Last updated 27 September 2026
Leafed is made by Prateek Gupta, in Bengaluru, India. This page says what the app stores, where it goes, and how to get rid of it. It describes what the software actually does — if you find something here that does not match the app, that is a bug and I would like to hear about it.
Your plants, your rooms and their history live on the phone and in your account. The app needs the weather where you are, so it asks a weather service for the sky above your approximate location — that request carries a latitude and longitude rounded to about a kilometre, the site's height above sea level rounded to fifty metres, and nothing else. No account, no identifier, nothing that says which phone asked.
Your exact position is used in one place, and it stays in two: when you survey a place, the app asks for precise location so the pin lands on the right building instead of a kilometre away, and that coordinate is saved with the place, on the phone and in your own backup if you have an account. It is never sent to the weather service, which only ever gets the rounded one.
The map in Places is Apple Maps, drawn on the phone. Fetching the imagery for it tells Apple which part of the world you are looking at. That goes to Apple, not to us; we never receive it.
An account exists so your plants follow you to a new phone. It holds:
| What | Why |
|---|---|
| Email address, and a name if you give one | To sign you in and to reach you about your account |
| Your password, hashed with Argon2id | Never stored as you typed it, and unreadable to us |
| Your places: which way a window faces, its size, the glass, the room, what is opposite | This is what the light is calculated from |
| Your plants: species, pot, where it stands, when you last watered | The advice is computed from these |
| Photo checks: what was reported, what the model saw, what you confirmed | So a plant's history makes sense later |
| Light readings: a brightness figure, when it was taken and the camera exposure behind it | To check the light we calculate for a place against what a phone measures there |
| Your settings | So they follow you between devices |
| If weather notifications are on: a notification token, a position rounded to about a kilometre, and your timezone | So a notice about rain can reach a phone that is not open, at an hour that is daytime where you are |
If you sign in with Apple or Google, they tell us the identifier and email you agree to share, and nothing else. We never see your password for those accounts.
When you photograph a plant to check its health, the picture is shrunk on the phone and sent to our service, which passes it to Anthropic's API to be described. Anthropic processes it to answer that one request. The photograph is not used to train anything, and we do not keep it after the answer comes back — only the resulting notes, which are words rather than pictures.
Photographs you attach to a plant yourself are kept in private storage (Cloudflare R2) and are readable only through short-lived links issued to you.
There is a second use of the camera, and it takes no photograph at all. While you hold the phone level to take a compass bearing during a place survey, the app asks the camera what exposure it has settled on — the shutter, the gain and the aperture — and works out from those how bright it is where you are standing. That is the whole of it.
No image is captured, written down or sent anywhere. There is no photo output attached to that camera session, so there is nothing for an image to be written to; the camera is opened, asked about its own settings, and closed. What is kept is a brightness figure, the time, the exposure it came from, and which place it belongs to.
It happens only on the survey screen, only when a compass bearing is being taken, and the screen says so while it is doing it. Refusing the camera leaves the rest of the app working.
Asked for only while the app is open, and only to know where the sun is at your latitude. It is used to compute the sun's path and to fetch the weather. It is not a location history: the app keeps one approximate position for your home, and you can type it instead of granting the permission.
If you turn on weather notifications, one approximate position — rounded to about a kilometre — is stored on our server alongside your device's notification token and its timezone. That is what lets us say "rain this afternoon" and mean your afternoon rather than somebody else's. It is the only part of your garden we hold as something we can read; the rest is an opaque blob to us.
Reminders about watering, repotting and the light are worked out on the phone and shown by the phone. Nothing leaves the device for those.
Weather notices are different, because a phone that has been in a pocket since morning cannot know it is about to rain. For those, and only if you allow notifications, the app registers with Apple's Push Notification service and tells us the token it is given, with the rounded position and timezone above. Every couple of hours our server looks at the sky over each registered square and sends a notice where there is something worth saying — rain, heat, frost, or dusty air.
Turning the weather switch off in You → Notifications deletes that record from our server rather than flagging it, and the position goes with it. Deleting your account removes it too.
| Service | What reaches them |
|---|---|
| MongoDB Atlas (database) and Amazon Web Services (servers), both in India | Everything above, stored |
| Cloudflare R2 | Photographs you attach, and the app's reference pictures |
| Anthropic | A photograph, at the moment you ask for a check |
| Open-Meteo | An approximate latitude and longitude, with no identifier |
| Apple Maps | The area you are looking at, to draw the map shown in Places |
| Resend | Your email address, to deliver a verification or password-reset message |
| Apple | Subscriptions. Apple handles payment; we never see your card |
Profile → Delete account. It happens at once: the account, the plants, the places, the history and the photographs, all of it. There is no thirty-day grace period and no soft delete — asking once is enough. You can also write to [email protected] and I will do it by hand.
Leafed is not aimed at children under 13 and does not knowingly hold their information.
You can ask for a copy of what is stored about you, ask for it to be corrected, or ask for it to be deleted. Write to [email protected] and you will get an answer within 30 days. If you are in the EU or UK, the lawful basis is performing the contract you have with us (running the app) and our legitimate interest in keeping it working and secure.
If this page changes in a way that matters, the app will say so rather than quietly updating a date at the top.