Last updated: 31 October 2026
PlantLore is a plant identification and plant care app for iPhone, made by WiseRock (“we”, “us”), a business registered with the Dutch Chamber of Commerce (KVK 93580126, Hendrik-Ido-Ambacht). This policy explains what data the app handles, why, who else sees it, how long we keep it and what you can do about it.
The short version: we keep only what the app needs to work, we never sell your data, we show no ads, we run no tracking or analytics, and you can delete everything yourself from inside the app.
WiseRock is the data controller for the personal data described here.
Contact: plantzen.ai@gmail.com
Purpose: an account your garden belongs to. Legal basis: performance of our contract with you.
When you identify a plant or check its health, the photo is uploaded to our storage and sent to the identification service named in section 3. We keep the photo with its result as part of your scan history and, if you add the plant to your garden, as that plant’s photo.
Purpose: identification, diagnosis and your history. Legal basis: performance of our contract, and your explicit consent for sending the photo to a third-party AI service, which the app asks for once and which you can withdraw at any time in Settings.
Please photograph plants, not people. The app has no reason to receive a photo of a person.
Plant names, nicknames, notes, care guides, watering and fertilising schedules, reminder settings, completed care tasks and your health-check history.
Purpose: your garden and its reminders. Legal basis: performance of our contract. Reminders are scheduled on your phone itself; nothing about them leaves your device.
The questions you type and the answers you receive. To answer, we send your question, the earlier turns of that conversation and the saved details of the plant or scan you are asking about (its name, its care guide or its diagnosis) to the AI provider named in section 3. Photos are never sent to the chat provider.
Purpose: answering your questions. Legal basis: performance of our contract, and your explicit consent for the third-party AI provider, the same consent as for photos.
Only your most recent conversations that are not attached to a plant are kept; the app tells you how many. A conversation attached to a plant is kept with that plant.
Payments are made to Apple through your Apple ID. We never see your card or bank details. From our subscription provider we receive the status of your subscription (which plan, whether it is active or in a trial, when it renews or ends, and whether it is a test purchase), stored against your account so the app knows what to unlock.
Purpose: providing what you paid for. Legal basis: performance of our contract, and our legal obligations for accounting.
How many identifications, health checks and Botanist questions you have used, so the free allowance and the Premium fair-use limits can be applied. You can see these numbers yourself under Settings › Usage.
The app generates a random identifier on your phone and keeps it in the iOS keychain. It is sent to our server together with a paid request (a scan or a question) so the free allowance is counted per phone as well as per account. It is not an Apple identifier, it is shared with nobody else and it is not used to track you.
Purpose: keeping the free allowance fair. Legal basis: our legitimate interest in keeping the free tier sustainable.
The answers you give during setup (what you want from the app, roughly how many plants you have, your experience, whether you want reminders) and the time you agreed to third-party AI processing.
Our hosting provider keeps standard server logs (IP address, time and type of request) for a short period, for security and troubleshooting. Our own application logs are designed not to contain personal data: no message text, no photos, no names, no email addresses.
No advertising, no ad networks, no analytics kits, no tracking across apps or websites, no sale or rental of personal data, no profiling for marketing.
We use a small number of service providers. Each processes data only on our instructions and only for the purpose stated.
| Provider | Where | What they receive | Why |
|---|---|---|---|
| Supabase, Inc. | Data stored in the EU (Frankfurt, Germany) | Everything the app stores: account, garden, photos, chats, counters | Hosting, database, file storage, sign-in |
| Kindwise s.r.o. | Czech Republic (EU) | The photo you scan and the language the app is in | Plant identification and health assessment |
| The Pl@ntNet consortium (Cirad, INRAE, Inria and IRD) | France (EU) | The photo, only when you ask for a second opinion | A second opinion on an identification |
| Anthropic, PBC | United States | Your chat questions, the earlier turns of that conversation and the saved details of the plant or scan you ask about | The Botanist’s answers |
| RevenueCat, Inc. | United States | Your account identifier, purchase receipts and the basic device information needed to validate a purchase | Subscription management |
| Apple Inc. | Per Apple’s own terms | Payments and Sign in with Apple | The App Store and sign-in |
Anthropic does not use data sent through its API to train its models. Where a provider is outside the EU, the transfer rests on the safeguards in that provider’s data processing terms, such as the European Commission’s standard contractual clauses. Each provider’s own privacy policy applies to its processing: Supabase, Kindwise, Pl@ntNet, Anthropic, RevenueCat and Apple.
Under the General Data Protection Regulation you can ask us to give you access to your data, correct it, delete it, restrict or object to its processing, or hand it over in a portable form. You can withdraw your consent to third-party AI processing at any time under Settings › Photo analysis & AI; the app then asks again before the next scan or question. Deleting your account and exporting your data are both available in Settings. For anything else, email plantzen.ai@gmail.com; we answer within one month.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
PlantLore is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, email us and we will delete it.
Data travels encrypted (TLS). Photos sit in a private storage bucket and are served only through short-lived signed links. Your sign-in session is stored encrypted on your phone. The keys to our providers stay on our servers and are never in the app. Every database row is tied to its owner, so one account can never read another’s data. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
We may update this policy. The date at the top tells you when. A change that matters to you is announced in the app before it takes effect.
WiseRock, Hendrik-Ido-Ambacht, the Netherlands. KVK 93580126. Email: plantzen.ai@gmail.com