What myPlantHeaven collects, why, and how to make us delete it. Last updated October 2026.
myPlantHeaven identifies plants from photographs and keeps a watering schedule for the plants you own. This policy covers the iOS and Android apps. It is written to be read, not to be defensible.
| Data | Why | Kept for |
|---|---|---|
| Email address | To sign you in and sync your collection between devices | Until you delete your account |
| Your plants | Names, rooms, watering dates and care notes you have saved | Until you delete them or your account |
| Plant photographs | Sent to our identification service to produce a match | The full photograph is not stored after the match returns |
| Plant thumbnails | A small copy of the photo of each plant you save, so it appears in your collection on any device | Until you delete the plant or your account |
| Health checks | A score, notes and a small photo for each health check you take, to show change over time | Until you delete the check, the plant or your account |
| Plant log | Care you record (watered, repotted…), optional notes, and saved diagnoses with a small photo | Until you delete the entry, the plant or your account |
| Plant questions | Questions you ask about a plant and the answers, so you can scroll back. Visible to anyone you share that house with | Until you clear the conversation, delete the plant or your account |
| House sharing | Who you have invited to a house, whether they can view or edit, and who did each watering or log entry. Your email address is shown to the people in a house you share | Until you remove them, they leave, or the house or your account is deleted |
| Notification token | A code from Apple or Google that lets us tell you when someone shares a house with you. Only stored if you allow notifications | Until you delete your account |
| AI usage | How many AI checks and questions you use, and their size and cost, so trial and fair-use limits can be applied. Not the photos themselves | Until you delete your account |
| Purchase status | Whether a subscription is active, so the app unlocks | Until you delete your account |
We do not collect your location, your contacts, your camera roll, or anything from other apps. Photographs are only read when you take or choose one.
When you identify or diagnose a plant, the photograph is sent over an encrypted connection to our server, which passes it to Anthropic's Claude API for analysis. The result comes back as text — a name and a care summary — and that text is what we save. The full-size image is not written to our database or our file storage.
When you add an identified plant to your collection, the app stores a small copy of its photo (480 pixels wide) in private file storage. Only your account, and anyone you share that house with, can read it. It is shown through links that expire after an hour, and it is deleted when you delete the plant or your account.
When you diagnose a problem for one of your plants, the diagnosis is saved in that plant's log with your description of the problem and the same kind of small private copy of the photo, so you can look back at it. A diagnosis you don't save to a plant keeps no photo. You can delete any log entry, and they all go when you delete the plant or your account.
If you use the health history for a plant, each check keeps the same kind of small private copy alongside its score and notes, so you can compare them over time. You can delete any single check from the app, and all of them go when you delete the plant or your account.
Anthropic processes the image to produce the response and does not use it to train their models. Their terms are at anthropic.com/legal/commercial-terms.
With myPlantHeaven Plus you can invite someone to one of your houses by their email address, as someone who can edit (water, log, add and move plants) or only view. The invite waits inside the app until they sign in with that address; we do not email them. If they allow notifications, their phone also gets a notification about it.
Once they accept, they can see that house's plants, rooms, photos, health checks, watering history and log, and your email address. They cannot see your other houses. Each watering and log entry records who made it. You can change what they can do or remove them at any time, and they can leave. If you delete your account, the houses you own are deleted for everyone in them; houses other people shared with you are not affected.
| Processor | What for |
|---|---|
| Supabase | Accounts and database hosting, in the EU region |
| Anthropic | Plant identification and diagnosis from photographs |
| Expo | Delivering notifications to your phone, if you allow them |
| RevenueCat | Subscription status, if you subscribe |
| Apple / Google | Payment, if you subscribe. We never see your card details |
Under UK and EU data protection law you can ask for a copy of your data, ask us to correct it, or ask us to erase it. The app does the last one directly: You → Delete my account and data. It is immediate and it is not recoverable.
For anything else, email privacy@myplantheaven.com and we will reply within 30 days. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.
myPlantHeaven is not directed at children under 13 and we do not knowingly hold data about them. If you believe a child has created an account, email us and we will remove it.
Data is encrypted in transit and at rest. Every database row is protected by row level security, so one account cannot read another's plants even if the app is tampered with. Our API keys are held server-side and are never present in the app you download.
If this policy changes in a way that affects you, we will tell you in the app before the change takes effect. The date at the top always reflects the current version.