Canopy

Privacy Policy

Last updated: October 20, 2026

The short version: Canopy stores the plants, photos and care log you put into it so it can look after them with you. Photos you submit for identification or a health check are analysed by OpenAI. We don't run analytics or ads, we don't sell data, and you can delete everything from inside the app.

1. Who we are

Canopy is made and operated by Kealy Studio, based in Spain. This policy explains what information we collect when you use the Canopy mobile app and this website, how we use it, who else is involved, and the choices you have. If anything here is unclear, email us at johnckealy.dev@gmail.com.

2. What Canopy does

Canopy is a care journal for houseplants. You photograph a plant, the app identifies it and writes a care guide, your phone reminds you when to water, and photo health checks tell you how each plant is doing over time. Along the way it keeps track of where each plant lives in your home and whether it is safe around cats. Almost everything we collect is there so those features can work.

3. Information we collect

Your account

  • Email address — from the account you sign in with, Google or Apple (Apple may give us a private relay address if you choose to hide yours).
  • Name and profile picture — if you sign in with Google we receive the name and picture on your Google account; if you sign in with Apple we receive your name only if you share it. You can also type a name in Settings. The name is optional and only used to greet you.

Your setup

  • Your chosen reminder time and whether you want one daily digest or one reminder per plant.
  • Your device's time zone, so reminders fall at the right local time.
  • The date you finished setting up the app.

Your plants and locations

  • Locations — the rooms or outdoor spots you create: a name, whether it is indoors or outdoors, how much light and wind it gets, whether a cat can reach it, and any note you add.
  • Plants — the nickname you give each plant, its common and scientific names, the care guide the app generates (light, watering, humidity, temperature, cat safety, potting advice and so on), its pot size, the dates you acquired and last repotted it, and any notes you write.
  • Care log — every watering, skip, snooze, repot, move and watering-interval change you record, with the time it happened and any note.

Photos

Photos you take or pick from your library for identification or a health check are resized to about 1024 pixels on the long edge and re-encoded as JPEG before upload. That re-encoding removes the photo's embedded metadata, including any location the camera recorded. Photos are stored in a private storage bucket that only your account can read. The app never asks for your location and never needs write access to your photo library.

Health checks

Each health check stores the AI's assessment (status, summary, issues, suggested actions, repotting advice, a confidence score and a suggested re-check date), the note you optionally added, the name of the AI model used, and the photos you submitted.

AI usage log

Every identification, care guide and health check writes one small record: the kind of request, the model used, how many tokens it used, how long it took, and whether it succeeded. This is what enforces the daily limits (see section 5) and lets us keep an eye on costs. The record contains no photos, names or text from your plants.

Notification token

If you allow notifications, the app obtains a push token for your device from Expo's notification service and saves it to your account. Today, all of Canopy's reminders are scheduled on your phone from your own watering log; no server sends you push messages. The token is removed when you sign out and deleted with your account.

Stored only on your phone

  • Your light / dark theme choice.
  • A cached copy of your plants so the app opens quickly and can schedule reminders offline.
  • The scheduled reminders themselves (the next 14 days), which are rebuilt every time you open the app.

What we do not collect

  • No location data: the app has no location permission, and photo metadata is stripped before upload.
  • No analytics, advertising identifiers or crash-reporting software in the app. (Apple and Google may share anonymised crash statistics with us according to the settings on your device; that is governed by their policies.)
  • No contacts, no calendar, no microphone recordings, no health data.
  • No payment details: Canopy is free and has no in-app purchases.

This website

This site is static and sets no cookies of its own and runs no analytics. It is hosted on Cloudflare Pages, which keeps ordinary server logs (such as IP address and pages requested) for security, and it loads the Figtree typeface from Google Fonts, which means your browser requests the font files from Google.

4. How we use your information

  • To provide the app: identify your plants, write their care guides, work out when each one needs water, schedule your reminders and assess plant health.
  • To keep your plants in sync when you sign in on another phone.
  • To send, possibly, a short welcome email when you create an account.
  • To enforce fair-use limits on the AI features and to understand what they cost us.
  • To respond when you contact us.

We do not sell your personal information, we do not share it with advertisers, and we do not use your photos or plant data to train AI models.

5. The AI features and OpenAI

Identification, care guides and health checks are produced by a vision model from OpenAI, called from our own server (your phone never talks to OpenAI directly). What is sent:

  • Identification — the one to three photos you submitted.
  • Care guide — the plant's common and/or scientific name.
  • Health check — today's photos, up to two photos from the previous check and one from the first check, and a text summary of that plant's story: its care guide, the nickname and location name you gave it, the light and position of that location, whether a cat can reach it, your recent waterings, earlier check results, moves and repots, and the note you typed.

Your email address, name and account identifiers are never sent to OpenAI. The plant nickname and location name you chose are included in health checks because they help the model follow the plant's history; if you would rather they were not shared, keep personal details out of those names.

OpenAI processes this data under its API terms, which state that API inputs and outputs are not used to train its models and are retained only briefly for abuse monitoring. The AI features are limited to 30 identifications or care-guide lookups and 20 health checks per account per day.

The results are guidance from a computer model, not advice from a horticulturist or a vet. Identifications can be wrong, and the cat-safety rating is deliberately cautious but is not a guarantee. If you think a pet has eaten a plant, contact a veterinarian.

6. Third-party services

Canopy runs on a small number of services. Each processes data under its own privacy policy and only to the extent needed to do its job for us:

  • Supabase — sign-in and accounts, the database that holds your plants and care log, and the private storage bucket for your photos.
  • Google Cloud — hosts our server (Cloud Run), which handles the AI features and the daily photo tidy-up described in section 7. Nightly encrypted backups of the database may also be kept in Google Cloud Storage.
  • OpenAI — the AI model behind identification, care guides and health checks (section 5).
  • Resend — sends the welcome email.
  • Expo — the tooling the app is built with; its notification service issues the device push token described above.
  • Apple and Google — if you choose "Continue with Apple" or "Continue with Google", they confirm your identity to us and share the details described in section 3.
  • Unsplash — the photograph on the welcome screen is loaded from Unsplash's image servers before you sign in, which means your device requests it from Unsplash.
  • Cloudflare and Google Fonts — this website only, as described above.

Some of these providers are located in, or process data in, the United States. Where that involves transferring data out of the European Economic Area, it happens under the providers' standard contractual clauses or an equivalent lawful mechanism.

7. How long we keep things

  • Your account and everything in it — for as long as the account exists. Deleting your account removes it all at once (section 8).
  • Health-check photos — the app keeps full photos for each plant's three most recent checks and its very first check. For older checks it keeps one photo per calendar month and deletes the rest, so the progress view stays visual without hoarding images. The text of every check is kept. Cover photos are never thinned.
  • Abandoned scans — photos uploaded for an identification you never finished are deleted after 24 hours.
  • Deleting a single plant — removes that plant, its photos, its care log and its health checks straight away.
  • Emails you send us — kept in our mailbox for as long as we need them to help you.
  • Backups — a deleted account may persist in encrypted backups for a limited time before those backups expire. Backups are never restored to bring back a deleted account.

8. Deleting your account

Open Settings → Delete account in the app and confirm. The app first removes every photo in your storage folder, then deletes your account. Deleting the account removes your sign-in identities, profile, locations, plants, care log, health checks, AI usage records and notification tokens in one step, and cancels the reminders on your phone. It cannot be undone. If you can no longer open the app, our data deletion page explains how to ask us by email.

9. Security

Data travels between the app, our server and our providers over TLS, and is encrypted at rest by the providers that store it. Every table is protected by row-level security so an account can only read and change its own rows, your photos live in a private bucket that only your account's folder can be read from, and the app views them through short-lived links that expire after an hour. The keys for OpenAI and our email provider live only on our server, never in the app. No system is perfectly secure, but we have designed Canopy so that one person's plants are never visible to another.

10. Children

Canopy is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has created an account, email us and we will delete it.

11. Your rights

Wherever you live, you can see and change most of your data directly in the app, and delete all of it in one step. If you are in the European Economic Area or the United Kingdom you also have the right to ask us for a copy of your data, to correct it, to restrict or object to how we use it, and to have it deleted. Email johnckealy.dev@gmail.com from the address on your account and we will respond within 30 days.

Our legal bases for processing are: performing our contract with you (everything needed to run the app), our legitimate interests (keeping the service secure and the AI features within fair-use limits) and your consent (notifications, camera and photo-library access, which you can withdraw at any time in your device settings).

If you are unhappy with how we have handled your data, you can complain to your local data-protection authority; in Spain that is the Agencia Española de Protección de Datos (AEPD).

12. Changes to this policy

We may update this policy as the app changes. When we do, we will change the date at the top of this page and, for significant changes, tell you in the app before they take effect.

13. Contact

Questions about this policy or your data? Email us at johnckealy.dev@gmail.com.