explicit permission.
Data Retention
- Account, credit, and billing records retained while active and up to seven years after
- Plant libraries, diagnoses, and reminders remain until user deletion; account deletion removes associated media
- Guest data and local notification settings remain on-device only
- Analytics, crash, and security logs rotate within thirteen months unless longer retention is legally required
Security
We apply encryption in transit and at rest, hardware-backed attestation for clients, scoped service accounts, least-privilege access reviews, tamper-evident logging, penetration testing, incident response playbooks, and continuous monitoring.
Your Choices and Rights
- View, edit, export, or delete plant entries, diagnoses, reminders, and credits in-app or via support
- Delete your account using Account Settings or email support@theaiplantdoctor.com
- Manage push/email preferences, revoke permissions, or opt out of analytics
- Request confirmation of processing, correction, portability, restriction, or appeal automated decisions
Children's Privacy
The service is not directed to children under 13. Parents should contact support if they believe data was collected from a child.
International Transfers
Data is stored primarily in the United States. International transfers use legally recognized safeguards (such as standard contractual clauses) and we conduct transfer impact assessments.
Changes to This Policy
Updates are posted when features, regulations, or enforcement expectations change. Continued use means acceptance of revised terms.
Contact
If you have questions about this privacy policy, please contact us at: