Privacy policy

What we collect

Your account. Your email address and a securely hashed password. We use your email to confirm your account, reset your password, and — rarely — tell you something important about the service.

Your garden. The gardens, plantings, tasks, journal entries, harvests, layouts, and notes you create. That's the whole point of the app, and it stays yours.

Your photos. Pictures you attach to journal entries are stored with our storage provider (Cloudflare R2) and are only shown inside your account.

Community posts and feedback. Tips you submit to the community (shown publicly under the display name you choose, after review) and feedback you send through the feedback button.

Usage events. We record basic in-app events (like sign-ups and feature usage) to understand what's working and to improve the app.

Technical basics. Like every website, our server sees IP addresses in logs and uses them briefly for abuse protection (rate limiting on sign-in pages).

Cookies

Today we use essential cookies: one that keeps you signed in and one that protects forms from forgery. If we add analytics tools that use cookies, we'll update this policy first.

How we use your information

To run the app: showing your gardens, calculating zone-aware planting dates, sending the emails you ask for (confirmation, password reset), reviewing community posts before they go live, and improving features based on how the app is actually used. Nothing else.

What we never do

We don't sell your personal data. Your garden data and photos are used only to run the service for you.

Service providers

A few trusted providers help us run the service: our hosting provider (where the app and database live), Cloudflare R2 (photo storage), and Resend (delivering transactional email). Each receives only what it needs to do its job.

Your data, your call

You can download a copy of your data any time from Account settings → Privacy & export. To delete your account, send us a note — a human permanently removes your account and everything in it, promptly and with no hoops.

Retention

We keep your data while your account is active, and we use it in aggregate to understand how the app is doing and what to build next. When your account is deleted, personal data is removed; short-lived server logs and backups age out on their own schedule.

Children

GrowSomeFood isn't directed at children under 13, and we don't knowingly collect their data.

Changes to this policy

If we change this policy in a way that matters, we'll announce it on the What's new page before it takes effect.

Contact

Questions or requests: use the feedback button on any page — it goes straight to the developer — or the contact form.