Privacy Policy
Last updated: 29 April 2026
1. Who We Are
Dr. Roots ("the App") is operated by Winners Media Limited ("we", "us"). This policy explains how we collect, use, and protect your personal data.
2. What We Collect
| Data | Purpose | Processor |
|---|
| Email address | Account creation & authentication | Supabase |
| Apple/Google identity tokens | Social sign-in | Apple, Google, Supabase |
| Plant photos | AI analysis for identification & diagnosis | Google Gemini AI |
| AI analysis results | Displaying results, building your plant history | Supabase |
| Room names & location descriptions | Organising your plant collection | Supabase |
| Care notes | Your personal notes about each plant | Supabase |
| Coarse device location (city-level) | Climate-specific care advice (only if you grant permission) | Supabase |
| Photo EXIF metadata (GPS, date) | Improving plant identification accuracy | Google Gemini AI |
| Subscription & purchase data | Managing your subscription | RevenueCat, Apple |
| Crash & diagnostic logs | Fixing bugs and improving stability | Sentry |
| Usage counts | Enforcing free/premium usage limits | Supabase |
3. How We Use Your Data
- Plant photos are sent to Google Gemini AI for identification and health analysis. Photos are not used to train AI models.
- Analysis results, room assignments, location descriptions, and care notes are stored in your private account on Supabase.
- If you grant location permission, your city-level location is stored on your profile to provide climate-aware care advice. We do not track precise GPS coordinates.
- Photo metadata (GPS coordinates, capture date) may be sent alongside photos to improve identification accuracy. This data is not stored separately.
- Crash reports are sent to Sentry to help us fix bugs. These contain device information and error context but no plant photos or personal data.
4. Third-Party Processors
- Supabase (EU region) — hosting, authentication, database, file storage
- Google Gemini AI — plant photo analysis (photos are processed but not retained for training)
- RevenueCat — subscription management and purchase validation
- Apple / Google — social sign-in identity providers
- Sentry — crash and error reporting
- Amazon — the app contains links to products on Amazon. When you tap a product link, you are taken to Amazon's website, which is governed by Amazon's own privacy policy. We do not share any personal data with Amazon. We participate in the Amazon Associates Programme, meaning we may earn a commission from qualifying purchases.
We do not sell your data to any third party. We do not use your data for advertising.
5. Data Retention
- Your account data (photos, analysis history, notes) is retained until you delete your account.
- Usage logs are retained for 90 days for limit enforcement, then automatically purged.
- Crash reports are retained by Sentry for 90 days per their standard retention policy.
- Billing records are retained by RevenueCat per their terms and applicable tax/accounting requirements.
- Species data — static plant facts (not personal data) derived from AI analyses are retained indefinitely to improve the service for all users.
6. Account Deletion
You can delete your account at any time from Settings > Danger Zone > Delete Account. This immediately and permanently deletes:
- Your profile, email, and authentication data from Supabase
- All saved plant photos from storage
- All analysis history, room assignments, notes, and usage records
What may remain after deletion: billing records in RevenueCat (required for tax/audit), crash logs in Sentry (auto-expire after 90 days), and any AI processing logs retained by Google per their data processing terms. Species-level facts (e.g. "Golden Pothos needs indirect light") are not personal data and are retained.
7. Your Rights (UK GDPR)
You have the right to access, correct, delete, or export your personal data. To exercise these rights, email support@winnersmedia.co.uk.
8. Children
Dr. Roots is not directed at children under 13. We do not knowingly collect data from children.
9. Changes
We may update this policy. Material changes will be notified in the app. Continued use constitutes acceptance.
10. Contact
Winners Media Limited
Email: support@winnersmedia.co.uk