Privacy

herbtwin looks at a photo of a plant and says what it needs. This page says what that involves in plain words.

What is kept

Signed in: your photos, your plants, the answers and the chat under them are kept in Supabase (hosted in the EU) so the app can remember your plants.
Signed out: nothing is kept on disk. The answer stays in the server's memory for an hour, so you can ask follow-up questions, then it is gone.
Locations are rounded to about 1 km before anything uses or keeps them.
To keep the site within its limits we count photo reads per visitor per day. The visitor is stored as a scrambled code made from your internet address, never the address itself.

Nebius Token Factory runs the AI models that read your photo and write the advice. The photo is sent with its location data stripped.
LangSmith keeps a record of the AI model calls (the text sent and returned, timings and cost) so we can see how the site is doing and which advice worked. It gets no photos, email addresses or locations, only place names.
Supabase stores signed-in accounts and their plants.
Resend sends the sign-in emails.
Open-Meteo gets a rounded location to look up the weather.
Web search services (Tavily, Exa, TinyFish) get a search built from the plant's name or your chat question when the app looks something up on gardening sites.
Cloudflare and Google Cloud carry and run the site.

Signed in, go to My plants and choose Delete account. Your photos, plants, answers and sign-in are deleted.

Questions: open an issue on the project's GitHub repository.