Privacy Policy

Last updated: October 1, 2026

This Privacy Policy explains how the Plynt mobile app and the website at getplynt.app (together, “Plynt”, “we”, “us”) handle information. Plynt is operated by David Fitzsimmons, based in Ontario, Canada. Because our service providers operate in the United States and elsewhere, information is processed outside Canada (see “International processing” below). By using Plynt you agree to this policy.

Plynt has no accounts and does not ask for your name or email. With your permission, the plant photos you select and relevant plant details are sent through our backend to OpenAI for analysis. We do not save these photos or details on our servers. OpenAI's retention is described below. Your saved diagnoses live on your device and, if you use iCloud, sync privately to your own iCloud.

Information we process

Photos you submit

In version 1.0.2 and later, Plynt asks you to allow OpenAI photo analysis before the first diagnosis. Only after you allow it, the selected photos are sent over an encrypted connection to our Cloudflare backend (api.getplynt.app) and forwarded to OpenAI to identify the plant and assess visible diseases, pests, or disorders. We process the photos to generate the result and do not persist copies in our application storage. Camera or photo-library access is not permission to share with OpenAI.

Older app versions during the transition

Versions up to 1.0.1 continue to send photos and relevant plant details to Anthropic's Claude API through our backend during a temporary transition period, as previously disclosed. They do not send photos to OpenAI. To use OpenAI analysis, update Plynt and allow the new provider-specific permission. We never fall back to Anthropic after you have allowed OpenAI analysis. When support for the older diagnosis route ends, those versions will ask you to update before making new scans; saved diagnoses remain available.

Anthropic processes older-version scans under its commercial API terms. It normally deletes API inputs and outputs within 30 days, with exceptions for agreed retention terms, usage-policy enforcement and legal obligations. See Anthropic's API data-retention policy. The OpenAI processing details below apply to scans made after the new OpenAI permission.

Context you optionally provide

You may add a plant hint, an entered region (city/country), indoor/outdoor placement, and a note about the spot. These details and the current month accompany the photos to tailor the result. We do not access your device's GPS. Avoid including people, addresses, or unrelated personal information in photos or text.

OpenAI processing and retention

We use the OpenAI API, not a public ChatGPT conversation. OpenAI does not use API inputs or outputs to train its models unless the API account opts in; Plynt does not opt in to sharing diagnosis data for training. We request analysis without ordinary stored Responses application state (store: false), without background processing, and without the Files API. This does not mean zero retention: OpenAI may retain content in abuse-monitoring logs for up to 30 days, or longer where required by law or reasonably necessary for safety. Image inputs can be subject to additional safety retention. Our requests disable prompt caching for submitted content. For details, see OpenAI's API data controls. We do not claim approval for OpenAI Zero Data Retention.

Saved diagnoses (“My Garden”)

Diagnoses you save are stored on your device. If you are signed into iCloud, they are also synced privately to your own iCloud account (via Apple's CloudKit) so they survive a new phone and sync across your devices. This data goes to your private iCloud, governed by Apple's privacy policy — it is never uploaded to a Plynt server, and we cannot see it. Plynt has no account system. You can delete a saved diagnosis at any time, which removes it from your device and your iCloud; uninstalling the app removes the local copy. A small counter of how many diagnoses you've run (used to apply the free-scan limit) is likewise kept in your own iCloud so it stays consistent across your devices — it contains the scan count, not your photos or diagnosis text.

Region search suggestions

When you type in the region field, the text is sent to Apple's MapKit service to return location suggestions. This is handled by Apple under Apple's privacy policy. Plynt does not access your device's GPS or precise location.

Subscriptions

Plynt Pro subscriptions are processed by Apple through the App Store. We receive your subscription status from Apple but never your payment details or Apple ID.

What we do not collect

No account, no login, no name or email collected by the app, no advertising identifiers, no analytics SDKs, and no precise device location.

Website analytics

The website at getplynt.app uses Cloudflare Web Analytics to provide aggregate traffic and performance measurements. It does not use cookies or local storage to measure visits. This website measurement is separate from the Plynt app, which contains no analytics SDKs.

Service providers

OpenAI — processes selected plant photos and relevant details to generate the diagnosis. See OpenAI's privacy policy and the API data controls linked above.
Anthropic — continues to process scans from versions up to 1.0.1 during the temporary transition described above. OpenAI-consented scans are never sent to Anthropic.
Cloudflare, Inc. — hosts our backend and this website, relays diagnosis requests, stores pseudonymous device-attestation and fair-use records, and provides aggregate website traffic and performance measurements. Our application does not persist photo or context payloads in Cloudflare storage.
Apple Inc. — App Store distribution, subscriptions (StoreKit), region search suggestions (MapKit), and private syncing of your saved diagnoses to your own iCloud (CloudKit).

Data retention

Our backend does not save submitted photos or context. It stores device public keys and pseudonymous device references, assertion counters, and monthly scan counts to verify the app and prevent abuse; these records expire after 180 days of inactivity. One-time authentication challenges expire after five minutes. Operational logs contain usage counts, estimated costs, timings, request identifiers, and error codes; our code does not log photos, prompts, diagnosis text, or provider error bodies. Cloudflare processes network and operational metadata under its own policies. Provider processing and retention are described above. Saved diagnoses remain on your device and private iCloud until you delete them.

International processing

Plynt's providers may process information in the United States and other countries. The OpenAI permission screen explains sharing before a diagnosis. Choosing not to allow analysis prevents new diagnosis uploads and does not prevent access to My Garden.

Children

Plynt is not directed to children under 13 (or under 16 in the EEA/UK) and we do not knowingly collect information from them.

Your choices and rights

You can decline OpenAI analysis or withdraw permission for future scans in Settings. Withdrawal does not undo earlier processing or delete data already retained by a provider. Delete saved diagnoses on your device at any time; where iCloud sync is enabled, deletion also syncs to your private iCloud. For any privacy question, email support@getplynt.app.

Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new “Last updated” date.

Contact

David Fitzsimmons · support@getplynt.app