Privacy Policy

What happens when you photograph a tree

You take the photo, or choose one you already have. The app shrinks it to 1280 pixels wide and sends it over an encrypted connection to our server at https://scan-apps-web.futuromy.workers.dev, which is a Cloudflare Worker run by Futuromy LTD.

Our server passes the photo straight to a vision model, which answers with a name and a number saying how sure it is. That answer goes back to your phone. The whole trip takes a few seconds and nothing about it is stored as a picture.

We do not keep your photos

The photo exists in our server only for as long as the request takes. It is not written to a database, not written to a file, and not kept in any store of ours, so there is nothing for us to look through later, nothing to leak and nothing to hand to anyone. We also do not keep the answer the model gave.

The model providers below receive the photo in order to answer. What they do with it is set by their own terms, not by us.

• •Google, which answers with Gemini
• •Cloudflare, whose Workers AI answers only when Google cannot

What leaves your phone

On a scan, this is everything the app sends and there is nothing else:

• •the photographs, each shrunk to 1280 pixels wide and re-encoded as a JPEG, up to four in one identification
• •the word "tree", which tells the server what it is being asked to identify
• •the language tag your phone reports, or the one you chose, so the answer comes back in it
• •the random device identifier, as a request header

What our server records

Every model call writes one row so we can see what the service costs and what is failing. A row holds no photo and no answer:

• •which model answered, from which provider, and whether it was the first one asked
• •how many tokens the call used and what it cost us, in millionths of a dollar
• •how long it took, whether it succeeded, and if it did not, what the provider said went wrong, cut to 300 characters and cleaned first
• •the random device identifier, and the time
• •a running count of how many identifications that identifier has used in the current day
• •if you subscribe, which plan that identifier is on, which product was bought and when it expires

The error text

One column needs a word of its own. When a model call fails we store what the provider said, because that sentence is the only thing that tells us whether a key is wrong or a model has been retired. Some providers repeat a piece of the request back in that text, and the request is your photo. So before the row is written, anything shaped like encoded data or a long opaque token is replaced, and what is left is cut to 300 characters. Be clear about what that is: a filter on shape, not a promise about content. It catches encoded data, which is the form a photo would arrive in. A provider that described your photo in ordinary words would still be quoted.

The device id

On first launch the app makes up a random identifier and keeps it on the phone. It is sent with each scan so the free daily allowance can be counted against something.

It is not an account, not an advertising identifier, and not linked to your name, your email address, your phone or your Apple ID. It tells us that some install has used three scans today. It does not tell us whose install. Delete the app and the identifier goes with it; installing again makes a new one.

What stays on the phone

Kept on the device itself and never sent to us:

• •the random device identifier
• •the language you chose, if you chose one rather than following the phone
• •every scan you keep, with its photographs, copied into the app's own folder
• •the names you give your scans and which ones you pinned

No accounts, no ads, no analytics

There is no sign in, because there is nothing to sign in to. Tree Identifier: Fairly has no ads, no advertising identifier, and no analytics SDK of any kind, ours or anyone else's. We do not know how often you open the app or what you point it at.

If you subscribe

The payment is handled entirely by Apple. We never see your card, your billing address or your store account.

We use RevenueCat to tell us whether a subscription is running. It is given the same random device identifier described above as the subscriber id, and the store tells it when a subscription starts, renews or stops. That is the whole of what it knows about you: an identifier we made up and the state of a subscription. It is never given your photo.

Our own database gains one more row for that identifier: which plan it is on, which product was bought and when it expires. It still holds no name and no photo.

Hosting

The server runs on Cloudflare, which handles the request and therefore sees the network address it came from, as every web server does. Cloudflare keeps short lived request logs that we use to find faults. We do not join those logs to anything else, because there is nothing to join them to.

How long we keep it

The rows described above stay in our database until we remove them. There is no automatic deletion yet, and we would rather write that than imply a schedule we have not built.

Children

Tree Identifier: Fairly is not made for children and is not published in the children's category of either store. We do not knowingly collect anything from a child, which is easy to promise here because we do not knowingly collect anything from anyone: there is no account, no profile and no name attached to a scan.

Your rights

Futuromy LTD is the data controller under the GDPR. Because nothing we hold identifies you, we cannot find your rows from your name or your email address, and the app does not show you the random identifier that would let us. So a deletion request is one we may not be able to carry out precisely, and saying so is more use to you than a form that quietly does nothing. Write to info@futuromy.com and we will tell you exactly what a row holds and remove what we can identify.

Changes

If the app ever starts doing something this page does not describe, this page changes first. It is assembled from the app's own configuration, so a new thing being sent or stored has to be written here before it can be described at all.

Contact

Write to info@futuromy.com and a person reads it. Futuromy LTD (Futuromy Bilisim ve Yazilim Dis Ticaret Limited Sirketi), Istanbul, Turkey.