Privacy Policy
What Zambila records about you, who else ever sees it, and how to get rid of it.
In force since 14 September 2026.
01What this covers
Zambila identifies plants from your photographs and keeps the collection it builds for you. This policy applies to the app on iOS and Android, and to this website.
02Who is responsible for your data
Zambila is run by SethEngine, a sole trader (eenmanszaak) registered in the Netherlands under KVK number 96985224, and that is the data controller for everything described here. For any question about your data, or to exercise any of the rights further down this page, write to contact@sethengine.com.
03What we collect
Only what the app needs in order to work. There is no advertising in Zambila, and none of this is sold.
- Your account: the email address you sign in with, your display name, the handle you pick, and your profile picture.
- Your collection: the plants you add, the photos you take of them, your wallpapers, your wanted list, your friends, and the identifications you were given.
- Technical records: ordinary server logs, and crash reports from the app, listing a request, a timestamp, an error, your device model and the app version. Kept so the service can be run and repaired.
04Photos and identification
A photo you submit for identification is sent to PlantNet, an outside identification service, which returns the candidate species. Photos you keep on a plant are stored with Cloudflare. They are deleted from storage when you delete the plant, or the account.
05Location
A plant carries coordinates only if you turn the pin on during that particular scan. It is off by default and asked for per plant, never once and for all. The app does not follow you in the background or record where you are between scans.
06What other collectors can see
Your handle, your profile picture and the wallpapers you publish appear in Discovery and to the people you are friends with. Your email address never appears anywhere public. Coordinates stay yours unless you publish the plant carrying them.
07Who else handles your data
These companies process data on our behalf, each only for the purpose named:
- Google (Firebase): signing you in and holding your account identity.
- Cloudflare (R2): storing your photographs.
- Railway: the platform our servers and database run on.
- Sentry: collecting crash and error reports so faults can be found and fixed.
- PlantNet: identifying the plant in a photo you submit.
08How long we keep it
Your collection lasts as long as your account. Asking us to delete the account suspends it the same second and destroys everything 25 days later: photos, plants, friends, and the account itself. After that we keep nothing except what the law obliges us to keep.
09Your rights
You can ask for a copy of what we hold about you, have it corrected, or have it erased. Deleting from the app or from this website is the quickest route to erasure; for anything else, write to us and we will answer. If you think we have handled your data badly and we have not put it right, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
10Children
Zambila is not intended for children under 13, and we do not knowingly collect anything from them. If you believe a child has an account with us, tell us and we will remove it.
11Changes, and how to reach us
If this policy changes in a way that matters to you, the app will say so rather than quietly swapping the page. Anything you want to ask about it goes to contact@sethengine.com.