Privacy at Canacia
The short, plain-language version. Our formal Privacy Policy exists and governs — this page explains what we built, so you can check us instead of trusting us.
Canacia is made for growers. Discretion isn't a feature we added — it's a design requirement we started from.
What we never ask for
- Your location. The app never asks for location permission, and every photo is EXIF/GPS-stripped twice before it leaves your device — once when you pick it, once more at upload. Precise location never enters the system. (Like any online service, our servers see an IP address when the app connects. We don't use it to locate you or build location profiles.)
- Your identity. Guest mode creates no identity — no email, no name, no phone number. You can use Canacia without introducing yourself.
- Your browsing. This site sets no tracking or analytics cookies. No pixels, no browser fingerprinting, no ad tech.
What the app knows — and why
Canacia works on what you give it: your plants, feeds, pH/EC readings, environment data, the photos you take, and the questions you ask. That's the product doing its job — answers built on your records are the whole point.
Where the AI runs today: Case analysis and action planning on Anthropic (Claude); chat and dashboard guidance on Google (Gemini); voice transcription and safety filtering on OpenAI. Those are the headline surfaces — the full map, legal bases and retention windows are in the Privacy Policy (§6–§8).
And our stated engineering goal: move analysis onto your device over time. The less our servers need to see, the better we sleep.
Identity is optional
Start as a guest. Connect an email later if you want the account to be recoverable — we use it only to sign you in and to keep the account recoverable, nothing else. On our roadmap: an identity-free recovery option (a one-time recovery code instead of an email), so “recoverable” stops requiring “identifiable”. We'll announce it here when it ships.
Money
On iOS, Apple runs the purchase — Apple knows who buys, and no app can change that. What we control is our side: our payment layer receives no identity beyond an opaque account ID. No email, no name, no advertising identifiers.
Planned for the direct-download (APK) version: you pay on the web and receive an activation key that carries no identity on our side. When it ships, the details will be published here first.
Delete means delete
One action in Settings erases your server data, your uploaded files, and the account itself — and the app clears data on your device where supported. There is no half-deleted state. Two things take longer than the button: routine backups roll off on a fixed schedule, and what AI providers briefly retain is bounded by the windows in the Privacy Policy (§6–§8). Nothing is kept for analytics.
How to check us
- Open your phone's settings and look at Canacia's permission list — there is no location permission to find.
- Export your data anytime (Settings → Privacy & Data) and see exactly what the account holds.
- When the APK ships: verify the SHA-256 checksum and signature against the values on our download page.
- Read the formal Privacy Policy — the two documents describe the same system.