Privacy, in plain words

What happens to your photo

When you scan a plant, your photo travels encrypted (HTTPS) to our server and is passed to Anthropic's Claude API — and, when the specialist identifier is enabled, to Kindwise's plant.id API — for one purpose: producing your diagnosis. Under Anthropic's commercial terms, API inputs are not used to train their models. We do not store your photo on our servers. The copy you see afterwards — your saved plants, their photos, your check history — lives in your browser's storage, on your device.

Alongside the photo, the request carries your browser's language, the calendar month and your time-zone name (for example "America/Halifax"), so the watering advice can follow your season and hemisphere. None of the three is stored.

To fetch the toxicity record and the species facts, we send the plant's species name only — never your photo — to NC State University's public Plant Toolbox. The species profile shown on the Plant and Care tabs is written once per species (a text-only request to Anthropic containing the species name and those public facts, nothing about you) and then shared by everyone who scans that species.

What we count

We record anonymous product events — a page visit, a tap on the scan button, a scan, a purchase click — with a random session id that disappears when you close the tab. No name, no account, no advertising trackers, no fingerprinting, and our events table stores no IP addresses. There is no Google or Meta pixel on Frondi. If you arrived through a shop's QR code or a friend's link, we record that code so we know which shop or link sent visitors — still with no idea who you are.

Those events go to two places: our own database, and PostHog, a product-analytics service we use to see where people get stuck. We deliberately run it in its most restricted mode: no cookies, no session recording — we cannot watch your screen — no automatic capture of what you click or type, and the identifier it uses is held in memory only, so it is gone the moment you close the tab. We instruct it to discard your IP address. It counts steps; it does not build a profile of you.

One honest footnote: the companies that host Frondi (Vercel, Supabase, Stripe, PostHog) keep standard, temporary server logs — which include IP addresses — to run and secure their infrastructure. That's true of essentially every website. We don't use those logs to identify you.

Cookies

Frondi sets no tracking cookies — not for analytics, not for anything — which is why you've never seen a cookie banner here. We use your browser's local storage for the app to function: your saved plants, your remaining free checks, your purchase unlock.

If you buy

Payments are processed by Stripe. Your card number goes to Stripe, never to us. We receive your email address and payment status so we can unlock the app and restore your purchase later. We keep one record of your purchase (email, Stripe session id, licence) and email your unlock link to the address you paid with. If you use "restore", we look up that record — and Stripe, for older purchases — by the email you type; that's the only thing that email is used for.

If you tell us we got it wrong, or leave an email

Every result has a "Did we get it right?" box. If you tap it or type in it, we store your answer, your words, and the plant's name and verdict — never the photo. Those rows are what we use to build the public accuracy benchmark, so a "no" from you is a test case for us.

If you leave your email for the iPhone-app notice, we store that address for that one message and nothing else — no newsletter, no reminders, no sharing. To have it removed, email the address at the bottom of this page.

Your choices

Clearing this site's browsing data removes everything Frondi keeps on your device — including your saved plants, so export or screenshot anything you love first. For any privacy question, or to ask us to delete purchase records tied to your email, write to miguel@sedamintelligence.com.

Wherever you live

Frondi is operated from Halifax, Canada, and built for plant owners everywhere. Rather than running a different policy per country, we hold ourselves to the strictest standard we know — GDPR-level — for everyone, whether or not a law requires it where you live. The rights those laws grant — seeing your data, correcting it, deleting it — we honour on request from anyone, anywhere: just email. In practice there's very little to request, because we keep so little.

Our providers (Vercel, Supabase, Stripe, Anthropic, PostHog) process data on servers in North America, so what little leaves your device crosses borders to get there. That's covered by their standard data-protection agreements — and it stays as minimal as this policy describes.

The boring-but-true part

We comply with Canada's federal privacy law (PIPEDA), and we designed Frondi to meet the spirit of the EU/UK GDPR and California's CCPA everywhere. Frondi is not directed at children under 13. If this policy ever changes, the date at the top changes with it — we won't quietly move the goalposts.