Privacy Policy

Last updated: 1 June 2026  ·  ICO registration: ZC156313

PlantMedic ("we", "us", "our") is an AI-powered plant diagnosis app and website operated by Simon Lane, ICO registration number ZC156313. This policy explains what personal data we collect, why we collect it, and your rights under UK GDPR.

If you have any questions, contact us at Ignistech999@gmail.com.

1. Data we collect

Account data

If you create a PlantMedic account, we collect your email address and a hashed password (stored securely by Firebase Authentication — we never see your password in plain text). You can use the app's free diagnosis and identification features without creating an account.

Plant photos

When you submit a photo for diagnosis, it is transmitted over an encrypted connection to Anthropic's API for AI analysis, then immediately deleted from our servers. We do not store your plant photos. Anthropic processes images in accordance with their own privacy policy.

IP addresses

We temporarily store your IP address in memory to enforce a rate limit of 3 free web diagnoses per hour. This data is held in server memory only and is automatically cleared — it is never written to a database or log file.

Usage and analytics data

The PlantMedic app uses Firebase Analytics (Google LLC) to collect anonymised data about how the app is used — such as which features are opened, session duration, and device type. This data cannot be used to identify you personally. You can opt out of analytics collection in your device settings (Android: Settings → Google → Ads → Opt out of personalisation).

2. How we use your data

3. Third parties

We share data with the following third-party processors:

• Anthropic, PBC (USA) — receives plant photos for AI analysis. Anthropic is subject to EU–US Data Privacy Framework and standard contractual clauses.
• Google LLC / Firebase (USA) — provides authentication, database, and analytics services. Google is certified under the EU–US Data Privacy Framework.
• Google Play Store — distributes the Android app. Google may collect device and purchase data as described in Google's privacy policy.

We do not sell your data to any third party.

4. Data retention

• Account data — retained until you delete your account.
• Plant photos — not retained; deleted immediately after AI processing.
• IP rate-limit data — held in server memory for up to 1 hour.
• Analytics data — retained for 14 months (Firebase default), then automatically deleted.

5. Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data. You can delete your account directly at plantmedic.ai/delete-account.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, email Ignistech999@gmail.com. We will respond within 30 days.

6. Cookies

The PlantMedic website uses no advertising or tracking cookies. Firebase Authentication uses a session cookie to keep you signed in. This cookie is strictly necessary for the service to function and does not require consent under PECR.

7. Children

PlantMedic is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Changes to this policy

We may update this policy from time to time. Material changes will be notified by updating the "Last updated" date above and, where appropriate, by email to registered users.

9. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Our ICO registration number: ZC156313