Privacy Policy for EcoVision

Effective Date: September 21, 2026
Last Updated: September 21, 2026

1. Introduction

Welcome to EcoVision ("we," "our," or "us"). EcoVision is an AI-powered botanical and environmental mobile application designed to help users identify plant species, diagnose plant diseases, evaluate plant hydration and health, monitor outdoor trees using satellite telemetry, and explore botanical connections.

This Privacy Policy explains how we collect, store, use, and safeguard your personal information and media when you use the EcoVision mobile application and our backend cloud services.

2. Information We Collect

We collect information directly from you when you register an account, upload photographs, log plant care activities, or use our mapping features.

A. Account Information

When you create an account or sign in to EcoVision, we collect:

• Full Name

• Email Address

• Password — stored exclusively as a cryptographically salted hash using bcrypt; plaintext passwords are never stored or accessible.

• Authentication Tokens — JSON Web Tokens stored securely on your device for session authorization.

B. Camera, Photos, and Media

To provide plant identification and health analysis, EcoVision requires access to your device's Camera and Photo Library, upon your permission.

We collect:

• Photographs of whole plants, leaf close-ups, stems, soil bases, and flowers/fruits that you capture or select.

• Image byte streams compressed on-device and transmitted to our cloud infrastructure for botanical inference.

C. Location Information

When you register an outdoor tree or access the EcoVision Nearby Trees map, we request permission to access your device's Precise GPS Location (ACCESS_FINE_LOCATION) or Approximate Location (ACCESS_COARSE_LOCATION).

• Outdoor Plants & Trees: We store geographic coordinates (latitude, longitude, and Uber H3 spatial index) in our database to display pinned trees on community maps and to fetch Sentinel-2 satellite vegetation indices.

• Indoor Plants: Indoor plants do not store or transmit geographic coordinates.

• Granular Control: Location permissions are optional. You may decline location permissions and continue to use plant identification and indoor plant care features.

D. Human Connect & Cultural Botanical Data (Optional)

If you choose to use our Human Connect and Vedic resonance feature, you may optionally provide:

• Date of Birth

• Time of Birth

• Place of Birth

• Calculated Astrological Nakshatra and Sacred Tree Association

This information is stored in your personal profile to calculate biophilic resonance with analyzed plants.

E. Care Logs & User Records

We store user-generated records, including:

• Custom plant nicknames, room locations (e.g., Living Room, Balcony), and notes.

• Plant care activity logs, including watering timestamps and fertilizer schedules.

• AI question-and-answer histories and user satisfaction feedback, such as thumbs up/down ratings.

3. How We Use Your Information

We use the information collected for the following purposes:

1. Botanical Identification & Pathology: Analyzing plant photographs using multimodal Artificial Intelligence to identify species, detect plant diseases, assess soil moisture, and provide care instructions.

2. Geospatial & Satellite Telemetry: Monitoring canopy density and tracking vegetation indices (NDVI, NDWI, EVI) for outdoor trees via Sentinel-2 satellite data.

3. Personalized Plant Care & Reminders: Generating localized watering and fertilizing schedules and delivering on-device notification reminders.

4. Service Reliability & Optimization: Recording internal token usage, response latencies, and feedback ratings in our database to maintain system reliability and prevent service abuse.

4. Artificial Intelligence Processing & Models

EcoVision utilizes Machine Learning and Large Language Models for botanical reasoning:

• Amazon Bedrock (AWS us-east-1): We send compressed plant photographs and botanical diagnostic prompts to foundational models hosted on Amazon Bedrock, including Anthropic Claude Opus 4.6 and Amazon Nova models.

• PlantNet API: When enabled, image streams and organ tags (e.g., leaf, flower) are sent to the PlantNet API for botanical taxonomy validation across global flora catalogs.

• Retrieval-Augmented Generation (RAG): We search verified botanical reference records stored in our PostgreSQL database using pgvector to help ground AI responses in botanical reference information.

• No Biometric Identification: Our AI systems are configured for botanical and horticultural classification. We do not use facial recognition or biometric identification, or process background personal media for biometric purposes.

5. Third-Party Services & AWS Infrastructure

EcoVision is hosted on cloud infrastructure located in the AWS US East (N. Virginia, us-east-1) region. We interact with the following third parties:

Amazon Web Services (AWS)

• AWS EC2: Hosts our application backend server.

• AWS RDS (PostgreSQL with pgvector): Stores user profiles, plant records, geospatial coordinates, and vector embeddings.

• AWS S3 (ecovision-tree-uploads): Stores uploaded plant and tree images.

• Amazon Bedrock: Provides AI model execution.

Other Services

• PlantNet: Third-party botanical identification service used for plant taxonomy lookup.

• Sentinel Hub / EOX WMTS: Provides Sentinel-2 Earth observation satellite vegetation metrics and satellite tile layers based on outdoor tree coordinates.

• OpenStreetMap: Provides map background tiles for geospatial tree visualization.

EcoVision does not use third-party commercial advertising SDKs, Firebase Analytics, or commercial data broker trackers.

6. Notifications

EcoVision delivers plant care reminders, including watering and fertilizing reminders, using on-device local notifications (flutter_local_notifications).

• Care reminders are calculated and scheduled locally on your device.

• We do not collect or store remote push notification device tokens on our servers.

• You can enable, mute, or customize notifications at any time through the app's notification settings or your Android system settings.

7. Data Sharing and Advertising

• No Selling of Personal Data: EcoVision does not sell, rent, or trade your personal information, photographs, or location coordinates to third-party data brokers or commercial advertisers.

• No In-App Advertisements: EcoVision contains no third-party advertising SDKs.

• Service Providers: Data may be shared with the infrastructure and AI service providers described in this policy to provide core app features.

• Legal Requirements: We may disclose information when required by applicable law, court order, or governmental regulation.

8. Data Retention and Storage

• Account & Plant Data: Your profile information, plant collection, and analysis history are retained in our AWS RDS database for as long as your account remains active.

• Media Storage: Plant photographs are retained in our secure AWS S3 storage to allow you to review past health scans and growth timelines.

• Local Data: Care logs and UI preferences are stored locally on your device using SharedPreferences.

9. Account and Data Deletion

You have the right to request the deletion of your account and associated personal data.

• Plant History Deletion: You can delete individual plant analysis records directly within the app's History screen.

• Full Account & Data Deletion: To request permanent deletion of your account, email address, password hash, profile metadata, uploaded photos from AWS S3, and tree records from our database, please submit a deletion request to:

Email: scalablenew@gmail.com

Upon receiving your request, your account and associated records will be permanently purged from our active databases and storage buckets within thirty (30) days.

10. Data Security

We implement technical and organizational security measures to protect your data:

• Encryption in Transit: Network communication between the EcoVision app and our backend APIs uses encrypted HTTPS/TLS protocols.

• Password Hashing: Passwords are never stored in plaintext and are hashed using bcrypt with unique cryptographic salts.

• Secure Storage: Cloud databases and AWS S3 storage are protected by AWS Identity and Access Management (IAM) policies and firewall rules.

11. Children's Privacy

EcoVision is a general-audience educational and botanical tool and is not directed to children under the age of 13. We do not knowingly collect personally identifiable information from children under 13.

If you become aware that a child has provided us with personal information without parental consent, please contact us at scalablenew@gmail.com so we can review the matter and take appropriate action.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect modifications to our features, cloud services, or legal obligations.

When updates occur, we will revise the Last Updated date at the top of this document.

13. Contact Information

If you have questions, feedback, or privacy-related inquiries regarding this Privacy Policy or our data practices, please contact us:

• Email: scalablenew@gmail.com

• In-App: Profile → Help & Support