Privacy Policy
Last updated: 24/10/2026
RoseDoctor (chamsochoahong.com) is a rose disease diagnosis and care assistant. This policy explains what data we collect when you use the website, why, who we share it with, how long we keep it and what your rights are.
1. Data we collect
When you create an account or sign in
- Your email address and display name.
- Your password, stored only as an argon2 hash; we cannot read the original password.
- If you sign in with Google: your Google account ID, email, name and profile picture as provided by Google.
When you run a diagnosis
- The photos you upload (up to 3), your symptom description, your answers about growing conditions and follow-up questions, and the diagnosis result.
- Photos are stored as the original files. Some phones embed information in photos (capture time, device model, possibly GPS location); we do not currently remove it, so consider turning off location for your camera app if you do not want to share it.
When you use plant care
- Details of each pot: name, variety, pot size, growing medium, sun exposure, plant photo and growth stage.
- The pot location (coordinates and the place name you pick on the map), used for weather.
- Your observations and completed tasks: soil moisture, pH, leaf condition, watering, feeding, etc.
When you chat with the assistant
- Your messages, attached photos and, if you choose one, the plant you are asking about.
When you send feedback
- Your rating and message, plus your name and email if you enter them.
Technical data collected automatically
- IP address, browser and device type, and city and country estimated from the IP address.
- A device identifier generated by the FingerprintJS library and stored in your browser. It is used to limit free diagnoses when you are not signed in and to recognise your own diagnosis results.
- Pages you view, buttons you click, how far you scroll, the referring site and campaign parameters (utm).
2. How we use your data
- To diagnose problems, build care schedules and give weather-based advice for your plants.
- To limit free usage and prevent abuse.
- To understand how the website is used and improve it.
- To improve our image recognition model: diagnosis photos may be queued for review by an administrator and used to train RoseDoctor's AI models.
- To send account verification and password reset emails.
We do not sell your personal data.
3. Third parties that receive data
- Google Gemini (Google): your written symptom description, without your name, email or IP address, to analyse symptoms.
- Google Analytics 4 (Google): pages viewed, buttons clicked, browser information and Analytics cookies, for traffic statistics.
- Microsoft Clarity (Microsoft): on-page interactions (scrolls, clicks) and session recordings with input fields masked, to understand how the interface is used.
- Google Sign-In (Google): when you choose to sign in with Google.
- Google Fonts (Google): to load fonts; Google receives your IP address.
- OpenStreetMap and Nominatim: to show maps and place names when you pick a pot location.
- Open-Meteo, OpenWeatherMap: your pot coordinates, to fetch weather and climate data.
- Our email provider: your email address, to send verification and password reset emails.
- Online marketplaces (e.g. Shopee): only when you click a "Buy now" link, which takes you to the seller's site.
4. Photos and share links
- Photos you upload (for diagnosis, chat or plant profiles) are stored on our servers and can be viewed by anyone who has the link. Links are random and hard to guess, but avoid uploading photos containing information you do not want to make public.
- Every diagnosis result gets a share link. Anyone with the link can see the photos and the result, but not your name, email or written description. Share links cannot currently be revoked.
5. How long we keep data
- Usage statistics (pages viewed, buttons clicked and the associated IP address): deleted automatically after 90 days.
- Assistant conversations while not signed in: deleted automatically about 30 days after they start.
- Other data (account, diagnosis results, photos, care data, feedback) is currently kept until you ask us to delete it.
- Server logs (IP address, requested paths) are kept for a short time for operations and security.
6. Your rights
You may ask to access, correct or delete your personal data, or withdraw your consent. The website does not yet offer self-service tools for this, so please email hotrochamsochoahong@gmail.com from the email address linked to your account (or include the diagnosis share link if you were not signed in). We will respond within 30 days.
7. Cookies and browser storage
- pd_user_jwt cookie (necessary): keeps you signed in; expires after 7 days.
- Google Analytics cookies (starting with _ga) and Microsoft Clarity cookies: used for statistics.
- Browser storage (localStorage, sessionStorage): device identifier (pd_visitor_id), display details of the signed-in user (pd.auth.user), language (pd_lang), recent chat history (pd_chat_session), an unfinished diagnosis kept for 24 hours (pd:diagnose:v1), and statistics session IDs (pd_session_id, pd_session_last).
- You can clear these in your browser settings. Note that signing out does not clear chat history or an unfinished diagnosis on the device; on a shared device, clear your browser data after use.
8. Security
Connections to the website are encrypted with HTTPS and passwords are stored as hashes. Only authorised administrators can access data in the admin system. No system is perfectly secure; if an incident affects your data, we will notify you as required by law.
9. Users under 16
If you are under 16, please get permission from a parent or guardian before creating an account or uploading photos.
10. Changes to this policy
When we change this policy we update the date at the top of the page. For significant changes we will post a notice on the website.