Privacy Policy
Last updated: 2026-10-23
AI Plant Doctor ("we", "us", "our") offers AI-assisted plant care through applications and websites. This policy explains what information is collected, how it is minimized and secured, and the rights you can exercise.
Information We Collect
Account & Authentication
Email, display name, identity-provider identifiers, security attestations, preferred locale, session tier, and consent records.
Plant Library & Photos
Plant nicknames, species context, room/location labels, care notes, treatment plans, and up to three photos per diagnosis. Media is encrypted at rest under user scope; EXIF data is discarded before analysis.
Diagnosis Jobs & AI Outputs
Job identifiers, image paths, platform/version metadata, plant context, AI-generated summaries, locale preferences, tier, timestamps, and processing metrics.
Reminders & Notification Preferences
Schedules, snooze settings, quiet hours, device tokens, notification channels, opt-in status, and automation history.
Credits, Purchases & Subscriptions
Balances, transaction history, product identifiers, order IDs, hashed purchase tokens, pricing, tax jurisdiction, refunds, and chargeback indicators.
Support & Communications
Support emails, attachments, screenshots, and troubleshooting notes.
Usage Analytics & Diagnostics
App interactions, lifecycle events, experiment cohorts, crash reports, device/OS information, and anonymized performance metrics.
Device Permissions
Camera, photo library, and notifications when enabled by you.
How We Use Information
- Deliver and improve diagnosis, treatment plans, reminders, plant libraries, and sync services
- Submit photos to AI inference partners for symptom interpretation and localization
- Operate backend services for synchronized, available data and offline recovery
- Send reminders, nudges, newsletters, notices, and support responses
- Process credits and subscriptions, verify receipts, detect fraud, and ensure compliance
- Monitor usage trends, reliability, and security telemetry
Data Processing and Sharing
We do not sell personal information. We use vetted subprocessors bound by confidentiality and data-processing terms:
Infrastructure Providers
Hosting, authentication, databases, encrypted storage, serverless execution, messaging, and observability.
AI Inference Partners
Analyze plant imagery and return diagnoses via encrypted channels.
App Store & Payment Platforms
Verify purchases, subscriptions, and refunds.
Communications Providers
Email, push notifications, support, legal, and compliance services.
Data is disclosed only to comply with law, respond to emergencies, investigate abuse, or support corporate transactions. Plant photos are not reused for external model training without explicit permission.
Garden Centres and Business Partners
If you run a garden centre, nursery or plant shop, we may process information about your business to invite you to, and run, the AI Plant Doctor partner program. This section explains how.
What we hold
Your business name, the contact details it publishes (such as a generic business email address, phone number, website and social profiles), its address, a short note about your store, and, if you sign up for the partner pilot, what you submit: contact name, store details, number of stores, interests and an optional pricing preference.
Where it comes from
Business details come from your own website and public business listings. Pilot details come from the form you submit on our website.
Why, and on what basis
To contact you about the partner program, run the pilot and plan the store directory. We rely on our legitimate interest in reaching businesses that are relevant to our users, and every message includes a one-click way to stop further contact.
Who processes it
It is stored on Google Cloud (Firebase), and our emails are sent through Amazon Web Services (Amazon SES). We do not sell it or share it with other businesses.
How long we keep it
If you don't take part, we delete your business's record within 12 months of our last message. Pilot sign-ups are kept for the pilot and the directory launch. If you ask us to stop contacting you, we stop immediately and permanently keep only a one-way fingerprint (hash) of your email address, so that we never contact you again.
Your choices
Use the unsubscribe link in any of our emails, or write to support@theaiplantdoctor.com to see, correct or delete the information we hold about your business, or to object to this processing. The controller is Xavier Jodoin (AI Plant Doctor), 344 rue Armstrong, Rosemère, Québec, Canada.
Data Retention
- Account, credit, and billing records retained while active and up to seven years after
- Plant libraries, diagnoses, and reminders remain until user deletion; account deletion removes associated media
- Guest data and local notification settings remain on-device only
- Analytics, crash, and security logs rotate within thirteen months unless longer retention is legally required
Security
We apply encryption in transit and at rest, hardware-backed attestation for clients, scoped service accounts, least-privilege access reviews, tamper-evident logging, penetration testing, incident response playbooks, and continuous monitoring.
Your Choices and Rights
- View, edit, export, or delete plant entries, diagnoses, reminders, and credits in-app or via support
- Delete your account using Account Settings or email support@theaiplantdoctor.com
- Manage push/email preferences, revoke permissions, or opt out of analytics
- Request confirmation of processing, correction, portability, restriction, or appeal automated decisions
Children's Privacy
The service is not directed to children under 13. Parents should contact support if they believe data was collected from a child.
International Transfers
Data is stored primarily in the United States. International transfers use legally recognized safeguards (such as standard contractual clauses) and we conduct transfer impact assessments.
Changes to This Policy
Updates are posted when features, regulations, or enforcement expectations change. Continued use means acceptance of revised terms.
Contact
If you have questions about this privacy policy, please contact us at:
