PlantHaven App

Last Updated: October 23, 2026

1. Introduction

PlantHaven helps you look after your plants. PlantHaven is made by OptimaGeeks, who are responsible for your data. Questions about this policy or your data: [email protected].

We do not sell your data, show third-party ads, or track you across other apps or websites.

No ads, no tracking: we never sell your data or follow you around the web.
No GPS: only the city you pick, for local weather.
Only photos you choose: the system picker gives us just the photos you pick.
Delete any time: Profile → Delete account, confirmed with a code we email you, removes everything.

2. Information We Collect

Account: your email address, optional name, a securely hashed password (if you set one), your time zone, and the city you choose for local weather (optional).
If you continue with Google: from your Google account we receive your name, email address, profile photo link and a Google account ID, to sign you in and show your photo. We never see your Google password and do not access anything else in your Google account.
If you continue with Apple: from Apple we receive an Apple account ID, your email address (or a private relay address if you choose Hide My Email) and, the first time only, your name if you share it. We never see your Apple ID password. When you delete your account, we also end PlantHaven's access to your Apple sign-in.
Profile photo (optional): a photo you upload for your profile, stored on our servers. It replaces your Google photo, and you can remove it at any time.
Your plants: names, species suggestions, notes, the places you keep them (for example “Living room”) and their light, pot and care details, and the care history you log.
Photos you add: pictures of your plants, stored on our servers.
Device token (once reminders are on): an identifier from Apple or Google that lets us send care reminders to your phone.

We do not collect your precise (GPS) location, contacts, or advertising identifiers. The city you pick is used only to fetch local weather for your care plans.

3. Permissions the App Asks For

The app asks for a permission only when you use the feature that needs it, never when it starts, and works without the ones you decline.

Camera (iPhone; on Android the system camera opens for us): only when you choose “Take a photo” or Scan, for plant photos, identifying a plant, or your profile photo.
Photos: you pick photos in the system photo picker, so the app receives only the photos you choose, never your whole library.
Notifications: asked when you start a care plan or switch reminders on, to send care reminders. Turn them off in the app (Profile → Reminders) or in your phone settings.
Internet: to sync your plants with your account.

The app does not ask for your location, contacts, microphone, or fingerprint or face data.

4. What Stays on Your Device

In the app: your sign-in (in the phone's secure storage), your theme choice, whether you have seen the intro screens, and the plants you recently viewed in Discover (cleared when you log out). These are never sent to us.
On the website: a sign-in cookie that keeps you logged in (scripts cannot read it, and the site needs it to work), and in your browser's storage your theme choice and the plants you recently viewed in Discover (cleared when you sign out). We use no advertising or analytics cookies.

5. How We Use Your Information

To run your account, let you sign in (with a password, Google or Apple), and show your plants on your devices.
To suggest care schedules and send the reminders you ask for.
To email you a one-time code to confirm your email when you sign up, and when you reset your password or delete your account.
To keep the service secure, for example with limits on sign-in attempts.

6. Who We Share It With

Pl@ntNet receives a photo only when you tap Scan (or “Identify from a photo”), to suggest what the plant is. We pass the photo on and do not keep it; it is saved to your plant only if you add it there.
iNaturalist and Wikipedia receive plant names you search for, and the plants you open in Discover, from our server, to find species, reference photos and articles. No account details are sent. Discover articles are read live from Wikipedia and not stored by us.
Wikimedia serves the plant photos shown in search results and Discover directly to your device, so its servers see your device's IP address, as with any website. Photos are credited where they are shown.
WeatherAPI.com receives your city's coordinates to return its weather. No account details are sent.
Hosting and email providers that host the service and send its emails for us. They may use your data only to provide that service to us.
Apple and Google deliver push notifications when reminders are on.
Google handles “Continue with Google”: it confirms your identity and tells us your name, email and profile photo link. Your Google account is covered by Google's own privacy policy.
Apple handles “Continue with Apple”: it confirms your identity and tells us your email (or a relay address) and name if you share them. Your Apple account is covered by Apple's own privacy policy.
AI provider (OpenAI) drafts general care profiles for plant species, which our team reviews. It receives species names, never your personal data.

We share data with authorities only when the law requires it.

7. How Long We Keep It

For as long as you have an account. When you delete your account, your profile, plants, places, photos and history are deleted from our live systems straight away, and from backups within 30 days.

8. How We Protect Your Data

Everything sent between the app or website and our servers is encrypted in transit (HTTPS).
Passwords and email codes are stored only as one-way hashes, so nobody can read them, including us.
Your sign-in is kept in the phone's secure storage, or on the website in a cookie that scripts cannot read.
Only staff who need it can reach your data, and their admin actions are logged.
Our servers see your device's IP address when you use the service; we use it only to deliver it and to limit repeated sign-in attempts, and do not store it with your account.

9. Your Choices and Rights

Edit or delete any plant, photo or place in the app, and change or remove your profile photo in Profile.
Delete your account in the app or on the website: Profile → Delete account. We email you a 6-digit code to confirm it is you; once you enter it, your account is deleted straight away.
Ask us for a copy of your data or to correct it: [email protected].
Turn reminders off at any time in the app or in your phone settings, and withdraw camera or photo access in your phone settings.
Clear your recently viewed plants in Discover with Clear.

10. Children

PlantHaven is not directed at children under 13, and we do not knowingly collect their data.

11. Changes to This Privacy Policy

If we change this policy we will update the date above and, for important changes, tell you in the app.

12. Contact Us

If you have any questions or feedback about this Privacy Policy, please contact us at:

Email: [email protected]