Privacy Policy
Privacy Policy
This document is a template provided for convenience. It is not legal advice. Please have it reviewed by a qualified legal professional before you rely on it or launch the app.
This Privacy Policy explains how PlantDex ("PlantDex", "the app", "we", "us") handles information when you use the app. PlantDex is built to keep your data on your device. We do not run a server that collects your personal information, and your photos are never uploaded for identification.
What the app does
PlantDex is an offline plant identifier. You point your camera at a plant (or import a photo from your gallery), and an on-device machine-learning model returns a ranked list of likely species. You can "catch" a species into a local collection and browse an illustrated catalog (the dex).
The core experience — capture, identify, catch, and browse — runs entirely on your device and works in airplane mode. The app needs a network connection only for the limited purposes described under "Network and content downloads" and "Advertising" below.
Information processed on your device
The following information is processed locally on your device and stays on your device. It is not sent to us or to any server we control.
Photos and camera images
When you take a photo or import an image to identify a plant, that image is analysed by the on-device model. The identification happens locally. Your photos and camera images are never uploaded or sent off the device for identification.
Approximate (coarse) location — optional
If you grant location permission, the app can attach an approximate location to your own discoveries so they can appear on the in-app map. This is optional, used only with your permission, and the location stays on your device. In this version the app may request the location permission ahead of fully enabling the map. If you decline, the app remains fully functional.
Your collection, observations, history, and settings
Your caught species, observation log, history, and app settings are stored locally on your device only. There is no cloud sync and no server-side copy held by us.
Information we do NOT collect
- No account, no sign-in, no registration, and no user profiles.
- No photos uploaded — your camera and gallery images are never sent off the device for identification.
- No account-based or server-side personal data collected by us. We do not build a personal profile of you.
- No analytics or crash data before you consent — analytics and crash reporting are disabled at launch and only collect after you accept the consent flow (see "Analytics and crash reporting" below).
Third-party data collection occurs only through Google services — Google AdMob (to serve and measure ads) and Google Firebase (Analytics and Crashlytics) — and only after you consent. See "Advertising" and "Analytics and crash reporting" below.
Network and content downloads
The app uses the network only for the following purposes:
- Model and catalog/content updates. On first run, and for later updates, the app downloads the machine-learning model and catalog/content from our distribution host (for example, GitHub releases or a content delivery network). This is a content download. The host may process standard technical data, such as your IP address, in accordance with its own privacy policy.
- Catalog reference photos. The app loads species reference images from third-party sources (such as Wikimedia Commons and GBIF) using image URLs, and caches them on your device.
- Advertising. Serving and measuring ads, as described below.
Advertising
PlantDex shows ads using Google AdMob. Ads appear only after you have completed the in-app consent flow (provided by Google's User Messaging Platform / a Consent Management Platform) and, on iOS, Apple's App Tracking Transparency (ATT) prompt.
To serve and measure ads, AdMob (Google) may collect data such as your device's advertising identifier, your IP address, and ad-interaction data. Ads are personalized only with your consent. If you decline, you will see non-personalized ads instead, and the app stays fully functional.
We do not receive your photos and we do not build a personal profile of you. You can change your consent choices at any time in Settings, and you can reset or limit your advertising identifier at the operating-system level.
For more information on how Google handles data from apps that use its services, see Google's notice, "How Google uses information from sites or apps that use our services", and Google's advertising technologies.
Analytics and crash reporting
To understand how the app is used and to find and fix problems, PlantDex uses Google Firebase Analytics and Firebase Crashlytics. Like ads, these are off at launch and only collect data after you accept the in-app consent flow (and, on iOS, the App Tracking Transparency prompt). If you decline, they stay off and the app works exactly the same.
When enabled, Analytics records anonymous usage events — for example which screens you view and key actions such as completing onboarding or catching a species — together with general device and app information. Crashlytics records crash and error diagnostics (such as stack traces and the app state at the time) so we can fix bugs. This data is processed by Google as a service provider; we use it only in aggregate and not to identify you. You can change your choice at any time in Settings.
Your choices and rights
Depending on where you live, you may have rights under the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), or similar laws. Because PlantDex keeps your data on your device and we do not hold a server-side copy of your personal data, you can exercise meaningful control directly:
- Manage ad consent. Change your consent choices at any time in the app's Settings, which reopens the consent flow.
- Reset or limit your advertising ID. Reset or limit the device advertising identifier through your operating-system settings (iOS or Android).
- Delete your data. Uninstalling the app removes all local data stored on your device, including your collection, observation log, history, and settings.
- Ask questions or make a request. Contact us using the details below.
For data collected by Google AdMob, you may also exercise rights directly with Google in accordance with Google's privacy policy and the resources linked above.
Children
PlantDex is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, please contact us so we can address it.
Data retention
Local data (your collection, observation log, history, and settings) persists on your device until you delete it or uninstall the app. We do not hold any server-side personal data, so there is no server-side retention by us. Data collected by Google AdMob is retained by Google in accordance with its own policies.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
Governing law
This Privacy Policy is governed by the laws of [TODO]. Any disputes will be handled in accordance with that jurisdiction.
Contact
If you have questions about this Privacy Policy or your data, contact us at msquaregiza@gmail.com.