Privacy Policy
MyPlants App Ltd ("MyPlants", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
MyPlants App Ltd is registered in England and Wales. Our contact email is hello@myplantsapp.com.
1. Who this policy applies to
This policy applies to all users of the MyPlants mobile application and website (myplantsapp.com). The app is intended for users aged 13 and over. If you are under 13, please do not use MyPlants.
2. What data we collect
Account information
When you sign in using Google OAuth, we receive your name, email address, and profile picture from Google. We use this to create and manage your account.
Plant and household data
We store the plant, room, and household data you create within the app — including plant nicknames, species information, care history, and room environment settings. This data is associated with your account.
Photos
Photos you upload of your plants are stored securely in our cloud storage. Photos are used to display your plant collection and, when you use the identification or diagnosis features, to process your request.
Device information
To deliver push notifications, we collect device token information. We do not use this for advertising or share it with third parties for marketing purposes.
Usage data
We may collect basic usage information such as which features you use and when the app was last opened. This is used to improve the app experience.
3. How we use your data
We use your data to:
- Provide and operate the MyPlants app and its features
- Send plant care reminders and notifications (if enabled)
- Process plant identification requests via PlantNet
- Process AI-assisted plant diagnosis requests
- Improve and develop the app
- Respond to support requests
We do not sell your personal data. We do not use your data for advertising.
4. Legal basis for processing
Under UK GDPR, we process your data on the following legal bases:
- Contract: Processing necessary to provide the service you have signed up for
- Legitimate interests: Improving the app and ensuring its security
- Consent: For optional features such as push notifications
5. Third party services
MyPlants uses the following third party services to operate:
- Supabase — database and file storage provider. Your data is stored on Supabase infrastructure. Supabase is GDPR compliant. Supabase Privacy Policy
- Google OAuth — used for sign-in. Google Privacy Policy
- PlantNet — used for plant identification. Photos submitted for identification are processed by PlantNet. PlantNet Privacy Policy
- Anthropic / Claude API — used for AI-assisted plant diagnosis. Diagnosis requests may be processed by Anthropic's API. Anthropic Privacy Policy
6. Data storage and security
Your data is stored securely using Supabase, which uses industry-standard encryption at rest and in transit. Access to your data is protected by Row Level Security policies, meaning only you and members of your household can access your plant data.
We retain your data for as long as your account is active. If you delete your account, your personal data and plant data will be deleted within 30 days, except where we are required to retain it by law.
7. Data sharing
We do not sell or share your personal data with third parties for marketing or advertising purposes. Data is shared only with the third party service providers listed in Section 5, and only to the extent necessary to operate the app.
If required by law or legal process, we may disclose your data to relevant authorities.
8. Household data sharing
MyPlants is designed around shared households. When you join or create a household, other members of that household can see the plants, rooms, and care history within that household. This is a core feature of the service. You control which household you belong to.
9. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, contact us at hello@myplantsapp.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
10. Cookies and tracking
The MyPlants website (myplantsapp.com) does not currently use tracking cookies or third party analytics. If this changes, this policy will be updated and a cookie notice will be displayed.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email. The date at the top of this page indicates when the policy was last updated.
12. Contact
If you have any questions about this Privacy Policy, please contact us at hello@myplantsapp.com.
MyPlants App Ltd, Cheltenham, England.