Privacy Policy

• Only when you ask. A photo leaves your phone only when you tap to identify a plant or to run a health check (diagnosis). The app never uploads photos in the background.
• Shrunk and cleaned first. Before sending, the app resizes the photo to about 1024 pixels and saves it as a new JPEG. This also removes the photo's metadata (EXIF), including any GPS location.
• Our server. The photo is sent over an encrypted connection to our server at plantpeek.snailpixel.com. Our server holds it in memory only for as long as it takes to get an answer. It is never written to disk, never logged and never kept by us, and we do not use it for anything else - not for ads and not for training.
• Plant identification: Pl@ntNet. To identify a plant, our server forwards the photo and the plant part you chose (such as leaf or flower) to the Pl@ntNet identification service. Pl@ntNet's API terms say photos sent this way are not stored and are only kept in memory during the identification. See the Pl@ntNet API terms and the Pl@ntNet privacy policy.
• Health check: Kindwise. For a health check (PlantPeek Plus), our server forwards the photo to the plant.health service of Kindwise (FlowerChecker s.r.o., Brno, Czech Republic), which processes it on our behalf. Under its terms, Kindwise may store photos sent for a health check and use them to improve its identification service, and it anonymises them (for example by blurring faces) after six months. Please avoid including people in health-check photos. See the Kindwise API terms and Kindwise privacy policy.
• Nothing that identifies you. The identification services receive only the photo (and, for Pl@ntNet, the plant part). They do not receive your install ID, your location or your IP address, because the request comes from our server, not your phone.

Your saved plants and their photos, care schedules, reminders, journal entries and notes, and your settings are stored in the app's private storage on your device. They are never sent to us. You can delete any plant in the app, or everything by clearing the app's data or uninstalling it.

On first launch the app creates a random ID. It is not your advertising ID and is not linked to your name, email, Google account or any other identity. It is sent with identification and health-check requests so our server can count your daily allowance (free: 3 identifications a day; Plus: 30 identifications and 5 health checks a day). The server keeps these daily counters for 3 days and then deletes them automatically. Reinstalling the app or clearing its data creates a new ID.

PlantPeek Plus is sold through Google Play Billing. Google processes the payment and we never see your card details. To unlock Plus, the app sends the Google Play purchase token to our server, which checks it with Google's Play Developer API. Our server keeps a one-way hash (SHA-256) of the token and the subscription's expiry date, linked to your install ID, for as long as it is needed to provide Plus. You can ask us to delete this record at any time (see Contact). You can manage or cancel Plus in Google Play > Payments & subscriptions.

The free version shows a banner ad, an occasional full-screen ad after you close an identification result, and an optional rewarded ad you can choose to watch for one extra identification that day. PlantPeek Plus has no ads. Ads are served by the Google Mobile Ads SDK (AdMob). Google may collect your device's advertising ID, approximate location derived from your IP address, ad interaction data and diagnostics to serve and measure ads. See Google's privacy policy and How Google uses information from sites or apps that use our services.

For the rewarded ad, the app passes your install ID to Google so that Google can confirm to our server that the ad was watched. Our server keeps Google's transaction ID for 3 days so the same reward cannot be counted twice. Your photos and plant data are never used for advertising.

In the European Economic Area, the UK and other regions where it is required, you are asked for consent before personalised ads are shown, and you can change your choice at any time in the app under Settings > Ad privacy choices. You can also reset or delete your advertising ID in Android Settings > Google > Ads.

Our server runs on our own hosting behind Cloudflare. Like any web server, it and Cloudflare process the IP address of each request to deliver it. Standard web server access logs (IP address, time and requested address, never the photo or the request body) may be kept for security and troubleshooting. Our own server code logs only counts and error messages.

PlantPeek lets Android's own backup and device-to-device transfer copy your saved plants, plant photos and settings to your Google account backup, if you have Android backup switched on, so your plants survive a phone change. That backup is controlled by you and by Google, not by us. Your install ID and Plus status are not included.

• Camera. Used only when you open the camera to photograph a plant.
• Photos. Choosing a photo from your gallery uses the Android photo picker, so the app only receives the photo you pick. It asks for no storage permission.
• Notifications. Optional, for watering and feeding reminders.
• Internet. For identification, health checks, ads and purchases. Your plants, care plans and the plant library work offline.

PlantPeek has no accounts or sign-up, no analytics SDK and no crash-reporting SDK. We do not sell your data.

PlantPeek is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has used the app, contact us and we will help.

Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict its processing, and to withdraw consent. Most of your data never leaves your device, and what reaches our server is minimal and short-lived (see above). For any request, such as deleting your Plus record, contact us below. If you are in the EEA or UK you can also complain to your data protection authority (in Lithuania, the State Data Protection Inspectorate, vdai.lrv.lt).

Kindwise is a company based in the Czech Republic (EU) and processes health-check photos under the EU data protection rules for processors (GDPR Article 28). Google, Cloudflare and the services they use may process data in other countries, including the United States, under their own safeguards such as the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework.

Questions about this policy: [email protected]

We will update this page when the app's data practices change and adjust the date above.