Privacy Policy
Last updated: November 4, 2026
CactusTracker is provided by DirtyBird Soil. It helps you save cactus and succulent records, photos, care schedules, locations, notes, and Archive history. This policy explains what information the app collects, how it is used, and the choices you have.
Information You Provide
CactusTracker may store information you choose to enter, including:
Account email address, account identifier and authentication information used to create and access your account.
First name and last name, if you choose to provide them when creating an account.
Cactus or succulent names, including human, common and scientific names; Collections; location labels; soil information; Growth Journal notes; progress photos; and care dates and history.
Photos you upload or take for your cactus and succulent records, plus an optional profile photo.
Watering and feeding schedules used to create care reminders.
An optional city and country used to choose a broad seasonal care calendar. CactusTracker does not request a precise address for this feature.
How Information Is Used
We use this information to:
Show your saved cactus and succulent records in the app.
Sync your records to your account so they can be restored or viewed from another device.
Deliver watering and feeding reminders through mobile push notification providers in distribution builds, and schedule local reminders where supported, when you turn reminders on.
Adjust automatic care timing for broad local seasons when you choose a seasonal care city.
Let you organize records into Collections and move dead plants to the Archive.
Create a read-only plant link when you choose to share an individual plant.
Provide app support, protect accounts, prevent abuse, maintain the service and meet applicable legal obligations.
Camera, Photos, and Notifications
CactusTracker asks for camera or photo library access only when you choose to add or change a plant or profile photo. CactusTracker asks for notification permission so it can remind you when saved cactus and succulents are due for watering or feeding. You can change camera, photo, and notification permissions in your device settings.
Account and Data Storage
CactusTracker uses authentication, cloud database and storage service providers for account login, authentication, cloud syncing of saved cactus records, and private storage of plant photos and optional profile photos. Some data may also be stored locally on your device so the app can keep working smoothly and remember your settings.
AI Features and Your Permission
Current iPhone and Android builds require agreement to AI sharing to use the app. The separate AI setup step appears before account creation or first use, before information is sent for AI processing. It identifies the recipients and data. Agree and continue completes setup; Cancel stops setup without creating an account or deleting an existing account or its saved plants. Your choice is saved separately for each account on each device. Existing permission remains valid when the data and recipients have not changed. Older app versions and the website may show different permission controls; update the native app to use the current setup flow.
Ask: OpenAI processes your question, recent chat messages, any plant photo used for the question, and saved plant details such as the plant's names, location, soil, care dates and intervals, and notes.
Photo identification: Pl@ntNet, OpenAI or Meta may process photos to identify a plant. Photos may be processed by more than one of these listed providers to complete identification.
Care suggestions and Field Guides: OpenAI processes plant names and requested care or guide fields when bundled or saved information is missing. Bundled information avoids an AI request when it already supplies the requested details.
We send plant photos, questions and relevant plant details to the AI providers listed above through CactusTracker's hosted server functions. This content may contain personal information you include, such as identifying details in photos, questions, location labels or notes. Your account email, profile name and login credentials are not deliberately included as account information in AI requests. Your account password is not included. A plant name alone generally does not identify you, but content you add may do so. Avoid including sensitive information that is unnecessary for plant care. AI answers are guidance and can be wrong. Review identification and care suggestions before acting on them.
You can withdraw AI permission in Profile → Help → AI permissions. Withdrawing permission pauses access to the app on this device and returns you to its setup screen. It cancels active requests where possible and prevents new AI requests from this device. You can agree again to resume access, or use the Support page to request account/data deletion without granting AI permission. It cannot recall information already sent to a provider and does not erase saved answers or plant records. AI permission on another device must be changed on that device. Contact support for help with deletion requests concerning information already processed by a provider.
Server Care Reminders
When enabled in the distributed iPhone or Android app, CactusTracker registers a device push token, platform, installation identifier, time zone and preferred reminder time with its reminder service. The service uses your saved plant care schedule to prepare notifications, delivered through mobile push notification providers. Push tokens and account associations are used for delivery, not advertising tracking. Turning reminders off or signing out requests removal of the device registration when the device can reach the service. Device notification permission can also block delivery independently of your saved reminder choice.
Feedback, AI Reports and Diagnostics
If you send feedback or report AI content in the app, the message, expected behavior, device type, app version, optional screenshot and optional reply email are sent through our hosting and email delivery providers to the CactusTracker support mailbox. Your signed-in session authorizes the feedback request; it is not sent to the AI providers for this purpose. Only attach information you want support to receive. Android startup diagnostics and bounded performance timings may be kept locally on your device. The app does not automatically upload its local diagnostic report; you choose whether to copy and share it with support.
Service Providers and Other Disclosures
We use service providers for cloud hosting and server processing, account authentication, database and private photo storage, account protection, email delivery, mobile notifications and city search. These providers process the information needed for their roles, such as account records, saved content, city queries, push registration details, support messages and technical request information. Technical information may include IP addresses, browser or device details, request times and operational or security logs. AI recipients and their processing are described in the AI section above. We do not use these services for cross-app advertising tracking.
We may also disclose information when reasonably necessary to comply with applicable law, respond to valid legal requests, protect people or enforce our rights.
Retention and Deletion
Saved account records and photos are retained to provide your collection until you delete the records or request account deletion. Some settings, cached data and recent AI results are also stored locally on your device. Turning AI off does not delete that saved information. Feedback messages and attachments remain in the support and email systems to handle your request; contact support to request their deletion.
Account deletion removes the app's active account data and photos through its deletion service. Data already sent to AI, hosting, email or push providers may be subject to separate security, abuse-prevention, backup or legal retention practices. We cannot promise immediate removal from all third-party systems or backups. Contact support for an account or provider-data deletion request and information about applicable retention. Provider terms and actual service configurations must be considered when fulfilling that request.
Seasonal Care City Search
If you search for a Seasonal Care Region, the city-and-country text you enter is sent through CactusTracker's server functions to a city-search service provider to return matching cities. CactusTracker stores the city label, country, time zone, and broad latitude needed to choose a seasonal calendar; it does not request or store a street address or device GPS position for this feature. If you choose Not now, CactusTracker stores a broad estimate based on the device time zone instead.
Data Sharing, Ads, and Tracking
We do not sell your personal information. CactusTracker does not show third-party ads and does not use your information for cross-app or cross-website advertising tracking. Your information is used to operate CactusTracker, provide the features described in this policy, and support the app.
If you choose Share plant, CactusTracker creates a read-only sharing link containing that plant's primary shared photo, human name, common name, scientific name, and earned Unique Find award when available. The link does not include your email, plant location, private journal notes or progress photos, care history, or reminder dates. Anyone who has the link can open it until you stop sharing the plant. Moving the plant to the Archive or deleting it also makes the shared page unavailable. Disabling a link cannot remove screenshots or copies someone has already made.
Your Choices and Privacy Rights
You can choose not to add photos, not to enable notifications, or to delete cactus records from the app. You can turn care reminders off in Settings. You can stop sharing an individual plant at any time from that plant's Share plant controls. Clearing app or browser storage may remove local settings and require you to sign in again; it does not itself delete cloud account records.
Depending on where you live and applicable law, you may have rights to access or obtain a copy of your personal information, correct inaccuracies, request deletion, restrict or object to certain processing, request a portable copy of eligible information, withdraw consent where processing relies on consent, or complain to your local data protection authority. Email Hello@CactusTracker.App to make a request. We may verify your identity and will respond as required by applicable law. Some rights are subject to exceptions.
Where applicable data protection law requires a legal basis, we process information as necessary to provide the service you request, for legitimate interests such as security and support, to meet legal obligations, or with consent where required.
Account and Data Deletion
You can delete individual cactus and succulent records inside the app. You can also delete your account from Settings by choosing Delete account and confirming the request. This deletes your cactus and succulent records, stored account/profile data, plant photos, optional profile photo, and CactusTracker login account through the deletion service. You can also request deletion without installing or signing into the app: email us with the subject “CactusTracker account deletion” and the email address associated with your account. We may ask you to verify ownership; do not send your password. Uninstalling the app, signing out or withdrawing AI permission does not delete your account. Tell us if you also want related support messages or information previously sent to providers considered for deletion. For requests or help, contact us at Hello@CactusTracker.App.
International Processing
Our service providers may process or store information outside your country of residence, where privacy laws may differ. Where applicable law requires safeguards for international transfers, those safeguards must apply to the relevant processing. Contact us for information about a transfer involving your data.
Security
We use authentication, access controls, private storage and encrypted network connections to help protect information. No system can guarantee absolute security. Protect your password and avoid including unnecessary sensitive information in photos, plant records, AI questions or support messages.
Children's Privacy
CactusTracker is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and address it.
Changes To This Policy
We may update this policy as CactusTracker changes. When we do, the updated date at the top of this page will be changed. We will provide additional notice or request permission where required.
Contact
If you have questions about this privacy policy or need support, email Hello@CactusTracker.App or visit www.DirtyBirdSoil.com. You can also visit the CactusTracker Support page.
Contact
Hello@CactusTracker.App