Last updated: 14 October 2026
This policy explains what The Botanical Eye (“the app”) does with personal data. The app identifies plants from a photo, checks their health, keeps a garden of your plants on your phone and reminds you to care for them.
We comply with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.
The app has no sign-up, no login and no password. On first launch it creates a random
identifier for your installation (a UUID). Its first eight characters are shown in the app
under Profile › Your ID, for example 3FA8-5F64.
We never ask for, and never receive, your email address or phone number.
The following is stored only on your device and never uploaded to our servers:
Profile › Delete all my data removes all of this from your phone at once.
Everything in this section is removed when you uninstall the app or clear its storage.
Our backend runs on Supabase. Attached to your installation’s random identifier we store:
Partner codes: if you redeem a partner’s code — for example an influencer’s “1 month free” code — we record which partner it was and the amounts of the payments that follow, so that we can pay them a commission on your subscription for up to 12 months. The partner only ever sees totals: how many people used their code and what they have earned. Never who you are.
We do not store the plant photos you scan or the questions you ask (unless you report an answer, as above).
The app uses artificial intelligence — Google’s Gemini models — to identify plants, assess their health and write care advice.
When you scan a plant, the photo is sent from the app to our server, which forwards it to Google’s Gemini API together with your language and, when you track a saved plant’s progress, the earlier diagnoses of that plant. The app first makes the photo smaller (about 1600 pixels on the long side). The result comes back to your phone. The photo is held only for the duration of that request and is never written to storage by us.
When you ask a question about a plant, the app sends your question to our server, together with what it already knows about that plant (its name, health, diagnosis and care tips) and your last few questions and answers about it. Our server forwards this text to the Gemini API; no photo is sent. The answer comes back to your phone, and neither the question nor the answer is stored by us.
Before the first photo leaves your phone, the app tells you this, names Google as the recipient and asks for your permission. If you choose “Not now”, nothing is sent.
Google processes the request under its own terms: https://ai.google.dev/gemini-api/terms and https://policies.google.com/privacy. We use Gemini’s paid service, under which Google does not use the content to improve its products.
Photograph only the plant. Anything else in the picture — a face, a document, the inside of your home — is sent along with it. Likewise, keep personal details out of your questions.
| Purpose | Legal basis (GDPR) |
|---|---|
| Analysing the photos you submit and answering your questions | Performance of a contract, Art. 6(1)(b) |
| Reviewing the AI content you report | Legitimate interest in keeping the AI’s output accurate and safe, and the app stores’ rules for AI apps, Art. 6(1)(f) |
| Usage limits and abuse prevention | Legitimate interest in keeping the service available, Art. 6(1)(f) |
| Giving free Premium to people we choose | Legitimate interest, Art. 6(1)(f) |
| Paying commission to the partner whose code you redeemed | Legitimate interest in running the referral programme, Art. 6(1)(f) |
| Tax and accounting records | Legal obligation, Art. 6(1)(c) |
We do not use your data for advertising or profiling, and we do not sell it.
There are no advertising SDKs and no third-party analytics in the app.
These providers may process data in the European Union, the United Kingdom, the United States or other countries where they operate. Transfers outside the EEA rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
Under GDPR you can ask us for a copy of your data, to correct or delete it, to restrict or object to how we use it, or to receive it in a portable format.
Email aissa.b.code@gmail.com and include your ID from Profile › Your ID, so we can find your records. We answer within 30 days.
You may also complain to the Spanish data protection authority, the AEPD (https://www.aepd.es), or to your local supervisory authority.
The app is for a general audience and is not directed at children. We do not knowingly collect personal data from children under 14. If you believe we hold such data, email aissa.b.code@gmail.com and we will delete it.
No system is perfectly secure. If a breach affects your data we will notify you and the supervisory authority as GDPR Art. 33–34 require.
We update this policy when the app changes. The date at the top always reflects the most recent change.
aissa.b.code@gmail.com