Privacy
What aiflower keeps, and what it does with it.
aiflower is a plant tracker: you photograph a plant, an AI names it and drafts what it needs, and the app keeps that record so it can tell you later what has changed. This page says exactly what that involves — what is stored, what leaves the server, and how to have all of it removed.
There is no advertising, no analytics and no tracking. The app contains no advertising SDK, no analytics SDK and no crash reporter. Nothing you do in it is measured, profiled, or sold, and nothing about you is shared with anyone for marketing.
What is collected
Your account
- Your email address. It is the identity of the account. It is not verified — there is no mail sender wired up — and nothing is ever sent to it.
- Your password, stored only as an argon2id hash. The password itself is never written down and cannot be recovered from what is stored.
- Where you keep your plants — a place name, its coordinates and its timezone, chosen from a search box. This is a town, not your address, and it is asked for because the app is wrong without it: August is midsummer in Porto and midwinter in Christchurch, and what a plant needs this week depends on the weather where it actually sits.
- Optionally, a name and a date of birth. Both may be left blank and the app works identically without them.
Your plants
- The photographs you take, and any captions you add.
- Nicknames, notes, species, care plans, and the record of when you actually watered, fed or repotted something.
- Everything the AI wrote about a photograph — what it saw, what it identified, what it advised — kept so a wrong answer can be read back rather than quietly trusted.
- Any conversation you have with the app about a plant.
What is not collected
No contacts, no location beyond the town you picked, no device identifiers, no advertising ID, no usage analytics. The app asks for the camera so you can photograph a plant, and for notifications so it can remind you to water one. Nothing else.
Where it goes
The server
Everything is stored on a single server run by the operator of this instance, in Germany. Photographs are stored as files on that server's disk; everything else is in its Postgres database. Your plants are reachable only by your own account.
The AI
When you ask aiflower to identify a plant, diagnose one, review a season or answer a question, the photograph and that plant's own records are sent to Anthropic's Claude so it can be read. That is the whole feature. What is sent is the picture, what is known about that one plant, and your town — never your email address, your name, your date of birth or your other plants.
The same applies when you change the language you read in. What the AI has already written about your plants — care plans, what it saw in a photograph, a season's advice — is sent to Claude to be translated into the new language, a sentence at a time and with nothing attached that identifies you. Your own words are not: a note you wrote or a question you asked stays exactly as you typed it.
The weather
The coordinates of the town you chose are sent to Open-Meteo to read the current conditions and the past week. Nothing that identifies you goes with them. Open-Meteo needs no account, which is why it was chosen.
Nobody else
Your data is not sold, rented, or shared for advertising, and there are no other third parties involved. It may be disclosed only where the law requires it.
How long it is kept
Until you delete it. There is no expiry and no automatic cleanup — the point of the app is that a plant's history is still there in three years.
The server is backed up nightly to encrypted-at-rest storage, and those backups are kept for 30 days. So when you delete your account it disappears from the live service immediately, and from the backups within 30 days as they age out.
Deleting everything
Delete your account — it takes your email and your password, and it removes the account together with every plant, photograph, care plan, AI finding and conversation in it. The photograph files are unlinked from disk in the same operation. It cannot be undone.
Children
aiflower is not directed at children and is not intended for anyone under 13.
Your rights
If you are in the EEA or the UK, the GDPR gives you the right to access, correct, export or erase what is held about you, and to object to its processing. Erasure is a button on this site; for anything else, write to the address below and it will be handled. You may also complain to your national data protection authority.
The lawful basis is the contract between you and this service: the data listed above is what the app needs to do the thing you installed it to do.
Changes
If this policy changes, the date at the top changes with it. A change that materially affects what is collected or where it goes will be announced in the app before it takes effect.
Who to write to
aiflower is a personal project run by Ez-Web, Lda (Portugal), which is the data controller. Write to josluis.lopes@gmail.com.