Privacy
Last updated October 8, 2026
Planted is a garden planner. You don't make an account, and your garden lives on your phone. A few features need to send something off the phone to work. This page lists each one, what goes, and who gets it.
In short: no account, no ads, no tracking, and we never sell your data. Plant-doctor photos go to Google's Gemini AI to be checked. Your town goes to a weather service for frost dates. Crash reports go to Firebase.
What stays on your phone
Your garden, plants, spaces, to-dos, harvests, journal notes and journal photos are saved only on your device. We don't have a copy, so we can't see them, and they're gone if you delete the app. The home-screen widgets read the same on-device data.
What leaves your phone
Your location, for frost dates and weather
Planted needs to know roughly where you garden to work out your frost dates, growing zone and weather. You can share your location or type a ZIP code. We turn it into a town and approximate coordinates, then send those to:
- Open-Meteo, for your forecast, past weather and town lookup;
- phzmapi.org, which looks up your USDA hardiness zone from your ZIP code.
We don't keep your location on any server. Planted only asks for your location while you're using it, never in the background.
Plant-doctor photos
When you ask the plant doctor to check a plant, Planted sends the photo to Google's Gemini AI through Firebase AI Logic. It also sends what helps with a diagnosis:
- the plant's name and variety, how long ago it was planted and what it's growing in;
- your growing zone, town and recent weather;
- your last few journal notes for that plant, and anything you typed with the photo.
Before a photo is sent, Planted removes its hidden details (EXIF data), including any GPS position and camera information. Google uses the photo to answer, under the Gemini API terms. On our paid plan Google doesn't use it to train its models. Google may keep requests for a limited time to detect abuse. The result is saved on your phone, in the plant's journal.
Only photos you choose to check are sent. Journal photos stay on your phone.
Crash reports
If the app crashes, it sends a crash report to Google's Firebase Crashlytics so we can fix the bug. A report contains your device model, iOS version, app version, what the code was doing when it crashed and a random identifier for this installation. It doesn't include your garden, photos or location.
App security check
Firebase App Check uses Apple's App Attest to confirm that requests come from the real Planted app, so others can't misuse the plant doctor. It shares a device-generated attestation with Google, not personal information.
Purchases
Planted Premium is a subscription sold through the App Store. Apple handles payment. We never see your card details, name or Apple ID.
What we don't do
- No ads, and no advertising or analytics trackers.
- We don't track you across other apps or websites.
- We don't sell or rent your data, or share it with anyone except the services above.
Notifications
Watering and frost reminders are scheduled on your phone. You can turn them off at any time in iOS Settings, under Notifications.
Children
Planted isn't directed at children under 13, and we don't knowingly collect personal information from them.
Your choices
- Use a ZIP code instead of sharing your location, or turn location off in iOS Settings.
- Don't use the plant doctor if you'd rather no photos leave your phone. Everything else works without it.
- Delete the app to erase everything it stored on your phone.
- If you're in a region with privacy rights (for example California, the EU or the UK), you can ask us what we hold about you or ask us to delete it. We hold nothing tied to you, but we'll help with requests to Google too.
Changes
If we change what Planted sends or who receives it, we'll update this page and the date above before the change ships.
Contact
Questions about privacy: plantifyleaf@gmail.com