Privacy Policy
Trial and Error, Inc. ("Dr. PlantCare," "we," "us") built Dr. PlantCare (the "App") to help you care for your plants. This policy explains what data we collect, why we collect it, and what choices you have. We designed the App to collect as little as possible.
1. Who we are
The data controller is Trial and Error, Inc., Boston, MA, United States. You can reach us at support@drplantcare.com.
2. Data we collect
Account information
- Name and email — when you sign in with Apple or Google, we receive the name and email you authorize. Apple's "Hide My Email" is fully supported.
- Authentication identifier — a stable anonymous ID from Firebase Authentication so we can recognize you on your next launch.
Plant and care data
- Photos you submit for identification or disease diagnosis. These are sent to Google's Gemini AI for analysis and stored in our Cloudflare R2 object storage so you can revisit them in your plant history.
- Plant records you create — names, nicknames, locations in your home, notes, watering history, and care tasks you complete.
- Diagnosis history — the symptoms you reported and the responses Dr. PlantCare generated.
Device and app data
- Push notification token — if you allow notifications, so we can send you watering reminders.
- Timezone and locale — so reminders fire at the right local time and content is shown in the right language.
- Device model and OS version — for debugging and compatibility.
- Crash and performance logs — anonymous diagnostics when something goes wrong.
- Usage analytics — which screens you visit and which features you use, in aggregate, to improve the App. We do not build advertising profiles.
Purchase data
- Subscription receipts — when you buy Dr. PlantCare Premium, Apple sends us a receipt (via RevenueCat) so we can unlock the features you paid for. We do not receive your credit card number or billing address. Apple handles payment.
Camera and photo library
We request camera and photo library access only to let you take or pick a plant photo. Images are only uploaded when you explicitly submit one for identification or diagnosis.
3. Why we use your data
- To run the App's core features — identification, diagnosis, care schedules, reminders.
- To provide customer support when you contact us.
- To process subscriptions and verify entitlements.
- To detect abuse, prevent fraud, and keep the service secure.
- To understand, in aggregate, what people use so we can make the App better.
- To comply with legal obligations.
4. Who we share data with
We share data only with service providers who help us run the App. They are bound by contracts that restrict their use of your data to providing their services to us.
- Google Firebase (Google LLC) — authentication, anonymous analytics, and crash reporting (Crashlytics).
- PostHog, Inc. — product analytics. We send pseudonymous usage events (screens visited, features used) keyed to your Firebase user id so we can understand how people use the App in aggregate.
- Google Gemini (Google LLC) — AI model that analyzes plant photos and symptoms. Images you submit are processed by Gemini. Per Google's terms for paid API usage, your inputs and outputs are not used to train their models.
- RevenueCat, Inc. — subscription receipt validation and entitlement management.
- Apple, Inc. — payment processing and in-app purchase infrastructure. Apple's privacy policy governs their handling of your payment information.
- Cloudflare, Inc. — hosting, D1 database, R2 image storage, and request routing.
- Expo / EAS (650 Industries, Inc.) — push notification delivery infrastructure.
We do not sell your personal information. We do not share it with advertising networks or data brokers.
5. Where your data is stored
Your data is processed on Cloudflare's global network and Google Cloud, which may include servers in the United States and other countries. When we move personal data out of the EEA or UK, we rely on standard contractual clauses or equivalent safeguards.
6. How long we keep it
- Account data — while your account is active.
- Plant records and diagnosis history — until you delete them or delete your account.
- Uploaded images — stored in R2 for the lifetime of your account or until you delete the associated plant or diagnosis.
- Crash and analytics logs — typically 90 days, in aggregated form longer.
- Purchase records — as long as required by tax and accounting rules.
7. Your rights
Wherever you live, you can:
- Access — ask us for a copy of the data we hold about you.
- Correct — update any information that is wrong.
- Delete — use "Delete Account" inside the app (Profile → Delete Account), or email us. We delete your account record, plant data, diagnosis history, and uploaded images.
- Export — request your data in a portable format.
- Object or restrict — tell us to stop certain processing.
- Withdraw consent — for anything you previously consented to.
California residents
Under the CCPA / CPRA, you have the right to know, delete, correct, and opt out of the sale or sharing of your personal information. We do not sell or share personal information. You will not be discriminated against for exercising these rights.
EEA, UK and Swiss residents
Our lawful bases for processing are: (a) performance of a contract (running the App), (b) legitimate interests (improving the App, fraud prevention), (c) consent (notifications, optional analytics), and (d) legal obligation. You can lodge a complaint with your local supervisory authority.
Quebec residents
Under Law 25, you may request access, correction, and deletion. Our privacy officer can be reached at support@drplantcare.com.
8. Children
Dr. PlantCare is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
9. Security
We use TLS in transit, encrypted storage at rest, and scoped access controls. No system is perfectly secure, but we work hard to keep your data safe and will notify you if a breach affects you.
10. Changes to this policy
If we make material changes we will update this page and, where appropriate, notify you in the App. The "Last updated" date at the top will change.
11. Contact us
Questions, requests, or complaints: support@drplantcare.com
Trial and Error, Inc., Boston, MA, United States.