Last updated: 26 October 2026
This policy explains how the Plumula app (the “App”), published by Vambran Studio (PE Vahan Mambreyan, an individual entrepreneur registered in Armenia; “we”, “us”), handles information. Plumula diagnoses houseplants: you photograph a plant, the App reads the photo with an AI model, and it returns a diagnosis, a care plan and a follow-up chat. By using the App you agree to this policy.
Except for reported content (see “When you report an AI response” below), all of this is stored locally on your device, in the App's own database and private file storage. A copy is also kept in your Cloud Backup on our servers (see below), under an anonymous backup ID; we don't browse it. A plant is removed from both when you delete it in the App. Uninstalling the App removes the copy on your device, not the backup (that is what lets a reinstall bring your plants back); Settings → Delete my data (signed in: Settings → Profile → Delete account) removes the backup too.
To diagnose a plant, the App sends the photo plus the measured facts around it (a light reading, and local weather where available) to our proxy server, which runs on Cloudflare Workers. Our server forwards the request to an AI provider to produce the result. The providers we use are:
Local weather does not use your device's location, even when you allow the map to (see “Location and the map”). It comes from your device's time zone — a settings value, not a sensor: the App looks that zone's approximate coordinates up in a table bundled inside it and asks Open-Meteo (terms & privacy) for the forecast. The coordinates describe a city-sized area rather than you, carry no identifier, and are not stored by us.
Your photos are sent only to Google or Mistral AI — Groq's models are text-only, so a photo is never sent to Groq. The follow-up chat, the “how's it going?” progress updates, and translating a saved diagnosis into another language use the same path — there the text of your message (and, for a follow-up, the plant's latest photo, which again goes only to Google or Mistral) is what gets sent.
Outside of Cloud Backup and everyone's map, we do not store your photos or messages on our server. When you ask for a diagnosis or reply, they are relayed to the AI provider to produce your result and are not written to any database of ours; a copy is kept on our server only in your Cloud Backup (described next); and only a plant you put on Everyone has its photo kept there, to show on everyone's map (see “Location and the map”). Each provider then handles the request under its own policy, linked above. Two things to know here: Plumula currently uses Google's Gemini API and Mistral AI on their free tiers, and under those providers' terms, content sent on a free tier may be used to improve their services (Google's may additionally be reviewed by human reviewers); Groq uses a request only to generate the reply. Because of this, only scan and send what you're comfortable sharing — see the note at the top of this page.
When you allow it, the App reads your device's location while its camera is open and saves it with the plant you photograph, so the plant can stand on your map where you found it. For a photo you pick from your library, the location embedded in the photo (if it has one) is used instead. Location is asked “while using the App” only: it is never read in the background, and the App works the same without it (a plant then has no place until you put one on the map by hand). You can move a plant's pin, remove its place, or turn location off in your device's settings at any time. A plant's place is stored on your device and in your backup.
Everything the App tells you about a plant — the identification, the diagnosis, the care plan, the chat replies — is generated by AI and can be wrong, including the species. It is a helpful second opinion, not professional horticultural, veterinary, or medical advice, and Plumula is not a substitute for a qualified horticulturist, an agricultural extension service, or a vet or doctor.
Please don't act on a result you aren't confident in — particularly for anything you cannot undo, such as pruning, repotting, or applying a fertiliser, pesticide, or other treatment. Never eat, brew, or medicinally use a plant, and never judge whether a plant is safe for a child or a pet, on the basis of this App. Plant identification from a single photo is genuinely unreliable, and some plants are toxic or have dangerous lookalikes. If it matters, confirm with a local nursery, an extension service, or a qualified professional first.
You use the App's suggestions at your own risk, and we are not liable for any loss or damage to plants, people, or animals resulting from acting on them. If the App produces content that is offensive or unsafe, please report it with the flag button on the response, or email us.
The App backs up your plants to the cloud so you can restore them on a new device, get them back after a reinstall, or keep several devices in sync. It is always on: without it, a lost phone or a reinstall would lose your plants. Without an account, the App creates a random, anonymous backup ID and your plants are stored under that ID. To find it again after a reinstall, we keep it linked to the App's install ID on your device (on Android the ID Android gives this app, on iOS an ID the App keeps in your device's keychain).
For Cloud Backup we store on our own Cloudflare servers:
This is kept solely to provide backup, restore and sync, tied to your backup ID (and, once you sign in, to your account), never given to the AI providers above, and never used for ads or profiling. Anyone who has your recovery code can restore that data, so keep it private. Cloudflare stores it on our behalf (Cloudflare privacy policy). Settings → Delete my data (signed in: Settings → Profile → Delete account) erases the cloud copy — every backed-up record and photo (see “Data retention and deletion”).
You can sign in with Apple or Google. They tell us a user ID that is stable for Plumula and, if you let them, an email address (Apple's may be a private relay address); we never see your password. Google also tells the App your name and your Google profile picture, and Apple your name the first time you sign in if you share it: when your profile has no name or picture yet, the App uses them to fill it in (the picture is downloaded once and kept as your profile picture; see “Cloud backup & sync”), and you can change or remove both in Settings → Profile. We keep that ID and email, which backup they open, and for each device you sign in on a session: a random token (we store only a one-way hash of it; the App keeps the token in your device's Keychain or Keystore), the device's kind (such as “iPhone”), its country and when it was last used. For Apple we also keep the token Apple issues to Plumula for your sign-in, encrypted, and use it for one thing: telling Apple to end Plumula's access when you delete your account. Signing up takes the plants on that device into your account; signing in on another device brings them there; signing out takes them off that device and leaves them in your account. In Settings → Profile → Signed-in devices you can see every device signed in and sign any of them out. On the web, sign-in is checked by Cloudflare Turnstile, which looks for automated traffic without asking you anything (Turnstile privacy notice). Settings → Profile → Delete account deletes your account: its sign-ins, sessions, profile and backup, and for Apple, Plumula's access is revoked at Apple too, so it leaves your Apple Account's list of apps using Sign in with Apple.
You can open your garden in a browser at plumula.world. It works on your Cloud Backup: you sign in with Apple or Google, a passkey (your device's Face ID, Touch ID or screen lock), or a recovery code from an earlier version of the App, and the page then reads and updates that backup. For a passkey we store only its public key; the private part never leaves your device. The browser keeps a single, strictly necessary cookie holding a random session token (we store only a one-way hash of it); a session ends after 30 days unused and 90 days at most, and signing out or deleting your backup ends it. Nothing of your garden is kept in the browser after you close the page. A garden started on the web is a backup like any other, and “Delete my data” erases it. How the web app is used is counted without any cookie or identifier, the way the website counts its visits (see “Website visits” under “Information collected automatically”).
A plan bought in the App Store or on Google Play is sold by Apple or Google, who take the payment; the App learns only which plan is active. A plan bought on plumula.world is sold by our online reseller Paddle.com, the Merchant of Record: Paddle collects your email address, your payment details and the country (and, where tax rules need it, the address) you pay from, under its own privacy notice, to take the payment, charge the right tax and send your receipts. We never see your card. From Paddle we receive a customer number, the plan, its status and its dates, and we link them to your garden by a random reference, never by your recovery code. “Delete my data” stops a web plan from renewing; Paddle keeps its records of past payments for as long as tax law requires.
identifierForVendor), so it stays the same if the App is
deleted and installed again. Our server stores
only that identifier, a period (e.g. the month), and a count of
scans. It is not linked to your name, email or device contacts, it carries none of
your plant data, and it is not used for advertising or tracking across apps.
utm_source), and whether your
screen is a touch screen. Its App Store, Google Play and web app buttons go through our server,
which counts the tap and sends you straight on. Plumula on the web reports the same
usage events as the App, plus which way you chose to sign in and whether it worked, with no link to
your garden or backup. From the connection our server reads the country (Cloudflare
provides it) and, from your browser's user agent, the kind of device, its operating system and the
browser or app the page was opened in. To count each visitor once a day without a
cookie, it makes a one-way hash of your IP address and user agent together with a random
value that is deleted when the day ends: your IP address is never stored, and once
that day's value is gone the hash can't be made again or linked to you. Crawlers and automated
tools are not counted. No cookies, no third-party analytics and no advertising trackers are used
on these sites, and the counts are shared with no one.
The App contains no advertising SDK and shows no ads. We do not use your data for advertising, ad personalization, or to track you across other apps or services.
Generative-AI results can occasionally be wrong or inappropriate. The App lets you report an AI diagnosis or chat reply from within the App. When you do, we receive the flagged text, any note you add, and your install identifier (so repeated reports can be correlated), and we store them so we can review the output and improve safety. You can have these deleted at any time — see “Data retention and deletion”.
On-device data is used only to provide the App's features (your plant history, timelines, reminders). Photos and messages are used to produce the diagnosis or reply you asked for. The install identifier is used only to count scans against your plan and to prevent abuse. Analytics and crash reports are used in aggregate to understand usage and fix problems. Store data is used by Apple/Google to process purchases.
We do not sell or rent your personal information. We do not share your plant library with anyone. The only sharing is with the service providers named above — the AI providers that produce a diagnosis or chat reply (Google Gemini, Mistral AI, and Groq), Cloudflare (which hosts our proxy and, if you enable Cloud Backup, stores your backed-up plant data + compressed photos), Open-Meteo (weather for your device's time zone), Google Analytics (usage analytics, through our server), Apple Maps and OpenFreeMap (the map), Google's Geocoding API (place search, through our server), Apple/Google (purchases in their stores) and Paddle (purchases on the web) — strictly to provide their part of the App. What you choose to put on everyone's map or post in a plant's talk is, by design, visible to other people using the App (see “Location and the map”).
Your plants, photos, diagnoses and chats live on your device: delete a plant or a scan in the App, or uninstall the App, to remove them locally. Photos and messages sent for a diagnosis are not retained by us. The scan counter tied to your install identifier is retained so limits still work if you reinstall. A copy of your plant data and compressed photos is also kept on our servers under your anonymous backup ID until you erase it (below); uninstalling the App does not remove the cloud copy.
Visit and usage counts (see “Website visits”) are kept for a limited time: each day's visitor records (a one-day hash, how the visit came, the country and the kind of device) for 60 days, the daily totals for up to 400 days. They contain nothing that identifies you, so they can't be looked up or erased one person at a time.
You can erase what we hold at any time from Settings → Delete my data (signed in: Settings → Profile → Delete account) in the App, or by emailing us (see “Contact”) from the address you signed in with or with your recovery code. This resets the analytics identifier and asks our server to remove the data tied to your install: any reported content is deleted, the scan counter is replaced with an anonymous, one-way hashed record so it cannot simply be reset by reinstalling, and — if you used Cloud Backup — every backed-up record and photo is erased from our servers, as are your plants on everyone's map and everything you posted in their talk. You can also contact us at the address below to make the same request.
Plumula is a general-audience plant-care app and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will address it.
Depending on where you live (e.g. the EEA/UK under GDPR, or California under CCPA), you may have rights to access, correct, or delete personal data and to object to certain processing. Because the App stores your plant data only on your device, you can exercise most of these directly in the App and in your device settings. For anything held on our side (the scan counter, and any reported content), use Settings → Delete my data (signed in: Settings → Profile → Delete account) or contact us below.
Your plant data remains on your device, protected by your device's own security (lock screen, OS sandboxing). All network requests use secure (HTTPS) connections, and our proxy is locked to the App. Cloudflare processes your device's IP address transiently to route requests and rate-limit abuse; we do not store it. No method of storage or transmission is 100% secure.
We may update this policy from time to time. Material changes will be posted here with a new “Last updated” date. Continued use of the App after an update means you accept the revised policy.
Questions about this policy or your data? Contact us at vambranstudio@gmail.com.
This page is the official privacy policy for the Plumula app referenced in its Google Play and App Store listings.