Last updated: 19 September 2026
Plant Dr AI diagnoses plants from photographs and tracks whether they recover over time. This policy explains exactly what the app collects, where it goes, and what you can do about it. It describes the app's real behaviour rather than covering every hypothetical.
| Data | Why | Where it is stored |
|---|---|---|
| Plant photographs | To produce a diagnosis, and to show you the photo alongside past checkups | Our server (US), and sent to Google for analysis |
| Diagnosis history — species, health score, issues found, care plans, any note you add | To track a plant's recovery across visits | Our server (US) |
| Follow-up questions — the questions you type about a diagnosis, and the answers given | To answer questions about your plant, and to keep the thread in context | Our server (US), and sent to Google for analysis |
| Account details — email address, display name if you give one | To keep your plants attached to you across devices | Our server (US) |
| A device identifier we generate | So the app works before you create an account | On your device and our server |
| Usage counts — when a diagnosis ran, how much processing it used | To enforce the daily checkup limit and control cost | Our server (US) |
| Advertising identifiers | Only if you allow tracking, to make ads more relevant | Google AdMob |
Passwords are never stored. When you set one it is put through a one-way hash (bcrypt), which cannot be reversed back into your password.
When you photograph a plant, the image is sent to our server and then to Google's Gemini API, which produces the diagnosis. We keep the photo so the checkup history is useful later. We do not use your photographs to train any model of our own, and we never publish them or show them to other users.
Your photographs are not used to train AI models. The app uses Google's paid Gemini API tier, under which Google does not use submitted content to improve its products. Google processes each photograph to return a diagnosis and does not retain it for training. Google's handling of API data is described in the Gemini API Additional Terms of Service.
You can ask follow-up questions about a diagnosis. The question you type is sent to our server and then to Google's Gemini API, along with that diagnosis and the recent questions in the same thread, so the answer makes sense in context. Both the question and the answer are stored against that checkup so the thread is still there next time.
The feature only answers questions about the plant in front of it; anything unrelated is declined and is not stored. Please do not type personal details into it — it is a place for questions about a plant, and nothing you write there is needed to run the app. You can delete a question from the thread at any time, and deleting the checkup or your account removes the questions with it.
You can use Plant Dr AI without signing up. On first launch the app creates a random identifier for your device and an account tied only to that identifier — no email, no name, nothing that identifies you personally.
If you sign in later, that account is upgraded in place so your existing plants carry over. If you delete and reinstall the app, the identifier is lost and the previous history is no longer reachable.
You can create an account with an email and password, or use Sign in with Apple or Sign in with Google. With those, we receive only your identifier, email address, and name where provided. We never receive your password for those accounts. If you use Apple's Hide My Email, we only ever see the relay address.
When you reach your daily checkup limit, the app offers an optional video advert in exchange for one extra checkup. Adverts are served by Google AdMob. Watching one is entirely optional and nothing else in the app is gated behind adverts.
On iOS, we ask permission before allowing tracking across other companies' apps and websites. Declining changes nothing about how the app works — you simply get less relevant adverts. Google's handling of advertising data is covered by the Google Privacy Policy.
| Service | What it receives |
|---|---|
| Google Gemini API | Your plant photographs and any note you add, to produce the diagnosis |
| Google AdMob | Advertising identifiers and ad interactions |
| Railway (hosting) | Hosts our servers and database in the United States |
| Apple / Google | Only if you choose to sign in with them |
We do not sell your data, and we do not share it for advertising beyond the above. There is no analytics or tracking software in the app beyond what AdMob requires.
Plants and diagnoses are kept until you delete them, so recovery tracking works over months. You can delete an individual checkup or an entire plant, including its photos, from inside the app at any time. Deleting a plant deletes its photographs from our server.
Records of how many diagnoses were run are kept separately, without photographs, so the daily limits cannot be bypassed by deleting history. Those records are also removed when you delete your account.
Depending on where you live you may have additional rights over your personal data, including access, correction, deletion, and objecting to processing. Contact us and we will honour them.
Plant Dr AI is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.
Traffic between the app and our servers is encrypted in transit (HTTPS). Passwords are hashed and never stored in readable form. No system is perfectly secure, and we cannot guarantee absolute security.
Diagnoses are generated by an AI model and can be wrong. Do not rely on them for decisions about edible crops, or where a mistake would be costly. Check with a qualified horticulturist or agronomist before treating plants you intend to eat.
If this policy changes materially we will update the date at the top and, where the change is significant, tell you in the app.
Questions, deletion requests, or data requests: sudhir.ks@gmail.com