Privacy Policy — PlantIdentify

Last updated: 2026-08-27 — plant.hurated.com/privacy

PlantIdentify ("we") respects your privacy. This policy describes what data the PlantIdentify iOS app and the API at plant.hurated.com collect and how it is used.

1. Data we collect

• Photos you upload for identification/diagnosis — stored on our server (`prod/plant` on `oracle.getoutfit.net`) to run Plant.id / Gemini inference and to show history in the app. Thumbnails are generated.
• Plant & care data — species, pot size, watering/fertilizing logs, reminders, leaf checks, growth entries, health scores.
• Location (optional) — city/country or lat/lon you choose or grant via iOS location permission / IP geocoding — used for weather (`intervalFactor`) and local hardiness. Stored as `City{name,country,lat,lon}`.
• Chat messages — assistant prompts + replies (Gemini 3.7-flash via Vertex AI, `plant-506619`).
• Technical — anonymous user ID (JWT `sub`), device language, app version, health-check logs. No advertising ID.

2. How we use data

• To identify/diagnose plants, generate care schedules (`CareScheduleGenerator`), and adjust watering by weather/season.
• To sync your garden across devices (`GET /v1/user/data`).
• To improve models — aggregated, never sold.

3. Third parties

• Perenual (`perenual.com`) — species data (cached, free 100/day). No photo forwarded.
• Plant.id (Kindwise) — optional second identification provider.
• Google Vertex AI (`aiplatform.googleapis.com`, project `plant-506619`, global) — photos/text sent to Gemini `3.7-flash` / `3.1-flash-lite-image`.
• Open-Meteo — weather by lat/lon, not linked to you.
• No Supabase Cloud — data stays in Postgres 16 on `oracle.getoutfit.net` (host, `plant_postgres`). Only the domains above receive data.

4. Storage & retention

Photos and logs in EU (`oracle.getoutfit.net`, Germany). Retention until you delete the plant/chat in the app or request deletion at privacy@hurated.com. Backups kept 30 days.

5. Your rights

You may export (`GET /v1/user/data`) or delete all data (`DELETE /v1/me`) in the app settings, or email privacy@hurated.com. EU GDPR applies.

6. Children

Not directed to children under 13.

7. Contact

Human Rated AI, privacy@hurated.com — `plant.hurated.com` (port 34000 → nginx).

← Back to PlantIdentify