Privacy Policy

The controller responsible for your personal data is:

Dr. Phyto is designed, built and technically operated on the controller's behalf by Domaniai LLC (the developer), which therefore also acts as a processor.

• Photos you upload. Used to identify the plant and its condition. EXIF metadata (including any GPS location) is removed in your browser before the photo is uploaded. The image is sent to our vision and AI providers for analysis and is then discarded — we do not keep a permanent library of your photos.
• Your messages. The text you type during the diagnostic conversation, processed by our AI to produce the diagnosis and treatment plan, and stored with your session so the plan and follow-ups keep working.
• Diagnosis & care-plan data. The resulting diagnosis, treatment steps, dates and reminders, stored so you can return to your plan.
• An anonymous identifier. A random ID stored in a cookie, used for rate-limiting and to link your session to its care plan. It is not linked to your real-world identity.
• Push subscription (optional). If you enable reminders, the technical endpoint your browser provides so we can send push notifications. You can disable this at any time.
• Account & billing data (paid plans). Your email address — entered up front when you start the free trial (it is the trial's key and lets us provide your plant's care plan), and used when you sign in (a passwordless magic link) or subscribe. If you add billing details in Settings (name, company, postal address and EU VAT ID), we store them and send them to our payment provider so they appear on your invoice. Subscription billing is handled by our payment provider; we never receive or store full card numbers.
• Technical data. Limited server logs (e.g. IP address, timestamp, error traces) needed to operate the service securely and to diagnose faults.

Dr. Phyto is about plant health, not human health — please do not upload photos that identify people, and do not enter other people's personal data.

• To deliver your diagnosis, treatment plan and follow-up checks.
• To send the reminders you opt into.
• To keep the service secure and prevent abuse (including rate-limiting).
• To process subscriptions and payments (paid plans).
• To monitor and fix errors so the service stays reliable.
• To comply with our legal obligations (e.g. accounting and tax for paid plans).

• Performance of a contract (Art. 6(1)(b)) — delivering the diagnosis, care plan and any subscription you request.
• Consent (Art. 6(1)(a)) — optional push reminders; you can withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f)) — security, abuse prevention, error monitoring and improving the service, balanced against your rights and freedoms.
• Legal obligation (Art. 6(1)(c)) — keeping accounting and tax records for paid subscriptions.

Dr. Phyto's diagnosis and treatment plan are generated by an AI model from your photo and your answers. This is decision-support, not a binding or legal decision about you: it produces no legal or similarly significant effect within the meaning of Art. 22 GDPR. Always check any treatment against the product label and your local rules before acting.

We use carefully selected providers (processors). Each handles only the data needed for its role:

• Kindwise s.r.o. (Czech Republic, EU) — plant identification and crop-health vision. Your photo is processed to identify the plant; not retained by us. Privacy
• Anthropic PBC (USA) — the AI model that powers Dr. Phyto. Your message text and the content of your photo are processed to generate the diagnosis. API inputs are not used to train their models. Transfer to the USA relies on EU Standard Contractual Clauses. Privacy
• Supabase (Supabase Inc., USA; data hosted in the EU — Frankfurt) — the database that stores your sessions, messages, care plans and (paid) account data. Privacy
• Resend (Resend, Inc., USA) — delivers our sign-in (magic-link) emails. Processes your email address only to send the login link. Transfers rely on Standard Contractual Clauses. Privacy
• Hetzner Online GmbH (Germany, EU) — server hosting; also runs our reminder scheduler and search index. Privacy
• Cloudflare, Inc. (USA; EU edge network) — content delivery, encryption (TLS) and security/DDoS protection. Processes connection data such as your IP address to deliver and protect the site. Transfers rely on Standard Contractual Clauses. Privacy
• Sentry (Functional Software, Inc.; EU region, de.sentry.io) — error monitoring to keep the service reliable. Configured not to collect cookies or your IP address — technical error data only. Privacy
• Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc., USA) — payment processing once subscriptions launch. Stripe handles your payment details directly under the PCI-DSS standard; we never receive full card data. Privacy
• Google Ireland Limited (Ireland, EU; Google LLC, USA) — Google Analytics 4, loaded only after you accept analytics cookies, to understand how the site is used. IP addresses are anonymised and we do not use it for advertising. Transfers rely on Standard Contractual Clauses. Privacy

Most processing happens inside the EU. Where a provider is based in the USA (Anthropic, Cloudflare, Stripe, Google, and Supabase as a company — though its data is hosted in the EU), transfers are protected by the European Commission's Standard Contractual Clauses together with appropriate technical and organisational safeguards.

• Uploaded photos: not retained — processed for the diagnosis, then discarded.
• Diagnostic sessions, messages & care plans: up to 24 months from your last activity, then deleted — or sooner on request.
• Push subscriptions: until you disable reminders or the subscription expires.
• Account & accounting records (paid plans): as required by Cypriot law (a minimum of 6 years for accounting records).
• Server logs: short-term, for security and fault-finding only.

Under the GDPR you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — have your data deleted where there is no overriding reason to keep it.
• Restriction — ask us to limit processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — at any time, for anything based on consent (e.g. reminders).

To exercise any of these, contact [email protected]. We respond within 30 days. Because most of your data is tied only to an anonymous identifier, please send your request from the same browser/session, or include details that let us locate your data.

If you believe we have mishandled your data, you can lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus), or with the supervisory authority in your own EU country.

We use cookies strictly necessary to run the service and, only after you accept analytics cookies, Google Analytics — no advertising cookies. See our Cookie Policy for the full list.

Dr. Phyto is not directed at children. If you are under 16, please use it only with the involvement of a parent or guardian.

We may update this Privacy Policy from time to time. The “last updated” date above always reflects the current version; significant changes will be highlighted on the site.