This policy explains what data the PlantoScan mobile app (“the app”) collects, why, and what choices you have. It applies to the Android and iOS apps published under the package / bundle ID com.upvisionmedia.plantoscan.
1. Information we collect
We collect only what we need to run the features you use.
Account information
- Email address, first name, last name — when you sign up or sign in (including via Google Sign-In). Used to authenticate you and personalize the app.
- Profile photo / avatar — optional. Either an image you upload, your Google account photo (if you sign in with Google), or a preset emoji you pick in-app.
Plant scans and journal entries
- Photos you take to identify or document plants — sent to our backend at nuknok.com for plant identification, then associated with your account so you can find them later in your collection or journal.
- Notes, reminders, and care logs you write in the app.
Device and usage data
- Camera access — only when you actively open the scan camera or attach a photo. We do not access the camera in the background.
- Coarse location— optional, only when you tap “Use my location” to determine your USDA hardiness zone or fetch local weather. You can also set the zone manually and skip location entirely.
- Push notification token (Firebase Cloud Messaging) — to deliver care reminders and product updates you’ve opted in to.
- Crash and diagnostic data (Firebase Crashlytics, Google Analytics for Firebase) — anonymous app version, device model, OS version, and crash stack traces. Used to fix bugs and prioritize improvements.
Purchase information
- Subscription status — managed by Google Play Billing / Apple In-App Purchase. We never see your payment method, card number, or billing address.
2. How we use your information
- Identify plants from photos you submit
- Save your collection, wishlist, journal, and reminders across devices
- Send care reminder notifications you’ve scheduled
- Personalize content (hardiness zone, recommended plants)
- Diagnose crashes and improve app stability
- Verify and manage subscriptions
We do not sell your data, and we do not use it for cross-app advertising.
3. Sharing your information
We share information only with service providers that help us run the app:
- Google Firebase (Cloud Messaging, Crashlytics, Analytics) — operated by Google LLC.
- Google Play Billing / Apple App Store — for subscription purchases.
- Our backend infrastructure (nuknok.com) — operated by UpVision GmbH on EU-based servers.
We do not sell, rent, or trade your personal information to third parties for marketing.
We may disclose information if required by law (court order, legal process) or to protect the safety of our users.
4. Data retention
- Your account, plant collection, and journal are kept until you delete them or close your account.
- Crash logs are retained for up to 90 days.
- Anonymous analytics events are retained for up to 14 months.
5. Your rights
You can:
- View and edit your data in the app (Profile → Edit profile).
- Delete your account and all associated data by emailing support@plantoscan.com with the subject “Delete my account”. We action requests within 30 days.
- Export your data by emailing the same address with subject “Export my data”.
- Opt out of push notifications in the app or your device settings.
- Revoke camera or location permission at any time in your device’s app settings.
If you are in the EU/EEA or UK, you have rights under the GDPR (access, rectification, erasure, portability, objection). If you are in California, you have rights under the CCPA. To exercise these, email support@plantoscan.com.
6. Children
PlantoScan is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact support@plantoscan.com and we will delete it.
7. Security
We use HTTPS (TLS) for all network traffic between the app and our backend. Passwords are hashed; payment data never touches our servers.
No system is perfectly secure. If we discover a breach affecting your data, we will notify you within 72 hours where required by law.
8. Changes to this policy
We may update this policy from time to time. Material changes will be communicated in-app or by email. The “Effective date” at the top reflects the most recent revision.
9. Contact
Questions, deletion requests, or data exports:
UpVision GmbHBiel, Switzerland
© 2026 UpVision GmbH. All rights reserved.