Privacy policy

Last updated: 21 October 2026

This notice explains how Plant Care handles personal data in its mobile app and on this website. The controller responsible for this processing is Marat Khaliullin. Contact us at support@balconyplant.app about this notice or your data.

1. Data we process and why

• Account and access: an anonymous account identifier, session information and, if you register, your email and authentication information. Apple or Google sign-in supplies the identifiers and account information needed to authenticate you. We use this data to provide access and keep accounts secure.
• Your plants: plant names, care information, photos you submit, observations, care history and reminders. We use these to save your collection and provide the features you request.
• Photo analysis: photos and relevant information you submit for identification or a checkup may be sent to an external AI provider to produce the requested guidance. Avoid uploading faces, documents or other unnecessary personal details.
• Growing conditions: location information you choose to supply, including device coordinates if you grant permission, helps determine local climate and care guidance. You can control device permissions in your operating system.
• Technical information: request and error information, app/OS versions, operational identifiers, usage counters and security events help us maintain the service, apply plan limits and investigate failures.
• Support: information you include when contacting us is used to respond to your request.

We process information needed to deliver requested app features to perform our agreement with you. We rely on legitimate interests for proportionate security, abuse prevention and service reliability, and on legal obligations where applicable. Separately enabled optional analytics and contributions for model improvement require the applicable consent or other lawful basis; they are not a condition of purchasing Premium.

2. Purchases, subscriptions and Adapty

Apple App Store or Google Play processes in-app payments. Plant Care does not receive your full payment-card details. We use Adapty to manage subscription offers, verify purchases, restore access and keep subscription status in sync.

This involves app/profile identifiers, a pseudonymous account identifier, product and transaction information, subscription status and paywall interactions, together with technical device/app information. The SDK can initialize and create a profile before you buy a subscription. Turning off purchase availability does not by itself prevent SDK initialization.

Adapty's SDK settings can permit collection of IP addresses and available platform identifiers, including advertising identifiers where platform permissions and settings allow them. Our app code does not send your email, name, plant photos or growing location to Adapty. A pseudonymous identifier can still be personal data.

See Adapty's End-Users Privacy Policy, Apple's Privacy Policy and Google's Privacy Policy. Store subscription processing and restoration are used to fulfil your purchase; associated security checks protect against misuse.

3. Who helps us provide the service

Hosting and storage providers process app records and uploaded media. Resend delivers account verification and password-recovery emails. Depending on the deployed analysis configuration, OpenAI or Google Gemini processes submitted photos and relevant context for the AI features you request. Adapty processes subscription information as described above.

If enabled for a release, Sentry supports error investigation, PostHog receives selected product events, and Langfuse receives selected operational AI metrics. Their presence in the code does not mean all exports are enabled. Operational exports are designed to exclude raw photos, prompts, generated answers, authentication tokens and account email. We do not embed these app SDKs or advertising scripts in this static website.

Some providers process data outside your country or the European Economic Area. Where required, transfers must be supported by an applicable adequacy decision or contractual safeguards. Contact us for information about the providers and safeguards applicable to your data.

4. Optional photo contributions

Uploading a photo for a checkup is separate from contributing it for model improvement. The contribution control is off by default and applies to eligible photos submitted after consent. You can withdraw consent or exclude an individual photo without losing core app access or changing your plan.

The contribution pipeline uses separately sanitized copies and restricted review. Withdrawal excludes photos from future datasets and removes the separate contribution copy; it does not mean that information can be removed from already-trained model weights. Production model training and external training transfers remain disabled pending their release review.

5. Retention and account deletion

We keep account and plant information while needed to provide your saved collection and requested features. You can delete your account from the app. Account deletion removes active account access and initiates cleanup of related app records and media. Deleting the app alone does not request server-side account deletion.

Operational records use a default retention period of 30 days. Unattached uploads normally have a 24-hour grace period before cleanup, and separate eligible training-photo copies expire after 365 days unless excluded or withdrawn earlier. These are cleanup policies rather than guarantees that all copies disappear at the exact same instant.

Recovery backup copies can retain earlier records after active-account deletion. Backup expiry and restoration controls are separate from live-data cleanup; we do not promise an immediate erase from every backup. We may retain limited records when required for legal obligations, security or disputes.

Deleting your account or logging out of Adapty does not automatically establish deletion of all records held by Adapty, Apple or Google. Contact us about processor deletion requests and applicable financial-record retention. Manage or cancel a subscription through your store: deleting the app or account does not itself cancel store billing.

6. Your choices and rights

Depending on applicable law, you can request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent without affecting processing already carried out lawfully. Contact support@balconyplant.app. We may need proportionate information to verify the request.

You can also complain to your local data-protection authority. Optional permissions and contribution settings can be changed without consenting to unrelated uses of your data.

7. This website

This static website does not set analytics or advertising cookies and does not include tracking scripts or third-party fonts. The hosting service and reverse proxy necessarily process connection information such as IP addresses and requested paths to deliver pages and protect the service. Following an external link subjects your visit to that site's own policy.

8. Children and policy changes

Plant Care is not directed at children. If you believe a child supplied personal data without the required authorization, contact us so we can investigate. We update this notice when practices change and show the revision date above; material changes will be communicated where required.