Privacy Policy

Last updated November 6, 2026

Plantistry is operated by Blufish LLC, which is responsible for the personal information described below.

This policy explains what Plantistry collects, why, and what control you have. The short version: we collect what the product needs to work, we use Meta's pixel to measure our own advertising and nothing else, we never sell your data, and we delete your account and data on request.

What we collect

• Account information: your name, email address, and a hashed password.
• Your records: the plants, photos, breeding and lab data, notes, and other content you enter. This is the product; it belongs to you.
• Marketplace activity: listings, orders, offers, trades, and messages between members. Shipping addresses entered at checkout are collected by Stripe and shared with the seller so they can ship your order.
• Payment information: handled entirely by Stripe. Card numbers never touch our servers. We store references such as your Stripe customer ID and subscription status.
• Technical basics: standard server logs (IP address, request path, timestamp) kept briefly for security and debugging.

What we do not do

• We do not sell or rent your personal data, and we do not run an ad network of our own.
• We do not put your garden in an ad. The pixel described below sends page views and a handful of moment-events, hashed identifiers, and nothing else — no plants, no photos, no notes, no card details.
• We do not load the pixel for visitors in the EU or UK before they say yes.

Advertising and analytics

We advertise Plantistry on Facebook and Instagram. To see which ads bring people who actually use the product, rather than people who clicked and left, we use Meta's pixel on this website and in the app. It is operated by Meta Platforms Ireland Ltd, and in the United States by Meta Platforms, Inc.

What it sends:

• the pages you open on plantistrylabs.com;
• events at three moments: creating an account, adding your first plant, and starting a Pro trial;
• a SHA-256 hash of your email address and of your user id. A hash is a one-way scramble: it lets Meta match the record to an account it already holds, and it cannot be read back into an address. We never send your email address or your name in the clear.

What it is for: working out which ads bring people who use Plantistry, and which ones do not earn their keep. That is the whole purpose. We do not use it to target advertising at you elsewhere, and we do not sell what it reports.

Meta may connect what the pixel reports with your Facebook or Instagram account if you have one, and it handles that data under its own privacy policy at facebook.com/privacy/policy. The pixel also sets Meta's own cookies on this site, _fbp and _fbc.

If you are in the EU or the UK

You are asked first, in a banner at the bottom of the page. Until you accept, the pixel is not loaded at all: no request reaches Meta and no Meta cookie is set. Saying no costs you nothing — the site works the same, it just means we cannot credit your visit to an ad. Your answer is stored in a cookie, plantistry_consent, for 180 days, and we ask again when it expires.

The banner is on the marketing site, and your answer covers the app too. If you said no, or you are in the EU or UK and have not said yes, the app does not load the pixel and our server does not report your account's events to Meta either: not the signup, not your first plant, not a trial.

How to opt out

• Turn on your browser's tracking protection, or use an ad blocker. The pixel is an ordinary script and blocking it works.
• In the EU or UK, choose "No thanks" in the banner.
• Opt out of Meta's advertising in your Meta ad preferences at accountscenter.meta.com/ad_preferences.
• Delete the _fbp, _fbc and plantistry_consent cookies in your browser settings.

Anything unclear about this, or you would rather we did not measure your visit at all? Write to support@plantistrylabs.com and we will sort it out.

Who processes data for us

• Stripe for payments, subscriptions, and seller payouts.
• Meta Platforms Ireland Ltd (and Meta Platforms, Inc. in the US) for advertising measurement, as described above.
• Amazon Web Services for hosting, database, and photo storage (US region).
• Amazon SES for transactional email such as password resets and marketplace notifications.
• Apple, Google Play and RevenueCat for subscriptions bought in the iOS or Android app. RevenueCat confirms the purchase with Apple or Google and tells us which plan your account has. Your card details stay with Apple or Google.
• Expo, Apple's push service and Google's Firebase Cloud Messaging to deliver the task reminders you turn on.
• Pl@ntNet and OpenAI for plant identification. When you ask Plantistry to identify a plant, by tapping Identify or adding plants with Photo walk, that photo is sent to them and they send back a suggested name. Only the photo is sent: not your name, your email, or anything else from your account. It happens only when you ask for it, and the suggestion is never applied without you seeing it.

Each processes data only to provide their service to us, under their own security and data processing terms.

Emails

Most of what we send is about your account: password resets, billing, task reminders you turn on, and notifications about your marketplace activity such as new messages, offers, and trades.

We also send occasional product news (new apps, major features). Every one has an unsubscribe link, and you can turn it off in your profile settings or the app's Account screen. Turning it off never stops the account emails above.

Retention and deletion

Your data is kept while your account exists. To delete your Plantistry account and its data:

• In the iPhone or Android app: tap the person icon at the top right, then Delete account, and confirm with your password.
• By email: write to support@plantistrylabs.com from your account email address; we process deletions promptly.

Deletion cancels a subscription billed on the web (one bought in the iPhone or Android app is cancelled in that store's subscription settings), withdraws your listings, removes your photos and messages, and scrubs your name and email from our systems. Transaction records that we must keep for tax and accounting purposes are retained in de-identified form. Backups age out within 30 days. Cancelling a Pro subscription, by contrast, is self-serve on the Billing page and never deletes anything.

Your rights

You can access and correct your information in the app at any time. Depending on where you live (including the EU, UK, and California), you may have additional rights to access, export, correct, or erase your personal data, and the right to complain to a supervisory authority. To exercise any of these, use the in-app tools or email support@plantistrylabs.com. We do not discriminate against you for exercising privacy rights.

Children

Plantistry is not directed at children and may not be used by anyone under 16.

Changes

If this policy changes materially, we will give notice in the app or by email before the change takes effect.

Contact

Blufish LLC
support@plantistrylabs.com