Privacy Notice

Account information. When you create an account, we collect your email address, an optional name and a password. Passwords are stored only as a secure hash. If you sign in with Apple or Google, we receive a unique account identifier from Apple or Google and, if you allow it, your name and email address (Apple may provide a private relay email address). We never receive your Apple or Google password.

Your plants and garden. We store the plants you add to “My Plants” and your wishlist, rooms, nicknames, photos you take or upload (plant photos, cover photos, journal entries, health checks, harvests and cuttings), notes, care reminders and completed care tasks, plant care profile details (for example pot size or the light level you measured), garden settings, beds, plantings and harvest records, and your quiz progress.

Photos for identification and health checks. When you identify a plant or run a health check — in the app or with the free plant identifier on plantoscan.com — the photo you take or select is sent to our servers and processed by the identification and AI providers listed in section 4 (Pl@ntNet, Google Gemini and Plant.id for plant identification, OpenAI for health checks) to produce the result. Health check photos are also saved in your plant’s history. In addition, we keep:

• a small thumbnail (about 200 pixels) of each identification in our identification log, together with the result and, if you were signed in, your account (deleted when you delete your account, see section 8); and
• an anonymized copy of every identification and health-check photo (at most 1024 pixels), whether or not a plant was recognized. Before the copy is stored, all photo metadata is removed (for example GPS location, camera or device model and the time the photo was taken). It is stored without your account, name, email address, IP address or device identifier — only together with the result (the suggested plant names or diagnosis, their confidence and the provider used, and the plant name you confirmed or corrected, if you did), the day of the scan, and whether it came from the iOS app, the Android app or our website.

How we use anonymized scan photos. We use these anonymized copies to train, test and improve PlantoScan’s plant identification and plant-health models, and our team uses them to review and curate the plant pictures in our database. Because an anonymized copy can no longer be linked to you, we keep it indefinitely, also after you delete your account (see section 8). Our legal basis is our legitimate interest in improving the Services (see section 3); you can object to this use at any time by emailing info@upvision.media. Because the copies are stored without any link to you, we can only find a specific photo if you send it to us; we will then remove it from our training data. Please only photograph plants: do not include people, faces, or private documents or other personal information in your scan photos.

Plant pictures in our database. To illustrate plant species in the app and on our websites, our team may choose individual photos from these anonymized identification copies — for example photos our own team took while scanning plants — as the picture of a species. Such pictures are credited to PlantoScan and never show your name or account.

AI plant chat. When you use “Ask about this plant”, your messages, any photo you attach and the relevant plant information are processed to generate an answer. Attached photos are sent to Google Gemini to answer your question but are not stored on our servers. Conversations are stored in your account so you can see your history. You can remove a conversation from your history in the app; its messages are then kept until you delete your account, because we use them to count your daily AI usage.

Household sharing. If you create or join a household, we process the membership and share the household’s plants, their care reminders, and who completed a care task with the other members, together with each member’s name.

Plant sitter links. If you create a plant sitter link (for example for a vacation), anyone who opens the link can see your first name, the plants you chose to share (with their name, photo and room) and their care tasks, and can mark tasks as done until the link expires or you revoke it. No account is needed to open a sitter link, so only share it with people you trust.

Support requests. If you contact us, we process your message and contact details to answer your request.

Payment data. Purchases are processed by Apple (App Store) or Google (Google Play). We never receive your payment card details. Apple’s privacy policy: https://www.apple.com/legal/privacy/ — Google’s privacy policy: https://policies.google.com/privacy.

Location. With your permission, we use your device’s location to show local weather, the weather forecast, frost alerts and the planting calendar for your climate. We store your location only approximately (rounded to about 1 km) together with a place name. You can enter a location manually instead or turn off location access in your device settings at any time.

Camera and photos. We request access to your camera (to identify plants, run health checks, measure light and take plant photos) and to your photo library (to select photos). The light meter analyzes the camera image on your device only; we store only the light level you choose to save.

Notifications. If you allow notifications, we store a push token for your device (via Firebase Cloud Messaging and Apple Push Notification service) to send care reminders, weather and frost alerts and garden tips. On iOS, frost countdowns can appear as Live Activities on your Lock Screen; for these we store an Apple push token for the activity. You can turn individual notification types off in the app settings, or all notifications in your device settings.

Quiet notifications and first-plant reminders. On iOS, when you finish the introduction, the app may ask iOS for “provisional” notification permission. No system prompt is shown; such notifications are delivered quietly to Notification Center only, and you can keep or turn them off there. If you have not added a plant yet, the app (iOS and Android) schedules up to two reminders on your device, about one and three days later, suggesting that you add your first plant. These are created on your device, are only shown if notifications are allowed, and are cancelled as soon as you add a plant.

Device and usage data. We collect information about your device and how you use the app, such as device model, operating system and version, app version, language, time zone, app events (for example which features you use), and crash and error reports. We use this to operate, secure and improve the Services.

App status. When you open the app, and when it registers your device for push notifications, the app sends our server the app version, the platform (iOS or Android), your notification permission status (allowed, denied, not yet decided or provisional) and the time of this app open (“last seen”). We store the latest values with your account and push token and use them to deliver care reminders (watering and fertilizing) and alerts, and to measure how well our getting-started steps work (for example how many new users add their first plant).

Log data. Our servers automatically record technical information when you use the Services, such as IP address, date and time of requests, and error information.

Install attribution (only with consent). With your consent — and on iOS only if you allow tracking in Apple’s App Tracking Transparency prompt — we use AppsFlyer to measure which campaigns led to installs of our app. Without your consent, AppsFlyer is not started.

Purchase status. To manage your subscription across your devices, we use RevenueCat, which receives a random identifier for your account (not your name or email address), your purchase history and subscription status from Apple or Google.

Discount offer after a free trial (iOS). If your free trial ended without a paid subscription, the iOS app may show you a one-time discount offer. To decide this, the app uses only the purchase and subscription status from Apple and RevenueCat described above; no additional data is collected for it.

Free plant identifier on plantoscan.com. If you use the plant identifier on our website, we store your IP address, a random visitor identifier (saved in the cookie ps_scan_vid for up to one year) and the time and result of each scan, to enforce the limit of free scans and prevent abuse. Your photo is handled as described under “Photos for identification and health checks” above.

Other users, at your choice. If you use household sharing, household members can see the shared plants, care reminders and care activity and your name. If you create a plant sitter link, anyone with the link can see your first name and what you chose to share.

Business transfers. We may share or transfer your information in connection with a merger, sale of company assets, financing or acquisition of all or part of our business.

Legal reasons. We may disclose information where required by law or to protect our rights, our users or others.

Selling and sharing. UpVision GmbH has not sold personal information and has not shared personal information for cross-context behavioral advertising in the preceding twelve (12) months, and will not do so in the future.

How to exercise your rights. Email us at info@upvision.media. We will verify your request by matching the information you provide with the information we hold (for example by contacting the email address of your account). You can designate an authorized agent; we may deny a request from an agent who cannot prove authorization.

“Shine The Light”. California residents may request once a year information about personal information we disclosed to third parties for their direct marketing purposes. We do not disclose personal information for such purposes.