Privacy

What we keep

What you and your household put in, and what we need to run Cultivory. Nothing for advertising.

• Your account: the name and email address your sign-in gives us, the name you choose to show your household, and your text size.
• What your household records: plants, their names and identifiers, timeline entries and notes, care routines, whether animals live there, questions and their answers, and check-backs.
• Where plants live, in your words: a location is what you call it, like “Kitchen window”, and your region is as coarse as you choose to make it. We never record GPS coordinates.
• Photos: we keep copies of your photos with the location and camera details removed, including one at full size. The file you uploaded is deleted once those copies are made, and within 24 hours at most.
• Feedback you send, with its screenshot if you add one.
• What each request cost: which household and person asked a question or identified a plant, and what it cost us, so plans can be run fairly.
• If you pay for a plan: Stripe holds your card and billing address. We keep only a reference to your Stripe customer and subscription.
• When tag orders open: the shipping address you give us, kept for your next order until you delete it, your account or your household.

We use cookies only to make Cultivory work: one keeps you signed in, one remembers your text size, and one remembers your time zone so times show as your clock does. Entries you make without a connection wait on your device until they are sent, and are cleared when you sign out. Cloudflare counts page visits for us, such as which pages load and how quickly, without cookies or anything that identifies you. There are no advertising trackers, and we never sell or rent your data.

Who else sees it

The people in your household, and the services that run Cultivory, each seeing only what its job needs.

• Your household sees its plants and records, according to each person’s role.
• Someone who scans your tag without being in your household learns nothing private. A tag finds a plant; it never opens its record.
• Hosting: Cloudflare carries every connection to Cultivory, stores your photos, and counts page visits without cookies.
• Signing in: Auth0 (Okta) handles your sign-in. An invitation gives Auth0 the invited email address to create a sign-in if one is needed. An unused invitation-created sign-in is deleted when their last invitation ends.
• Sign-in email: email about your sign-in, such as setting or resetting a password or an invitation, is sent through Resend. It receives your email address and the email itself.
• Answers to your questions: your question, the plant’s record and any photos included go to Anthropic’s Claude, without your name or email address. Under its commercial terms, Anthropic does not train its models on what we send.
• Identifying a plant: a resized photo, with its location removed, goes to Pl@ntNet. Reference photos in identification suggestions load from Pl@ntNet in your browser; they are comparison photos, not your uploads, and no page address is sent.
• Plant reference data: we look up plant names, never anything about you, with Open Plantbook, Perenual and Flora Codex.
• Payments: Stripe, when you pay for a plan.
• The people who run Cultivory read feedback you send. To help with plans and support, they can see which households exist, their members’ names, email addresses and roles, and their plan, but not their plants or records.

We share information with anyone else only when the law requires it.

How long we keep it

For as long as your account or household exists, except:

• The file you uploaded, before its location and camera details are removed: deleted within 24 hours.
• A household export: deleted 7 days after it is prepared.
• A feedback screenshot: deleted 90 days after the feedback is closed. The note stays.
• An invitation link: stops working after 7 days.
• Backups: the database is backed up every night, encrypted, and each backup is deleted 30 days after it is made. So something you delete can remain in a backup for up to 30 days, where it is used only to recover from a failure. Photos are not backed up.
• Deleting a household hides it from everyone at once, and deletes it and everything in it 7 days later. Its tags are freed.
• Deleting your account happens at once. Your name, email address and sign-in are removed. What you recorded in a household stays in its history, shown as by “A former member”. Cost records stay, without your name. Photos and questions already sent to identification or to the advice model stay with those services under their own terms.

Your choices

• Download your data from Your settings.
• Take a household’s data out from its settings, as a file with its records and photos.
• Correct anything in the app, where you recorded it.
• Delete your account from Your settings, or a household from its settings.

Children

Cultivory is not for children under 13, and we do not knowingly keep their information. If you think a child has an account, tell us and we will delete it.

Changes

When this page changes, the date at the top changes. For a change that matters, we tell you in Cultivory before it takes effect.

Contact

Cultivory is run by Cultivory, in the United States. Questions or requests: [email protected].