Plantorbia

Privacy Policy

Last updated: June 10, 2026

Your privacy matters to us. This policy explains what data we collect, why we collect it, and how you can control it.

1. Who We Are

Plantorbia ("we", "us", "our") operates the plant care platform available at www.plantorbia.com and via our mobile application. We act as the data controller for the personal information described in this Privacy Policy.

For any privacy-related enquiries, please contact us at privacy@plantorbia.com.

2. Information We Collect

2.1 Information You Provide

  • Account information: email address, full name, and password (stored as a secure hash)
  • Profile information: city, country, preferred language, gardening experience level
  • Plant data: plant names, photos, care notes, watering records, and timeline events you create
  • Chat messages: messages you send to the care assistant, including any photos attached
  • Wishlist items: plants you save to your wishlist

2.2 Information Collected Automatically

  • Usage data: features used, pages visited, actions taken, and timestamps
  • Device information: device type, operating system, app version, and browser type
  • Log data: IP address, request times, and error logs (retained for security and debugging)
  • Push notification token: if you grant notification permissions on mobile, we store your device token to send reminders

2.3 Information from Third Parties

  • Authentication providers: if you sign in via a third-party provider, we receive basic profile information (name, email) from that provider
  • Plant identification services: when you use plant identification, your photo is sent to a third-party identification service and we receive the identification result

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and authenticate you
  • Provide, operate, and improve the Service
  • Generate personalised plant care guidance based on your plant data, location, and care history
  • Send care reminders and other notifications you have requested
  • Process subscription payments and manage billing
  • Respond to your support requests
  • Monitor and enforce compliance with our Terms of Service
  • Analyse usage patterns to improve features (using aggregated, anonymised data)
  • Comply with legal obligations

4. AI Processing and Memory

Plantorbia uses AI to power its chat assistant, plant health checks, and other features. When you interact with these features:

  • Your messages and attached photos are transmitted to our processing provider for analysis
  • On Pro and Expert plans, your care history and past assessments are used to provide personalised, context-aware responses
  • On the Free and Basic plans, each conversation starts without injected history

We do not use your personal conversations to train models without your explicit consent.

5. Data Sharing and Third Parties

We do not sell your personal data. We share data only in the following circumstances:

  • Service providers: we use third-party providers for database and file storage, language and image processing, and payment processing. These providers process data on our behalf under strict data processing agreements.
  • Plant identification: photos submitted for identification are sent to a third-party plant identification service. No account information is shared with this service.
  • Legal compliance: we may disclose data if required by law, court order, or to protect the safety and security of our users or the public.
  • Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

6. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as billing records, which are retained for 7 years in many jurisdictions).

Conversation logs are retained for 90 days to power the conversation history feature, after which they are automatically purged unless you retain them as plant events.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you
  • Correction: request correction of inaccurate or incomplete data
  • Deletion: request deletion of your personal data ("right to be forgotten")
  • Portability: receive your data in a structured, machine-readable format
  • Restriction: request that we restrict processing of your data in certain circumstances
  • Objection: object to processing based on legitimate interests
  • Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at privacy@plantorbia.com. We will respond within 30 days. You also have the right to lodge a complaint with a data protection authority in your jurisdiction.

8. Cookies and Tracking

Our web application uses essential cookies and browser storage to maintain your session and authentication state. We do not use advertising or cross-site tracking cookies. We may use analytics tools that collect anonymised usage data to help us improve the Service.

You can control cookie settings through your browser. Disabling essential cookies may prevent you from using parts of the Service.

9. Data Security

We take the security of your data seriously and implement appropriate technical and organisational measures, including:

  • All data transmitted between your device and our servers is encrypted using TLS
  • Passwords are hashed using industry-standard algorithms and never stored in plain text
  • File storage (plant photos) is protected by row-level security policies scoped to your user ID
  • Access to production systems is restricted to authorised personnel only

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and are not liable for unauthorised access resulting from circumstances outside our reasonable control.

10. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected such data, we will delete it promptly. If you believe we have collected data from a child, please contact us at privacy@plantorbia.com.

11. International Data Transfers

Your data may be processed and stored in countries outside your country of residence, including the United States, where our infrastructure providers operate. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with applicable data protection laws, such as standard contractual clauses.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by updating the "Last updated" date on this page and, for significant changes, by sending an email to registered users. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

13. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact us:

This Privacy Policy was last updated on June 10, 2026. Previous versions are available upon request.