Privacy Policy
Last updated: September 29, 2025
This Privacy Policy explains how PlantFocus ("PlantFocus", "we", "us") collects, uses, stores, and safeguards information when you use the PlantFocus mobile or web application (collectively, the "App"). PlantFocus helps you identify plants, review AI-generated care guidance, and save your plant history while respecting your privacy.
Scope
This policy applies to the PlantFocus mobile applications, web experiences, and related services that link to this policy. It covers information processed directly by the App as well as data handled on our behalf by trusted service providers.
Information we collect
We collect the following categories of information when you interact with the App:
| Category | Details | Storage |
|---|---|---|
| Plant photos (user content) | Photos you capture with the camera or select from your gallery to run an analysis. | Temporarily uploaded to Supabase Storage and deleted automatically about 1.5 seconds after the analysis completes or immediately if analysis fails. |
| Analysis results (user content) | AI-generated JSON responses that include plant identification, care, safety, and health recommendations. | Stored in Supabase tables for history and saved plants, and cached locally in the device AsyncStorage. |
| Device identifiers | Google Analytics 4 (GA4) client ID derived from the device (such as Android ID, iOS vendor ID, or a random UUID fallback). | Saved in AsyncStorage on the device and transmitted to our GA4 proxy that runs on Supabase. |
| Usage analytics | Screen views, session lifecycle events, analysis performance metrics, and error counts collected to understand App performance. | Forwarded to GA4 through a Supabase Edge Function. |
| Locale and country | Approximate location inferred from the device language and region settings. | Held in memory and attached to analytics events. |
| Network status logs | Offline and online status messages captured for debugging during development builds. | Not persisted; available in console logs only. |
PlantFocus does not currently create user accounts. App state is associated with generated identifiers stored in Supabase and on your device.
How we use information
- Provide plant identification, care guidance, and AI analysis features.
- Maintain your analysis history and saved plants so you can revisit prior results.
- Monitor App performance, detect issues, and plan improvements through aggregated analytics.
- Comply with legal obligations and enforce our terms where necessary.
Where processing happens and third parties
- Supabase: Hosts temporary photo uploads, database tables for history and saved items, and Edge Functions (including
openai-keyandga4-collect) that proxy secrets and analytics events. - OpenAI: Receives plant photo URLs and prompts so the AI model can generate identification and care results. Calls are made over HTTPS from the device.
- Google Analytics 4: Receives usage analytics events via the Supabase
ga4-collectEdge Function. Credentials are stored server-side; the App only submits event payloads.
We do not sell your personal information and we do not use third-party advertising or cross-app tracking services.
Permissions
- Camera: Required to capture new plant photos for analysis.
- Photo library: Allows you to upload existing photos for analysis.
- Record audio (Android): Enables camera components that depend on microphone access for certain capture modes.
- Internet, network state, and wake lock (Android): Maintain secure connectivity to Supabase, OpenAI, and analytics services while preventing the device from sleeping mid-analysis.
Data retention and deletion
- Temporary photo uploads are erased automatically after analysis completes or fails.
- Analysis history and saved plants remain in Supabase and on your device until you delete individual entries or clear them through the App.
- Analytics data is retained by Google Analytics according to their default retention schedule (currently up to 14 months, subject to change by Google).
Your choices and controls
- Delete individual analyses or clear saved plants directly within the App.
- Clear the App's local storage from your device settings to remove cached data.
- Revoke camera, photo library, microphone, or network permissions at any time via device settings; features that rely on those permissions may no longer function.
- Contact us if you need help removing Supabase-stored data associated with your generated identifiers or have questions about analytics usage.
The App does not yet offer an in-app analytics opt-out toggle. We are evaluating additional controls and will update this policy when new options become available.
Security
- Supabase URLs and keys are provided through environment variables and are not bundled directly in the App binary.
- Google Analytics credentials are stored server-side and accessed only through secure Supabase Edge Functions.
- All communication with Supabase, OpenAI, and Google uses HTTPS.
- We monitor for dependency updates and recommend keeping your device software up to date to benefit from the latest security patches.
Children's privacy
The App is not designed for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can delete it.
International use
Your information may be processed in countries where Supabase, OpenAI, or Google operate (such as the European Union or United States). These locations may have data protection laws that differ from your jurisdiction. We rely on contractual safeguards with our processors to protect your data.
Contact for privacy inquiries
- Email: [email protected]
- Phone: +372 5886 6628
- Mailing Address: Suur-Sõjamäe tn 25a, Lasnamäe linnaosa, Tallinn
© MAXBASE10 OÜ
Changes to this policy
We may update this Privacy Policy as we release new features or work with additional partners. When we make changes, we will update the "Last updated" date above and, when appropriate, provide in-app or website notice.