Privacy Policy

Plant Rescue · Effective 8 September 2026

Plant Rescue is operated by Mariano Jalif in the Netherlands. The app does not require an account. This policy describes plant analysis, local storage, service protection, subscriptions, and product analytics.

Plant analysis

When you request identification or a plant check, the app sends selected photos and plant-care answers to our Cloudflare-hosted server and Anthropic's Claude API. A follow-up check may also send the previous diagnosis for comparison. Our request handler processes this content in memory rather than saving it to a content database. Anthropic's processing and retention terms apply to the content it receives.

Device identifiers and service protection

The service uses an Apple App Attest key identifier to recognize an attested installation, verify access, and apply usage limits. In supported development configurations a vendor identifier may be used instead. Attestation challenges expire after five minutes and hourly counter records after two hours. Registered attestation keys and diagnosis counters have no automatic expiry in the current implementation. These identifiers are pseudonymous, not a guarantee of anonymity.

Subscriptions

Apple handles purchases and billing. The app sends signed transaction data to our server to verify subscription access. We do not receive payment card details. Subscription status, plan, and trial status are also included in product analytics.

Product analytics

When configured, the app uses PostHog to understand app usage and improve the product. Events include app launches, screens, feature actions, purchase and restore outcomes, analysis duration, inferred species/diagnosis names and confidence, and error categories. Event properties include a vendor-based device identifier, subscription and trial status, plant count, notification permission status, onboarding choices, and app/device context. This identifier can connect activity from the same device across sessions. Disabling person profiles does not make these events anonymous. The configured default ingestion endpoint is PostHog's EU service.

Our analytics calls do not deliberately include plant photos, nicknames, free-text care notes, or full transaction receipts. We do not use this data for advertising or to track you across other companies' apps and websites. Analytics retention is controlled by the PostHog project configuration; uninstalling the app does not automatically erase previously collected analytics or server records.

Local plant data

Saved plants, photos, care events, and reminders are stored on your device. You can delete plants in the app. Photos and previous results selected for an analysis are sent as described above. Local data may also be included in backups managed by your device or Apple; their retention is controlled by your backup settings.

Service providers

Operational error logs record failure categories and response status rather than intentionally recording plant-content payloads. Service providers may process network information, such as IP addresses, as part of delivering their services. We do not sell your data.

Your choices and requests

You can choose which photos to submit, decline notification permission, delete saved plants, and manage subscriptions in your Apple Account. To request access, correction, or deletion of data we hold, or ask about its processing, contact marigyt.maj@gmail.com. We may need information to locate the relevant pseudonymous records. Uninstalling the app does not cancel an Apple subscription.

Children and AI results

Plant Rescue is not directed at children under 13. Plant identifications, care suggestions, and toxicity information are AI-generated and can be wrong. They are not professional medical, veterinary, or horticultural advice.

Changes

We will update this page and its effective date when the policy changes.

Contact

Questions about this document: marigyt.maj@gmail.com.