Privacy Policy

1. Introduction

LeafScout ("App", "we", "our", "us") is developed and operated by Fazogirapps. This Privacy Policy explains what information the App handles, why, who else is involved, and what choices you have.

By downloading, installing, or using the App you agree to the practices described here. If you do not agree, please do not use the App.

Contact: fazogirapps@gmail.com

2. Account: Anonymous by Default, Optional Sign-In

The App does not ask you to register. On first launch it signs you in anonymously through Firebase Authentication, which issues a random identifier (for example nRvpC1SnSPUYAANdK6…). That identifier is how your saved plants are grouped together.

2.1 Optional backup with Google or Apple

In Settings → Back up & restore you can sign in with your Google account or, on iPhone, with Sign in with Apple. This links your existing identifier to that account so you can get your collection back on a new phone. Nothing else in the App changes, and you can keep using it without signing in.

If you sign in, Firebase Authentication receives from Google or Apple:

• your email address — with Sign in with Apple this may be a private relay address if you choose "Hide My Email";
• an account identifier issued by Google or Apple;
• with Google, also your name and profile photo address, which Firebase stores with the account. The App does not use or display them.

We use the email address only to show you which account your backup is linked to and to find your data if you contact us. We do not send you marketing email and do not share the address with anyone.

Unless you choose to sign in, we do not collect your name or email address. We never collect your phone number, postal address, date of birth, precise location, contacts, calendar, health data, or advertising identifiers.

3. Information You Provide

3.1 Photos of plants

When you scan a plant, you either take a photo with the camera or choose an existing one from your photo library. That single image is uploaded to our server function and forwarded to Google's Gemini AI for analysis. See section 5 for details.

The App accesses only the specific image you select. It does not browse, index, or upload your photo library.

3.2 Plant records you save

If you tap "Save to My plants", the App stores:

• the photo;
• the AI result: common name, botanical (Latin) name, toxicity indication, watering, light, temperature and fertilizer notes, and tags;
• the date the record was created;
• your watering reminder settings and the date you last marked the plant as watered, if you set a reminder;
• any nickname or note you add.

3.3 Feedback you send

Under a result the App asks whether it was right. Tapping 👍 sends nothing but an anonymous usage event (section 4). If you tap 👎 and send the short form, we store:

• the reason you picked (for example "it's a different plant") and the optional comment you type, up to 500 characters;
• what the AI answered: the botanical name, the problem name for a health check, and how confident it was;
• the App's language, version and platform (iOS or Android), and the time you sent it.

Your photo is not included. Feedback is linked to your anonymous identifier, is used only to find and fix wrong results, and is deleted together with your account. Please do not write personal information in the comment.

4. Information Collected Automatically

5. How the AI Feature Works

This is the part of the App that involves sending your content to a third party, so we describe it plainly.

1. You choose or take a photo.
2. The App resizes it and sends it to our own server function, hosted on Google Cloud Functions in the europe-west1 region.
3. Our function checks that you are within your scan allowance, then forwards the image to the Google Gemini API together with a text instruction asking it to identify the plant, or to assess its health when you use the AI Doctor feature.
4. Gemini returns a text result. Our function passes that result back to the App.

Google processes the image as a data processor for that request under Google's own terms and privacy documentation. We do not control Google's internal processing. Please review Google's Privacy Policy and the Gemini API terms.

We do not use your photos or plant records to train any model of our own.

6. Where Your Data Is Stored

• On your device. Your plant list lives in a local database on the device and works offline. This is the primary copy.
• In our cloud. Saved plants are also copied to Google Firebase (Cloud Firestore for the text, Cloud Storage for the photos) under your account identifier, so that the list survives if the App is closed unexpectedly and can be restored on the same device — or on a new one, if you signed in with Google or Apple.

Access is enforced by server-side security rules: a request carrying your identifier can read and write only data filed under that same identifier. All traffic uses HTTPS/TLS.

7. Subscriptions and Payments

LeafScout offers an optional auto-renewing subscription ("LeafScout Pro") that removes the daily limit for plant scans and the plant doctor.

We never see or handle your card details. Payment is processed entirely by Apple or Google. We use RevenueCat, Inc. to verify purchases and tell the App whether your subscription is active. RevenueCat receives your anonymous identifier and the purchase receipt from the store.

Subscriptions renew automatically unless cancelled at least 24 hours before the end of the current period, in your App Store or Google Play subscription settings.

8. Third-Party Services

We do not use advertising networks, and we do not share data with data brokers.

9. Device Permissions

• Camera — only to photograph a plant when you choose the camera. Nothing is recorded in the background.
• Photo library — only to let you pick an existing photo. The App reads the single image you select.
• Notifications — only to deliver the watering reminders you set up. Reminders are scheduled locally on your device.

You can withdraw any of these permissions at any time in your device settings. The rest of the App keeps working.

10. Data Retention

Saved plants are kept until you delete them or delete your account. Deleting a plant in the App removes it from your device and from our cloud, including its photo. Feedback you send (section 3.3) is kept until you delete your account.

Technical request logs (no photos) are kept for 90 days for troubleshooting and cost monitoring, then deleted automatically; deleting your account deletes yours right away. Crash reports are kept by Google Firebase for 90 days and usage analytics for up to 14 months.

11. Your Rights and Choices

• Delete a single plant — press and hold it in My Plants, or open it and choose Delete.
• Sign out of your backup — Settings → Back up & restore → Sign out. Your collection is removed from this phone and stays in your backup until you sign in again.
• Delete everything — Settings → Delete Account. This erases your saved plants, their photos, your usage counters, the feedback you sent, your request logs, and your account itself, including the link to Google or Apple. If you used Sign in with Apple, the App's access to your Apple Account is revoked. It cannot be undone. Without the App, see how to request deletion.
• Cancel your subscription — in your App Store or Google Play settings. Deleting your account does not cancel a subscription; you must cancel it in the store.
• Ask us — write to fazogirapps@gmail.com. If you signed in, write from the email address of that account so we can find your data. For anonymous accounts we may be unable to locate your data unless you can supply your anonymous identifier.

12. GDPR — European Economic Area, United Kingdom, Switzerland

Where the GDPR or UK GDPR applies, Fazogirapps is the controller for the data described above. Our legal bases are:

• Performance of a contract — providing identification, saving and backing up your plants, delivering reminders, and applying your subscription.
• Legitimate interests — keeping the service reliable and secure, enforcing the free scan limit, and preventing abuse.
• Consent — optional sign-in with Google or Apple, and camera, photo library, and notification permissions. You may withdraw consent at any time by signing out, deleting your account, or changing permissions.

You have the rights of access, rectification, erasure, restriction, objection, and data portability, and the right to lodge a complaint with your local supervisory authority. Contact fazogirapps@gmail.com.

13. CCPA / CPRA — California Residents

We do not sell personal information and we do not share it for cross-context behavioural advertising. California residents may exercise their rights of access, deletion, and correction using the methods in section 11. We will not discriminate against you for exercising them.

14. Children's Privacy

The App is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has used the App and provided data, contact us and we will delete it.

15. International Data Transfers

Our server function runs in the European Union (europe-west1). Google and RevenueCat may process data in the United States and other countries. Such transfers rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism offered by those providers.

16. Security

All network traffic is encrypted with HTTPS/TLS. Server-side security rules restrict every record to the account that created it, and the daily scan counter and subscription status can be written only by our server, never by the App. No system is perfectly secure, and we cannot guarantee absolute security.

17. Changes to This Privacy Policy

We may update this Policy. The "Last Updated" date at the top always reflects the current version. For material changes we will give notice in the App. Continued use after an update means you accept the revised Policy.

18. Contact Us

Fazogirapps
Email: fazogirapps@gmail.com

We aim to respond within 30 days.