PlantMedic Privacy Policy
# Privacy Policy — Plantmedic
**Last updated:** May 2026
**Effective date:** May 2026
---
## 1. Who We Are
Plantmedic is operated by **IgnisTech Ltd**, a company registered in England and Wales.
**IgnisTech Ltd**
21 Winterberry Way
Nantwich, Cheshire
CW5 7NZ
United Kingdom
**Email:** ignistech999@gmail.com
**ICO Registration Number:** [TO BE ADDED]
IgnisTech Ltd is the data controller for personal data collected through the Plantmedic app. This means we decide why and how your data is processed and are responsible for it being handled lawfully.
---
## 2. What Data We Collect
### 2.1 Account Data
When you create an account, we collect:
- Your **email address**
- Your **password** (never stored in plain text — encrypted and managed by Clerk; see Section 5)
- Your **display name** (if provided)
### 2.2 Plant and Care Data
Data you enter about your plants, including:
- Plant nicknames, species, and location notes
- Watering, feeding, and repotting dates
- Care notes and pot/soil details
- Recovery logs
This data is stored **locally on your device** using your device's secure storage. It is not uploaded to our servers.
### 2.3 Plant Photos
When you use the Diagnose or Identify features, you take or select a photo of your plant. That photo is:
- **Transmitted to Anthropic's API** (the provider of the Claude AI model) solely for the purpose of analysing your plant and returning a diagnosis or identification result
- **Not stored on our servers**
- **Not retained by us** after the response is returned
Please refer to Anthropic's privacy policy for information on how they handle data sent to their API: [https://www.anthropic.com/privacy](https://www.anthropic.com/privacy)
### 2.4 Notification Data
We schedule local push notifications on your device (watering reminders, care check-ins). This is processed entirely on your device and no notification data is sent to our servers.
### 2.5 Propagation Tracking Data
If you use the Propagation feature, photos taken for check-in tracking are transmitted to Anthropic's API in the same way as described in Section 2.3.
---
## 3. How We Use Your Data
| Data | Purpose | Legal Basis |
|---|---|---|
| Account data (email, name) | Creating and managing your account; sending account-related emails | Performance of a contract (Article 6(1)(b) UK GDPR) |
| Plant and care data | Providing the core plant care functionality within the app | Performance of a contract (Article 6(1)(b) UK GDPR) |
| Plant photos | Sending to AI model to diagnose plant health or identify species | Performance of a contract (Article 6(1)(b) UK GDPR) |
| Email address | Sending service notifications (e.g. password reset) | Performance of a contract (Article 6(1)(b) UK GDPR) |
We do not use your data for advertising, profiling, or any purpose beyond what is listed above.
---
## 4. Third Parties We Share Data With
We share data with the following third-party service providers only to the extent necessary to operate the app.
### 4.1 Clerk (Authentication)
Your account data (email address and encrypted password) is processed by **Clerk, Inc.** on our behalf. Clerk provides our secure sign-in and account management infrastructure.
- **Data shared:** Email address, encrypted credentials
- **Purpose:** Account creation, authentication, password reset
- **Privacy policy:** [https://clerk.com/privacy](https://clerk.com/privacy)
### 4.2 Anthropic (AI Analysis)
Plant photos you submit for diagnosis or identification are sent to **Anthropic, PBC** via their API.
- **Data shared:** Plant photos only (no account or personal identifiers are sent)
- **Purpose:** AI-powered plant diagnosis and species identification
- **Privacy policy:** [https://www.anthropic.com/privacy](https://www.anthropic.com/privacy)
### 4.3 Amazon (Affiliate Links)
The app displays product recommendations relevant to your plant's diagnosis. If you tap a product link, you will be directed to **Amazon.co.uk**. Plantmedic participates in the Amazon Associates affiliate programme and may earn a small commission on qualifying purchases.
- **Data shared:** None by us — Amazon's own cookies and tracking apply once you leave the app
- **Privacy policy:** [https://www.amazon.co.uk/privacy](https://www.amazon.co.uk/privacy)
We do not sell your data to any third party. We do not share your data with advertisers.
---
## 5. Data Retention
| Data | Retention period |
|---|---|
| Account data | Retained for as long as your account is active. Deleted within 30 days of account deletion. |
| Plant and care data | Stored locally on your device. Deleted when you uninstall the app or delete the data manually. |
| Plant photos | Not retained by us after the AI response is returned. |
| Notification schedules | Stored locally on your device only. |
---
## 6. Your Rights Under UK GDPR
As a UK resident, you have the following rights regarding your personal data:
- **Right of access** — Request a copy of the personal data we hold about you
- **Right to rectification** — Ask us to correct inaccurate data
- **Right to erasure** — Ask us to delete your personal data ("right to be forgotten")
- **Right to restrict processing** — Ask us to limit how we use your data
- **Right to data portability** — Request your data in a machine-readable format
- **Right to object** — Object to our processing of your data
- **Right to withdraw consent** — Where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at **ignistech999@gmail.com**. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the **Information Commissioner's Office (ICO)**:
- **Website:** [https://ico.org.uk](https://ico.org.uk)
- **Telephone:** 0303 123 1113
---
## 7. Data Security
We take reasonable technical and organisational measures to protect your data. Account credentials are managed by Clerk, which uses industry-standard encryption. Plant data stored on your device is protected by your device's own security (PIN, biometrics, etc.).
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
---
## 8. Children's Privacy
Plantmedic is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at **ignistech999@gmail.com** and we will delete it promptly.
---
## 9. International Transfers
Your account data is processed by Clerk and Anthropic, both of which are US-based companies. These transfers are subject to appropriate safeguards (Standard Contractual Clauses) in accordance with UK GDPR requirements.
---
## 10. Changes to This Policy
We may update this privacy policy from time to time. When we make significant changes, we will notify you within the app. The "Last updated" date at the top of this page will always reflect the most recent version.
Continued use of the app after changes are posted constitutes acceptance of the updated policy.
---
## 11. Contact Us
For any privacy-related questions or requests:
**IgnisTech Ltd**
21 Winterberry Way, Nantwich, Cheshire, CW5 7NZ
**Email:** ignistech999@gmail.com