Privacy Policy

1. Who We Are

PlantID is developed and operated by an individual developer under the developer name Lowenergy Labs, based in France.

Developer: Lowenergy Labs

Operated by: Eduardo Romero Martínez

Status: Individual developer

Country: France

Privacy contact: privacy@lowenergylabs.com

Website: https://lowenergylabs.com

Eduardo Romero Martínez is the data controller for personal data processed in connection with PlantID.

This Privacy Policy explains what information PlantID processes, why it is processed, where it may be stored, which third-party services are involved, and the rights available to users.

2. About PlantID

PlantID is an AI-assisted mobile application that allows users to:

• identify plants from photographs;
• obtain plant health and diagnosis information;
• translate plant information;
• save identification and diagnosis history;
• maintain favourites and a personal plant collection;
• use plant-related reminders and app preferences.

PlantID uses artificial intelligence to generate identification, diagnosis and translation results.

3. No Traditional Account Is Required

PlantID does not currently require users to create a traditional account using a name, email address, telephone number, password or social-media account.

To provide the service securely and apply usage limits, PlantID automatically creates an anonymous or pseudonymous technical identifier using Supabase authentication.

This identifier does not directly contain your name, email address or other traditional registration information.

PlantID does not currently ask you to provide your name, postal address, phone number, date of birth, social-media profiles or precise geographic location in order to use the app.

If you contact Lowenergy Labs voluntarily by email, we may process your email address, name and any information you choose to include in your message.

4. Information We Process

PlantID may process the following categories of information.

Anonymous Technical Identifier

An anonymous or pseudonymous user identifier is generated through Supabase.

It is used to:

• provide access to PlantID services;
• associate AI requests with the correct installation or anonymous user;
• enforce introductory and recurring usage limits;
• prevent duplicate or abusive requests;
• maintain service security and reliability;
• associate server-side identification or diagnosis records with the correct anonymous identifier.

Plant Identification and Diagnosis Information

When PlantID performs an identification or diagnosis, structured information generated by the AI service may be stored server-side.

This may include:

• common and scientific plant names;
• plant characteristics;
• plant-care information;
• diagnosis information;
• generated recommendations;
• language information;
• timestamps;
• technical request identifiers;
• structured AI-generated result data.

These records may be associated with your anonymous technical identifier.

5. Plant Photos and AI Processing

When you take a photograph or select an image from your device, PlantID processes that image in order to perform the identification or diagnosis you requested.

The image is prepared on your device and transmitted through PlantID's server-side infrastructure to the Google Gemini API for artificial-intelligence processing.

Plant images are therefore temporarily transmitted for the purpose of producing the requested result.

Lowenergy Labs does not intentionally store the original submitted plant photograph as an image file in its Supabase database.

The server may store the structured identification or diagnosis result generated from the image, but not the original photograph as part of that database record.

Google processes submitted content in accordance with the applicable Gemini API terms, security practices and service configuration.

PlantID currently uses a paid Gemini API service. Lowenergy Labs does not voluntarily submit PlantID user content to Google for the purpose of training Google's general AI models.

Google may nevertheless process or retain information where necessary for service operation, security, abuse prevention, legally required processing or configured service logging, in accordance with Google's applicable terms and policies.

6. Data Stored Locally on Your Device

A significant part of your PlantID collection is stored locally on your device rather than in Lowenergy Labs' cloud infrastructure.

This may include:

• saved plant photographs;
• identification history;
• diagnosis history;
• favourites;
• locally saved plant information;
• reminders;
• application preferences.

Newly saved plant photographs are stored in PlantID's app-owned persistent storage on the device.

These local photographs are separate from the temporary image transmitted for AI processing.

Lowenergy Labs does not have access to or control over plant photographs, favourites, history, reminders and other PlantID information that exists exclusively in local storage on your device.

PlantID does not currently provide a cloud photo-backup service for your personal plant collection.

Local application data can be removed using PlantID's available controls or your device's application-storage settings.

Operating-system backup and restore features may affect how local data behaves after application removal or reinstallation.

7. Technical Usage Records

PlantID maintains limited server-side technical records necessary to operate, secure and monitor the AI service.

These records may include:

• anonymous user identifier;
• request identifier;
• request type;
• timestamps;
• quota usage;
• request success or failure;
• technical error codes;
• processing latency;
• AI provider and model;
• AI token usage;
• estimated service cost.

These records are used for:

• usage-limit enforcement;
• fraud and abuse prevention;
• service reliability;
• troubleshooting;
• technical monitoring;
• infrastructure and AI-cost management.

PlantID's operational logging is designed not to intentionally store plant-image files, base64 image payloads, complete AI prompts, authentication tokens, passwords, API keys, private credentials or email addresses in AI usage metadata.

8. Third-Party Service Providers

PlantID currently relies on the following principal third-party service providers.

Supabase

Supabase provides infrastructure used for:

• anonymous authentication;
• database services;
• server-side functions;
• quota management;
• identification and diagnosis records;
• technical usage records.

PlantID's current Supabase project is hosted in West EU (Ireland), region eu-west-1.

Google Gemini API

Google Gemini provides artificial-intelligence processing used for:

• plant identification;
• plant diagnosis;
• translation.

Plant photographs and associated requests are transmitted to Google for the purpose of performing these operations.

Google may process information in countries where Google or its service providers maintain facilities, subject to applicable contractual and legal safeguards.

9. Advertising, Analytics and Tracking

The current version of PlantID does not include:

• third-party advertising SDKs;
• behavioural advertising;
• Meta Pixel;
• advertising profiling;
• third-party behavioural analytics SDKs;
• marketing email tracking.

If PlantID introduces new technologies that materially change how personal data is processed, this Privacy Policy will be updated before or when required by applicable law.

10. Why We Process Information

Depending on the processing activity, PlantID relies on one or more lawful bases under the GDPR.

Providing the Requested Service

Processing is necessary to provide functionality requested by the user, including:

• plant identification;
• plant diagnosis;
• translation;
• generation and delivery of results.

Legitimate Interests

We may process limited information where necessary for legitimate interests including:

• operating PlantID securely;
• enforcing fair usage limits;
• preventing abuse and fraud;
• maintaining service reliability;
• investigating technical problems;
• monitoring AI and infrastructure costs;
• protecting PlantID and its users.

Where legitimate interests are relied upon, those interests are balanced against users' privacy rights.

Legal Obligations

Information may be processed or retained where necessary to comply with applicable laws, court orders, regulatory obligations or lawful government requests.

Consent

Where applicable law requires consent for a particular permission or processing activity, PlantID will request that consent separately.

11. Data Retention

Different categories of information may be retained for different periods depending on their purpose.

Local Device Data

Local photographs, favourites, history, reminders and app preferences remain under the control of the user and the device operating system.

They remain available until removed using PlantID's controls, the device's storage controls, application removal or another operating-system process.

Server-Side Identification and Diagnosis Records

Identification and diagnosis records associated with an anonymous identifier may be retained for as long as reasonably necessary to operate PlantID and provide the service.

They may also be deleted following a valid privacy request, subject to legitimate legal, security or technical retention requirements.

Technical Usage Records

Technical quota, reliability and AI-usage records may be retained for as long as reasonably necessary to:

• enforce usage limits;
• detect or prevent abuse;
• investigate errors;
• maintain service integrity;
• monitor service costs;
• comply with applicable legal obligations.

When information is no longer reasonably required, we will delete it or anonymise it where appropriate and technically feasible.

12. International Data Transfers

PlantID is operated from France.

PlantID's Supabase database is currently hosted in Ireland, within the European Union.

Google Gemini processing may take place outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, appropriate safeguards will be used where required by applicable law. These may include:

• European Commission adequacy decisions;
• Standard Contractual Clauses;
• other legally recognised international-transfer mechanisms.

13. Your Rights Under the GDPR

Where the GDPR applies, you may have the right to:

• request access to personal data relating to you;
• request correction of inaccurate personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing;
• receive certain data in a portable format where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with a competent supervisory authority.

These rights may be subject to applicable legal limitations or exceptions.

To exercise a privacy right, contact: privacy@lowenergylabs.com

If you are located in France, you also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL).

14. Deleting Your Data

You may request deletion of server-side information associated with your anonymous PlantID identifier.

To submit a deletion request, contact: privacy@lowenergylabs.com

We may need information that allows us to identify the anonymous PlantID identifier associated with the data you are asking us to delete.

We will respond to valid privacy requests within the period required by applicable law, normally within one month under the GDPR.

Where a deletion request is valid, we will take reasonable steps to delete associated personal or pseudonymous information from our active systems, except where continued retention is permitted or required for legal, security, fraud-prevention or regulatory reasons.

Information stored exclusively on your device is controlled locally and can be removed separately using PlantID's available controls or your device's application-storage settings.

Data-deletion information will also be available at: https://lowenergylabs.com/delete-data

15. Security

We use reasonable technical and organisational measures designed to protect information processed through PlantID.

These measures include, where applicable:

• authenticated access to server-side services;
• server-side protection of private API credentials;
• database access controls;
• encrypted network communication;
• access-control policies;
• separation of public mobile configuration from private server-side secrets.

No internet-connected system or electronic-storage method can provide absolute security.

Accordingly, while reasonable measures are used to protect PlantID data, we cannot guarantee that unauthorised access, disclosure, modification or loss will never occur.

16. AI-Generated Information

PlantID uses artificial intelligence to produce plant identification, diagnosis, translation and related informational results.

AI-generated information may occasionally be incomplete, inaccurate or incorrect.

PlantID's Terms of Service contain additional information regarding the limitations and appropriate use of AI-generated identification and diagnosis results.

17. Age Requirement

PlantID is intended only for users who are 18 years of age or older.

PlantID is not designed, directed or marketed for use by minors under the age of 18.

We do not knowingly seek to collect personal information from minors through PlantID.

If you believe a minor has provided information through PlantID, please contact: privacy@lowenergylabs.com

18. Sale of Personal Data

Lowenergy Labs does not sell PlantID users' personal data.

The current version of PlantID does not use personal information for behavioural advertising.

19. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect:

• changes to PlantID;
• changes to third-party services or providers;
• changes to our privacy practices;
• legal or regulatory requirements.

The current version will be available at: https://lowenergylabs.com/privacy

The effective date and last-updated date will be changed when appropriate.

Where applicable law requires additional notice or consent for a material change, we will provide it.

20. Contact

For privacy questions, requests to exercise your rights or requests concerning deletion of PlantID data:

Developer: Lowenergy Labs

Status: Individual developer

Country: France

Privacy: privacy@lowenergylabs.com

Website: https://lowenergylabs.com