PlantSmith Privacy Policy

PlantSmith — Plant Identifier & Care, operated by MINDSPARC PTE. LTD.

Last updated: July 23, 2026

This Privacy Policy explains what information the PlantSmith mobile app collects, how we use it, and the choices you have. We have tried to write it in plain language and to describe our actual practices honestly, without overclaiming.

1. Who we are

PlantSmith is operated by MINDSPARC PTE. LTD., a private limited company incorporated in Singapore (UEN 202524844Z). In this policy, "we", "us", and "our" refer to MINDSPARC PTE. LTD., the data controller responsible for your information.

PlantSmith is a consumer plant-care app. You photograph a plant, the app identifies it using an AI model, gives you structured care information from our knowledge base, helps diagnose plant disease, lets you save plants to a personal "garden", and sends care reminders. The app is offered worldwide except in the European Union / European Economic Area, which is excluded from this release.

2. Information we collect

We collect only what we need to run the service. Specifically:

Photos you take or select

When you use identification or diagnosis, the photo you capture or choose is sent to our AI processing provider so the app can recognize the plant or assess its condition. We do not store your identify or diagnose photos. We keep only a short perceptual hash (a compact fingerprint of the image) so that if you scan the same plant again we can recognize the repeat and avoid reprocessing. See Section 4 for how photos are handled by the AI provider.

If you choose to save a plant to your garden, the photo you attach to that saved plant is stored in our private cloud storage so it can appear in your garden across sessions. You can delete it at any time (see Section 9).

Device identifier

To let you use the app without creating an account, the app generates an anonymous device identifier on your device. It lets us associate your garden, settings, and subscription with your installation. It is not your name and is not linked to your real-world identity unless you choose to sign in.

Account information (only if you sign in)

Signing in is optional. If you do, we receive:

• Sign in with Apple / Google: a stable subject identifier and, where you permit it, an email address. With Apple, this may be a private-relay (anonymized) address rather than your personal email.
• Email one-time-code login: the email address you provide, used to send you a one-time login code.

Purchase and subscription status

If you buy a subscription, we receive your purchase and subscription status through RevenueCat. Apple processes the actual payment; we do not receive or store your card or payment details.

Usage / analytics data (opt-in only)

The app can collect in-app usage events — for example which screens you view and which features you use (identify, diagnose, search, and steps in the subscription flow) — to help us understand and improve the product. Analytics are off by default. We ask for your consent on first launch and only collect this data if you agree. It is sent to our own backend (first-party), is not sold, and is not used to track you across other apps or websites. See Section 5.

Advertising attribution (iOS)

On iOS, the app collects Apple's on-device AdServices attribution token to measure which advertising campaign led to an app install. This is first-party measurement and is not used to track you across other apps or websites. See Section 6.

Diagnostic and technical data

Like most online services, our hosting and backend automatically record standard server logs — for example your IP address and request timestamps — for security, reliability, and abuse prevention.

Location

No location data. The app does not request or collect your location.

3. How we use information

• Provide the core features — identify plants, diagnose disease, serve care information, and maintain your garden and reminders.
• Recognize repeat scans — the perceptual hash lets us avoid reprocessing the same image.
• Maintain your account and subscription — sign-in and entitlement status so your content and access follow you.
• Improve the product — if you opt in to analytics, understand which features are used and where the experience can be better.
• Measure advertising — attribute installs to campaigns (iOS AdServices) so we know which advertising works.
• Security, reliability, and legal compliance — detect abuse, debug problems, and meet our legal obligations.

4. AI processing of your photos

Plant identification and disease diagnosis are powered by a multimodal AI model. When you run identify or diagnose, your photo (and any related text) is sent to OpenRouter, which routes the request to the model provider Google (Gemini) for processing. The photo is used to fulfil your request and is handled under those providers' own data policies.

We do not enable prompt logging on our AI requests, and as described above we do not store the identify/diagnose photos ourselves (we keep only a perceptual hash). We do not control, and this policy does not speak for, the independent data practices of OpenRouter or Google; please refer to their policies for how they process data sent to them. We do not claim that these photos are never retained by the providers or never used by them — we state plainly that they are transmitted to the AI provider to process your request and are handled under that provider's terms.

5. Analytics & consent

Product analytics are opt-in. On first launch, the app asks whether you consent to usage analytics. If you decline, we do not collect in-app usage events. If you agree, we collect first-party usage events (screens viewed and features used) and send them to our own backend to improve PlantSmith. This data is not sold and is not used for cross-app tracking.

You can change your choice at any time in the app's Settings. Turning analytics off stops further collection of these events.

6. Advertising attribution

On iOS, PlantSmith uses Apple's AdServices framework to obtain an on-device attribution token that tells us which Apple Search Ads campaign led to your install. This is first-party measurement: it does not require the App Tracking Transparency permission prompt, and it is not used to track you across other companies' apps or websites. We use it only to measure the effectiveness of our own advertising.

7. Sharing & sub-processors

We do not sell your personal information. We share information only with the service providers ("sub-processors") that operate PlantSmith on our behalf, each for the limited purpose shown below, and with authorities where required by law.

Payments for subscriptions are processed by Apple through the App Store; we do not receive your payment card details.

8. Data retention

• Identify / diagnose photos: not stored. Only a short perceptual hash is retained to recognize repeat scans.
• Saved garden photos: kept until you delete the plant or delete your account/data.
• Account and garden data: kept while your account (or, for anonymous use, your installation) exists, and deleted when you delete your account or uninstall and request deletion.
• Analytics data (if you opted in): retained for a limited period for product analysis and then aggregated or deleted; we keep it no longer than reasonably necessary for that purpose.
• Server logs (IP, timestamps): retained for a short period (typically up to 90 days) for security and troubleshooting, then rotated out.
• Login emails: one-time codes are short-lived; email delivery records are retained only briefly by our email provider.

We may retain limited information longer where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

9. Your rights & account deletion

You can review and control your information from within the app. PlantSmith includes an in-app account deletion option under Settings that permanently erases your account together with your garden and any stored garden photos.

Depending on where you live, you may also have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing. To exercise any of these rights, or if you cannot use in-app deletion, email us at developer@mindsparc.ai and we will respond within a reasonable time and in line with applicable law. We may need to verify your request before acting on it.

10. Children

PlantSmith is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at developer@mindsparc.ai and we will delete it.

11. International users

We are based in Singapore, and the providers that operate PlantSmith may process data in Singapore, the United States, and other countries. By using the app, you understand that your information may be processed in countries other than where you live, which may have different data-protection rules than your home country. We take reasonable steps to protect your information consistent with this policy wherever it is processed. This release is not offered in the European Union / European Economic Area.

12. California privacy rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (as amended) gives you certain rights regarding your personal information.

Categories we collect. Identifiers (device identifier, and, if you sign in, account subject id and email address); commercial information (subscription/purchase status); internet or other electronic network activity (in-app usage events, if you opt in; server logs including IP address); visual information (photos you submit for identification or save to your garden); and inferences drawn to provide plant identification and care guidance.

No sale or sharing for cross-context advertising. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.

Your rights. You may request to know what personal information we have collected, request its deletion, request correction, and not be discriminated against for exercising these rights. To make a request, use in-app account deletion or email developer@mindsparc.ai. You may use an authorized agent to submit a request on your behalf. We will verify your request before acting on it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, provide additional notice in the app. Your continued use of PlantSmith after an update means you accept the revised policy.

14. Contact

If you have any questions about this policy or your information, contact us at:

This Privacy Policy is governed by the laws of Singapore.