Privacy Policy

Axxa Media, LLC ("we," "us," or "our") respects the privacy rights of all users of PlantDr AI. This Privacy Policy outlines our practices regarding the collection, processing, protection, and disclosure of personal and technical data gathered through the PlantDr AI mobile application and associated web interfaces.

Data Controller:
Axxa Media, LLC
Address: 5005 W. Laurel St, Suite 100, Tampa, Florida 33607 (Attn: Legal Department) [Registered Agent Office placeholder: pending formal counsel filing]
Privacy Desk: [email protected]

We collect data strictly necessary to provide botanical analysis and maintain application reliability:

1. Authentication & Account Data: To provide account registration, secure sign-in, identity verification, and account management functionality, we may use third-party authentication and identity management service providers. These providers may process account identifiers, contact information (such as email address), authentication-related data (including session tokens, credential metadata, or third-party sign-in tokens), and technical information necessary to provide and secure the Services. Our use of these providers is subject to applicable privacy laws and our data protection practices.

1. Uploaded Plant Imagery: Photographs of plant leaves, stems, blooms, and symptoms captured via the camera or selected from device media. Photos are transmitted via TLS 1.3 to secure cloud application services for diagnostic analysis. Images saved to "My Garden" are associated with your account profile.

1. Botanical & Care Telemetry: Plant profiles created in "My Garden" (species name, plant nickname, acquisition date, watering frequency, custom care notes, health vitality scores) and lux light measurement logs.

1. AI Inquiries & Conversations: Diagnostic symptoms submitted to the Guided Refinement Wizard and queries posed to the "Ask AI Botanist & Pathologist" feature. Requests are routed through our secure backend application services to enterprise third-party artificial intelligence service providers. Prompts and photos are processed statelessly and are NOT used to train foundation models under commercial enterprise agreements.

1. Subscription & Purchase Information: Entitlement status, product ID, and anonymous purchase tokens verified via subscription management services. We do not store or process payment card details.

1. Advertising Data (Free Tier Only): In the ad-supported Free tier, third-party advertising services collect mobile advertising identifiers (IDFA/GAID), IP address (coarse location), and ad impression metrics. Governed by a certified Consent Management Platform (CMP). Completely disabled for Premium subscribers.

1. Device & Diagnostic Telemetry: Camera sensor telemetry (exposure, resolution), device hardware model, operating system, and crash logs retained for up to 30 days.

We process data under the following GDPR legal bases:

• Contractual Necessity: Maintaining your account, performing botanical image analysis, and managing "My Garden" records.
• Legitimate Interests: Enhancing diagnostic reliability, maintaining server security, and diagnosing crash events.
• Consent: Operating advertising via third-party partners in jurisdictions requiring consent (EEA/UK), accessing device camera, and sending care reminder push notifications.
• Legal Obligation: Complying with tax and statutory recordkeeping mandates.

Our verified technical service providers include:

• Authentication & Identity Management: Third-party authentication and identity management service providers (user identity verification, session security, and access controls).
• In-App Subscription Management: Third-party subscription management services (receipt validation, purchase verification, and in-app entitlement management).
• Artificial Intelligence Infrastructure: Google LLC (Google Cloud) as enterprise artificial intelligence infrastructure subprocessor, alongside potential alternative enterprise AI service providers. Multimodal recognition systems, computer vision models, and generative reasoning are processed statelessly under commercial terms with zero foundation model training retention. Axxa Media does not assert exclusive operation with any single AI vendor and may adapt AI technology services over time.
• Mobile Advertising & Consent (Free Tier): Google LLC (advertising mediation and consent management framework).
• App Stores: Apple Inc. & Google LLC.
• Cloud Infrastructure & Web Hosting: Third-party cloud infrastructure and web hosting service providers for website delivery, network security, and content distribution.

Retention:
We retain personal botanical records while your account remains active. Upon verified account deletion, personal plant records, uploaded photos, and chat logs are permanently purged from active systems within thirty (30) calendar days.

Security:
All data in transit is encrypted using HTTPS and TLS 1.3. Local device storage uses encrypted on-device local storage and platform-native secure storage. Backend infrastructure employs role-based access control and principle of least privilege. For suspected account compromise or security support, contact [email protected].

You possess statutory rights to:

• Access and obtain a portable copy of your personal plant data.
• Correct inaccurate or outdated plant records.
• Request complete deletion of your account and data via our Account & Data Deletion Page.
• Opt out of advertising personalization via the in-app "Privacy Choices" settings.

To exercise these rights, email [email protected]. We fulfill verified requests within thirty (30) days for GDPR and forty-five (45) days for CCPA.

PlantDr AI is not intended for children under 13. We do not knowingly collect personal data from children under 13. Any identified child data will be promptly purged upon notice to [email protected].

For privacy-related inquiries:
Axxa Media, LLC
Attn: Data Privacy Officer
Email: [email protected]
Physical Notice Address: 5005 W. Laurel St, Suite 100, Tampa, Florida 33607 (Attn: Legal Department) [Registered Agent Office placeholder: pending formal counsel filing]