Privacy Policy

Last updated: July 9, 2026

Yunwei Network Technology ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use the PlantDoc mobile application ("the App") and other digital products offered by Yunwei Network Technology ("the Services").

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, display name, and optional profile information when you create an account.
• Payment Information: Payment details (credit card, PayPal) are collected and processed exclusively by Paddle.com, our authorized payment processor. We do not store full credit card numbers on our servers.
• Photos You Upload: When you use plant identification or health diagnosis features, photos of plants are uploaded to our servers for AI processing.

1.2 Automatically Collected Information

• Device Information: Device model, operating system version, unique device identifier (for subscription management).
• Usage Data: Feature usage frequency, number of identifications/diagnoses performed, app session duration, and crash reports.
• Location Data: Approximate location (with your permission) used for weather-aware care recommendations and USDA hardiness zone detection. Location is never stored in raw form — only the derived zone/weather data is retained.

2. How We Use Your Information

We use the collected information for the following purposes:

• Providing Core Features: Processing plant photos for identification and health diagnosis using our AI pipeline (Plant.id API + MiMo Vision + RAG knowledge base).
• Account Management: Managing your user account, subscriptions, and preferences.
• Service Improvement: Analyzing aggregated, anonymized usage data to improve AI accuracy, app performance, and user experience.
• Communication: Sending important service notifications (e.g., security alerts, subscription changes). We do not send marketing emails without explicit consent.
• Legal Compliance: Complying with applicable laws and regulations.

3. Photo Data Handling (Important)

Because PlantDoc is a photo-based identification app, photo handling deserves special attention:

• Processing: Photos are sent to our backend servers and/or third-party AI services (Plant.id API, MiMo Vision) for analysis. This processing typically completes within seconds.
• Storage: Plant photos are temporarily stored during processing and are automatically deleted from our servers within 24 hours. Results (identification text, diagnosis notes, health scores) are retained under your account for your reference.
• No Training Without Consent: We do NOT use your personal photos to train our AI models without your explicit opt-in consent. Aggregated, anonymized datasets may be used for general model improvement.
• Your Control: You can delete any saved results and associated metadata from your account at any time within the App settings.

4. Third-Party Data Sharing

We share data with the following categories of third-party service providers:

• Paddle.com: Payment processing (name, email, payment method, transaction amount). See Paddle's Privacy Policy.
• Plant.id API: Plant photos (temporarily) for species identification. See Plant.id's Privacy Policy.
• MiMo Vision: Plant photos (temporarily) for multimodal vision analysis in the health diagnosis pipeline.
• Weather Data Providers: Your approximate location (if permitted) for weather-aware care recommendations.
• Cloud Infrastructure: AWS/Vercel for hosting and analytics (aggregated usage data only).

We never sell your personal information to third parties for marketing purposes.

5. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) for all data communications.
• Encryption at rest for sensitive data stored on our servers.
• Regular security audits and vulnerability assessments.
• Access controls limiting employee access to user data on a need-to-know basis.

6. Data Retention

• Active Accounts: We retain your data while your account is active or as needed to provide the App's services.
• Deleted Accounts: After account deletion, personal data is permanently removed within 30 days, except where legal obligations require longer retention.
• Anonymized Data: Fully anonymized/aggregated data may be retained indefinitely for statistical purposes.

7. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate data.
• Right to Deletion: Request deletion of your personal data (subject to legal exceptions).
• Right to Portability: Receive your data in a structured, machine-readable format.
• Right to Opt Out: Opt out of sale of personal information (where applicable).
• Right to Withdraw Consent: Withdraw previously given consent at any time.

To exercise these rights, contact us at: support@plantdoc.app

8. Children's Privacy

PlantDoc is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it promptly.

9. International Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States (for AI processing services) and China (our company headquarters). We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification. The "Last Updated" date at the top indicates when this policy was last revised.

11. Contact Us

For privacy-related inquiries or to exercise your data rights:

Email: privacy@plantdoc.app
DPO Contact: support@plantdoc.app
Company: Yunwei Network Technology
Location: Suizhou, Hubei, China