PictureThis - Plant Identifier

"To share data with our service providers, such as those that host data for us, including Amazon Web Services... To share data with our affiliates... To market our products and services as well as enable third parties to provide advertisements to you via the Application. We have a legitimate interest in promoting our products and services and generating advertising revenue."

Data is shared with service providers, affiliates, and advertising third parties under broad 'legitimate interest' claims, with little specificity about what data is shared or with whom.

"These third parties may use this information to display advertisements on our application and elsewhere online tailored to your interests, preferences, and characteristics. We are not responsible for the privacy practices of these third parties... Some devices may offer a "Do Not Track" feature, however our Application does not respond to "Do Not Track" signals."

The app enables cross-site tracking by allowing third-party ad networks to track user behavior across the app and other websites, and explicitly refuses to honor Do Not Track signals.

"When you use our services, we don't collect your precise location information using geo-location technology. However, we do collect your IP address from which we can only determine your coarse location and cannot identify your physical location. This allows us to enhance our services and your experience, and ensure that you are receiving relevant content."

While they disclaim precise GPS tracking, they collect IP addresses for geolocation purposes, which can reveal approximate location and is shared with analytics providers like Google Analytics.

"If you download the Application, we may collect information from your device, including identifiers to help us identify your device's hardware and operating system. Device information may be accessed using industry standard identifiers such as those approved by your device operating system manufacturer."

The app collects device hardware identifiers and operating system information, which can be used for fingerprinting and tracking across sessions and services.

"We retain your personal information for as long as it is necessary and relevant for our business. The criteria used to determine the retention periods include: (i) how long the personal information is needed to provide the services and operate the business; (ii) the type of personal information collected; and (iii) whether we are subject to a legal, contractual or similar obligation to retain the personal information."

No concrete retention periods are specified. The criteria are entirely subjective ('necessary and relevant for our business'), effectively allowing indefinite retention.

"We may change the content or services found on the Application at any time, and consequently our Privacy Policy may change at any time in the future and will be updated from time to time. Whenever we make changes to this Privacy Policy that are important for you to know about, we will post the updated Privacy Policy at this link."

The company reserves the right to change the privacy policy at any time with no mechanism for user consent — only posting updates to a link, placing the burden on users to check for changes.