PlantCast

Privacy Policy

Last Updated: May 2026

1. Introduction

Welcome to PlantCast ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our plant care management application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using PlantCast, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Name (if provided)
  • Authentication credentials (stored securely and encrypted)
  • Profile information you choose to provide

2.2 Plant and Garden Data

To provide our core service, we collect and store:

  • Plant information (species, names, photos, notes)
  • Garden areas and locations
  • Care schedules and PlantCasts
  • Care history and records

Notes you create in PlantCast may include free-form text. If your plan includes cloud sync, notes are stored on our servers; otherwise they may be kept on your device only. Optional images attached to notes (where available) are stored securely for subscribers. When you save content from the AI assistant as a note, we store the text you choose to keep, which may include your question and the assistant reply. For subscribers using cloud storage, we also collect and store storage usage data including bytes consumed, total storage cap, and number of storage add-on packs applied, so we can enforce your per-account limit server-side.

2.3 OAuth Provider Information

If you choose to sign in using OAuth providers (Google, Apple, Facebook, LinkedIn), we receive:

  • Basic profile information (name, email)
  • Profile picture (if available)
  • OAuth provider account identifier

We do not access or store your OAuth provider password or access tokens beyond what is necessary for authentication.

2.4 Usage Data

We may collect information about how you interact with our service, including:

  • Features you use
  • Actions you take within the application
  • Device information (type, operating system)

2.5 Plant identification imagery

When you use plant identification (camera, gallery upload, or continuous recognition), the following applies in addition to the general data practices above:

  • Images you capture or upload are sent to our identification providers solely to return species suggestions and related care hints; we do not sell them or use them for advertising.
  • Camera previews run on your device; still frames leave the device only when you confirm capture or upload—never silently in the background.
  • You may delete plants and attached photos from your collection at any time; residual backups expire on our standard retention schedule described in account deletion help.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our plant care management services
  • Process your transactions and manage your account
  • Send you service-related communications (notifications, updates)
  • Respond to your inquiries and provide customer support
  • Ensure the security and integrity of our service
  • Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We use trusted third-party service providers to help us operate our service:

  • Supabase: Database and authentication services
  • PlantNet API: Plant identification services
  • Trefle API: Plant database and information services
  • OAuth Providers: Authentication services (Google, Apple, Facebook, LinkedIn)
  • Google (Gemini): Generative AI processing for assistant chat and related AI-powered features when you opt in; may receive text and media you submit for those features
  • RevenueCat, Inc.: In-app purchase management, subscription entitlement, and billing event processing for iOS, Android, and web purchases; receives app user IDs, purchase tokens, subscription and entitlement state, and purchase events from Apple App Store and Google Play

When you use AI-assisted features (such as the in-app assistant or cloud-based plant identification), the content you submit—for example text you type, photos, or short videos—may be transmitted to Google LLC for processing with Google Gemini. That processing is used to generate responses or identification results for you. Google processes such data under its own terms and privacy policy in addition to our agreements with service providers. We ask for your in-app consent before sending personal data to Google for these AI features.

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Community Features

If you opt in to contribute your plant data to our community features, certain anonymized or aggregated information may be shared with other users. You can control this through your account settings.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as court orders or subpoenas.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Secure authentication and authorization systems
  • Regular security assessments and updates
  • Access controls and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention and Deletion

We retain your personal information only as long as needed to provide our services and fulfill the purposes in this policy. You can permanently delete your account and data tied to your sign-in at any time from the Profile screen: open your profile, scroll to Account deletion, type DELETE to confirm, and complete the flow. You may also contact us if you need help.

Upon receiving a deletion request, we will:

  • Delete your account and personal information from our active systems
  • Remove your data from our backups within a reasonable timeframe
  • Retain only information necessary to comply with legal obligations or resolve disputes

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You can access, update, or export your personal information through your account settings or by contacting us.

7.2 Deletion

You can request deletion of your account and personal data at any time.

7.3 Opt-Out

You can opt out of certain communications and community features through your account settings.

7.4 California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information is collected, used, shared, or sold
  • Delete your personal information
  • Opt-out of the sale of personal information (we do not sell your information)
  • Non-discrimination for exercising your privacy rights

7.5 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Restrict processing of your data
  • Data portability
  • Object to processing
  • Lodge a complaint with a supervisory authority

8. Children's Privacy

Our service is not directed to children under any specific age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

9. Cookies and Tracking Technologies

We do not use cookies or tracking technologies for advertising or analytics purposes. We may use essential session cookies solely for authentication and service functionality.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We take appropriate safeguards to ensure your information is protected in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@plantcast.com
Website: https://plantcast.com