Legal
Privacy Policy
Last updated: August 2, 2026
This Privacy Policy explains how SKIX K.K. (“SKIX”, “we”, “us”), a company incorporated in Japan, collects, uses, and protects your personal data when you use Plant Mania — the web application, the iOS app, and the Android app (together, the “Service”). If anything here is unclear, contact us at [email protected].
1. Data We Collect
We collect only what we need to run the Service:
- Account information — your email address and display name, when you create an account (including via Sign in with Apple or Google).
- Plant photos — the photos you submit for identification. They are sent to Google Vertex AI (Gemini) for analysis. The original photo is not stored on our servers afterwards; a small thumbnail generated from it is saved with your plant record so the app can show your plant in your list, and it is deleted together with your data.
- Plant records and care plans — the plants you save, your questionnaire answers, care tasks, and health-check history.
- Device push tokens — if you enable notifications, so we can send you care reminders.
- Purchase and subscription state — whether you have an active Premium subscription, reported to us by Apple or Google. We never see or store your payment card details.
2. How We Use Your Data
We use your data to:
- identify plants and generate personalized care plans;
- store and sync your plants and plans across your devices;
- send care reminders and service notifications you have enabled;
- manage your subscription entitlements;
- provide customer support and keep the Service secure and reliable;
- comply with legal obligations.
We do not use your photos or personal data to train AI models, and we do not use your data for advertising.
3. Third-Party Processors
We rely on a small number of service providers to operate Plant Mania, each processing data on our behalf:
- Google Firebase / Google Cloud — authentication, database, hosting, and AI processing (Vertex AI / Gemini for plant identification).
- Apple (App Store) — subscription billing and receipt validation for purchases made on iOS.
- Google Play — subscription billing and receipt validation for purchases made on Android.
These providers are bound by their own contractual and legal obligations to protect your data.
4. No Sale of Personal Data, No Advertising
We do not sell your personal data, and we never have. The Service contains no third-party advertising and no advertising trackers.
5. Data Retention and Deletion
We keep your account data and plant records for as long as your account exists, so the Service can work as you expect. Original photos submitted for identification are not retained on our servers after processing; only the small thumbnail saved with your plant record is kept, and it is deleted when your account is deleted.
You can request deletion of your account at any time by contacting [email protected]. Upon deletion, we remove your personal data — account information, plant records, care plans, and push tokens — except where a limited retention period is required by law (for example, transaction records).
6. Guest Data
In guest mode, your plants and care plans are stored under an anonymous identifier not linked to your name or email. If you later create an account, this guest data is transferred to your account. Guest data that is never linked to an account may be deleted after a period of inactivity.
7. Security
We protect your data with industry-standard measures, including encryption in transit (TLS), encryption at rest on our cloud infrastructure, access controls that limit data access to those who need it, and authentication provided by Firebase Authentication. No system is perfectly secure, but we work to keep risk to a minimum and will notify you and the relevant authorities of any data breach as required by law.
8. Children
The Service is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it.
9. International Data Transfers
Your data is processed and stored on Google Cloud infrastructure located in the Japan region. Where a service provider processes data outside your country, we ensure appropriate safeguards are in place consistent with applicable data protection law, including Japan's Act on the Protection of Personal Information (APPI).
10. Your Rights
Subject to applicable law, you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to certain processing, and to receive a copy of data you provided. To exercise any of these rights, email [email protected]. We will respond within a reasonable period and in accordance with applicable law.
11. Contact
SKIX K.K. — [email protected]. Privacy inquiries are welcome in English or Japanese.
12. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will give notice through the Service or by other reasonable means before the changes take effect. The date at the top of this page always shows when the policy was last revised.