Privacy Policy

1. Introduction

PlantSense (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what data we collect through the PlantSense hardware device, PlantSense Connect app, and cloud services, how we use it, and your rights regarding your personal information.

2. Data We Collect

2.1 Account Data

When you create an account, we collect your email address and a display name. If you sign in via Google or Apple, we receive your name and email from the identity provider.

2.2 Sensor Data

Your PlantSense device transmits soil moisture, temperature, humidity, light level, and battery voltage readings to our servers approximately every 90 minutes. This data is stored in InfluxDB (time-series) and linked to your account in PostgreSQL.

2.3 Device Information

We collect your device's unique hardware ID, firmware version, WiFi signal strength, and last-seen timestamp to provide connectivity diagnostics.

2.4 Location Data

If you grant location permission in PlantSense Connect, we use approximate location to provide local weather context. Location data is not stored on our servers.

2.5 Plant Photos

If you use the plant identification feature, photos are sent to our server and forwarded to the PlantNet API for species identification. Photos are not permanently stored on our servers.

3. How We Use Your Data

• To display sensor readings and historical trends in PlantSense Connect.
• To send push notifications when sensor values exceed your configured thresholds.
• To identify plant species via the PlantNet API when you use the identification feature.
• To provide AI-powered care recommendations via the OpenAI API.
• To improve our hardware and software through aggregated, anonymized analytics.

4. Third-Party Services

We share limited data with the following third parties:

• PlantNet API — receives plant photos for species identification. Subject to PlantNet's own privacy policy.
• OpenAI API — receives anonymized sensor summaries to generate care recommendations. No personal data is sent.
• Firebase Cloud Messaging / APNs — used to deliver push notifications to your device.

5. Data Storage & Security

Sensor data is stored in InfluxDB. Account data is stored in PostgreSQL. All data is encrypted in transit (TLS) and at rest. Our servers are hosted on secure cloud infrastructure with access controls and regular security audits.

6. Data Retention

We retain sensor data for as long as your account is active. You can request deletion of all your data at any time by contacting support or using the “Delete Account” feature in PlantSense Connect. Account deletion permanently removes all associated sensor data within 30 days.

7. Your Rights

You have the right to:

• Access your personal data and sensor history via PlantSense Connect or by request.
• Export your sensor data in CSV or JSON format from PlantSense Connect.
• Request correction of inaccurate account information.
• Request deletion of your account and all associated data.
• Withdraw consent for optional data processing (e.g., location, plant photos).

8. Children's Privacy

PlantSense is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or in-app notification. Your continued use of PlantSense after changes constitutes acceptance of the updated policy.

10. Contact

For privacy inquiries, email us at [email protected] or use the contact form on our Support page.