Plantly Privacy Policy

1. Introduction

Plantly (“we”, “us”, or “our”) operates the Plantly mobile application (the “App”) to help you track plants, care schedules, growth photos, reminders, and AI-assisted plant guidance. This Privacy Policy explains what information we collect, how we use it, whom we share it with, and the choices you have.

By using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.

2. Information we collect

We collect information you provide and information generated when you use the App.

Account and profile information

• Email address and display name
• Profile photo (if you sign in with Google or set an avatar)
• Authentication provider (email/password or Google)
• Email verification status and account creation date
• Subscription plan tier (Free, Premium, or Pro) and usage limits

Plant and care data

• Plant names, species, location, category, and notes
• Watering and care schedules (water, mist, fertilize, rotate, repot, and related settings)
• Care events and task completion history
• Reminder times you configure per plant

Photos and media

• Plant photos you capture with the camera or choose from your photo library
• Images attached to care events or growth records
• Compressed image files uploaded to our servers or designated storage providers

AI features

• Text messages you send in AI plant chat
• AI-generated responses, insights, and health-evaluation results related to your plants
• Plant facts or notes you save from AI features

Notifications

• Firebase Cloud Messaging (FCM) device token
• Device platform (Android or iOS), locale, and timezone
• Notification preferences (care reminders, push enabled, weekly digest, reminder time)
• In-app notification history (title, body, read status)
• Locally scheduled care reminders on your device

Technical and usage data

• Access and refresh tokens used to keep you signed in
• App language preference sent to our API (Accept-Language header)
• Offline cache data stored on your device (plants, pending sync operations, AI chat cache, subscription usage cache)
• Standard server logs from our API (e.g. request time, endpoint, error codes) — we do not use third-party advertising or analytics SDKs in the App

Encyclopedia

• Search queries and filters you use when browsing plant species information served by our API

3. How we use information

• Create and manage your account and authenticate you
• Store and sync your plants, care history, and photos across devices
• Send care reminders and push notifications you opt into
• Provide AI chat, insights, and plant health evaluations
• Enforce subscription plan limits and show usage quotas
• Improve reliability, security, and support
• Comply with legal obligations

The App currently offers subscription plan previews. In-app purchases via Google Play or the App Store are not enabled in all builds; we do not collect payment card details through the App at this time.

4. Permissions on your device

The App may request the following permissions:

• Camera and photos — to take or select plant pictures
• Notifications — to deliver care reminders and related alerts
• Exact alarms / boot completed (Android) — to schedule reliable local reminders
• Vibrate — for notification alerts
• Internet — to sync data with our servers

You can change or revoke permissions in your device settings. Some features may not work without them.

5. How we store data

• On your device: authentication tokens in secure storage; app preferences, plant cache, notification inbox, and offline sync queue in local storage
• On our servers: account, plant, care, notification, subscription, and AI-related data linked to your account
• Images: uploaded to cloud storage operated by us or our providers (e.g. Cloudflare R2 or Cloudinary, depending on server configuration)

We use HTTPS to protect data in transit. No method of storage or transmission is 100% secure.

6. Third-party services

We use trusted service providers to operate the App. They process data only as needed to provide their services:

• Google Firebase — authentication (email and Google Sign-In), app configuration, and push messaging (FCM)
• Google Sign-In — optional sign-in with your Google account
• Plantly API — hosted backend at https://prod.plant-ly.com/ (production) for account sync, plants, media, notifications, AI, and encyclopedia data
• Cloud image storage — Cloudflare R2 and/or Cloudinary for plant photo hosting
• AI providers — our backend may send plant context and your messages to AI service providers to generate responses; we do not use your data to train public models on your behalf without appropriate safeguards

Google’s use of information from Firebase and Sign-In is governed by Google’s Privacy Policy.

We do not sell your personal information. We do not show third-party ads in the App.

7. Data retention

We keep your information while your account is active and as needed to provide the App, comply with law, resolve disputes, and enforce our agreements. Cached data on your device is removed when you sign out or uninstall the App, subject to platform behavior.

8. Your choices and rights

• Account access: view and update profile information in the App
• Notifications: manage care reminders and push settings in the App or device settings
• Photos: choose whether to grant camera or library access
• Sign out: clears local session tokens and cached account data on the device

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing. Contact us to exercise these rights (see Section 11).

9. Account and data deletion

You may request deletion of your account and associated personal data by emailing us at privacy@plant-ly.com from the email address linked to your account. We will verify your request and delete or anonymize data within a reasonable period, except where we must retain information for legal, security, or fraud-prevention purposes.

Uninstalling the App removes local data from your device but does not delete server-side account data.

10. Children’s privacy

The App is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

11. International transfers

Your information may be processed in countries other than where you live, including where our servers or service providers operate. We take steps designed to protect your information in line with this policy.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy at this URL and update the effective date. Continued use of the App after changes means you accept the updated policy.

13. Contact us

If you have questions about this Privacy Policy or our data practices, contact:

Plantly
Email: privacy@plant-ly.com
Website: https://plant-ly.com/