Privacy policy

Updated 14 November 2026

Plant care needs a photo. It doesn’t need an advertising profile.

Photos and analysis

When you request a scan, your photo is sent to our server for plant identification, visible health assessment and care guidance. The server converts it to a smaller JPEG without the original photo metadata, then sends that image and your selected language to OpenRouter and the AI model provider handling the request.

Our application backend does not save photos or diagnosis results to its database. It processes them for the request and returns the result to you. Infrastructure may temporarily buffer uploads while processing them. The external analysis providers process the image under their own data policies; we do not promise that they have zero retention. Avoid including people, documents or other sensitive information in plant photos. See OpenRouter’s privacy policy.

Daily scan limits

The app sends a device identifier so we can apply daily usage limits. For an active subscription, the original transaction identifier is used instead. Before saving usage, the backend converts the identifier into a keyed, one-way hash. The database stores this hash, the date and the scan count, plus an overall daily count. It does not store the raw device identifier in that table.

Usage records currently have no automatic deletion schedule. You can contact us about access or deletion; we may need information from your device to locate a hashed record.

Apple purchases

Subscriptions are paid through Apple. The app sends an Apple-signed transaction (JWS) to our backend to check the signature, subscription product, expiry and revocation status. We do not receive your card details. The backend uses the verified subscription identifier to calculate usage limits; it does not save the signed transaction in its usage database.

Service records and support

Our hosting infrastructure records technical request information, such as IP address, request path, time, response status and browser or app information, to operate and protect the service. These logs are separate from scan counters. Nginx access logs rotate daily, keeping 14 rotations; other operational logs follow the host’s retention settings. If you email support, we receive your email address and the information you choose to send, and use them to answer your request.

No advertising or tracking cookies

This website uses no cookies, advertising scripts or analytics trackers. The diagnosis backend does not include advertising or cross-app tracking integrations. We do not sell your photos or usage records.

Processing and your choices

Our backend is hosted in Germany. Analysis and email providers may process information in other countries. We process scan information to provide the service you request, purchase information to verify access, and technical records to maintain security and reliability. Depending on where you live, you may have rights to access, correct, delete or restrict processing of personal data and to complain to your local data protection authority. Contact Verdana support to exercise these rights.