PLANTPAL

Privacy policy

How photos, garden records, and account information are handled.

Updated 9 November 2026

Who we are

PlantPal is operated by Second Wind Limited. Contact support@secondwindltd.xyz for privacy questions or requests. This policy describes the intended PlantPal service; release availability is shown on the home page.

Information you choose to provide

PlantPal processes plant photos, names, room and light descriptions, care observations, optional care background, and care history when you use those features. You can enter a plant location or timezone to make care and reminders more relevant. When you request a diagnosis or pruning guidance, you may allow foreground location access. The app rounds the device coordinates to whole degrees before sending them with your local date to help tailor seasonal guidance. The rounded location and date may be held with a pending request for processing and recovery. You can decline location access and still use these features. The app does not need your contacts, microphone, continuous camera access, or background location. Photos are processed on your device before upload to reduce size and remove unnecessary metadata.

Account and garden records

PlantPal uses Firebase Authentication for guest access and sign-in with Apple or Google. Your Firebase account identifier associates your private plants, tasks, logs, care background, preferences, and saved AI results with you. PlantPal’s API and database run on Cloudflare Workers and D1; private photos and generated pruning guides use Cloudflare R2. Account identifiers, request status, usage counters, verified subscription status, and the records needed to operate those features are retained while the account is active.

AI processing

When you request plant identification, diagnosis, or illustrated pruning guidance, the relevant plant photos, observations, care context, and language are sent through our service to the AI provider used for that feature. We use OpenAI for plant identification and generated pruning images, and Alibaba Cloud’s Token Plan or DashScope services for configured text and vision guidance. Diagnosis or pruning requests may also include your local date and optional rounded location. Photos and context are shared to produce the result you request. Do not include people, sensitive personal information, or documents unrelated to plant care. Processing locations and retention depend on the provider and configuration in use; we do not promise zero provider retention. See OpenAI’s privacy policy and Alibaba Cloud’s privacy policy. General application logs should not contain your photos, full personal notes, or authentication tokens.

Photos in results and your garden

Identification photos, diagnosis results, generated pruning guides, and plant records are stored privately and associated with your account. A care plant can reference a saved result; deleting the care plant does not necessarily delete its independent identification or AI history. Use the corresponding history controls to remove saved results, or delete your account to remove all garden records and private media. Photos from unsuccessful checks are normally removed after processing; interrupted or failed removal can leave a private copy until account deletion. Cached copies on your device may remain until cleared or removed by the app or operating system.

Reports and service operation

If you report an AI result in the app, we store the result reference, selected reason, optional report text, and your account identifier so we can review the content and improve safeguards. Authentication, messaging, and purchase services may process device identifiers, service diagnostics, and transaction metadata needed to provide and protect those features. We do not use these records for targeted advertising.

Reminders and notifications

Notifications are optional. When enabled, PlantPal stores a device messaging token, notification permission state, timezone, reminder preferences, and the limited delivery history needed to avoid repeats. Firebase Cloud Messaging and Apple Push Notification service transport notifications. A reminder can include a plant name or care task on your lock screen; use your device’s notification preview controls if you prefer to hide this. Turning reminders off stops future scheduled notifications; messages already accepted by the operating system may still appear. Notifications do not automatically submit new photos or generate paid AI requests.

Purchases

Apple or Google processes purchases; RevenueCat helps verify and associate subscription access with your account. PlantPal’s backend confirms access and usage limits. We do not receive your full payment card number. Stores and RevenueCat retain their own transaction records under their policies.

Public reference content

Taxonomy and reference photos are separate from your private garden. Source links and photo credits are provided with reference images. Opening an external source subjects that visit to the source’s own privacy practices. External image hosts may receive standard network information when an image is requested.

Account deletion and support

Use Settings → Privacy & your data to delete your account data. Deletion removes your garden records and stored private media, then the Firebase identity. The service may keep a minimal deletion receipt or safety marker needed to complete the request and prevent delayed tasks from recreating data. Provider logs, backups, and legally required transaction records follow their respective retention rules. If you cannot use the app, follow the web deletion instructions. Deleting an account does not cancel an Apple or Google subscription.

Your choices and changes

You can choose photo access, location access, notification permission, optional observations, and whether to sign in. You can change location access in your device settings. We do not sell your personal data or use it for targeted advertising. PlantPal is not intended for children under 13. Contact us about access, correction, deletion, or a child’s account. We update this page when data handling changes.