PRIVACY POLICY
**Effective Date:** September 2026
**App:** Garden Mapper
**Developer:** Rob's Lab (gardenmapper.ca)
---
## The Short Version
Garden Mapper is built with your privacy in mind. We collect only what we need to run the app. We don't sell your data. We don't track you for advertising. Your garden stays yours.
---
## What We Collect
### Anonymous Users (No Account)
If you use Garden Mapper without creating an account, your garden designs are stored **locally on your device only** — in your browser's local storage (web) or on-device storage (Android). We have no access to this data.
We also generate a random device identifier (a UUID) stored locally on your device. This is used only to help sync your gardens across devices if you later create an account. It is not tied to your identity and is not used for advertising.
### Signed-In Users (Optional Account)
If you choose to create an account to sync or back up your gardens, we store the following in our cloud database (Supabase):
- Your **email address** (provided via Google Sign-In or Apple Sign-In)
- Your **garden names** and **garden layout data** (the full contents of each garden you sync, including plant placements and structures)
- A **device identifier** (random UUID) and **device label** (e.g. "Android · Chrome") used to resolve sync conflicts across your devices
- Your **subscription status** (whether you have an active Premium plan)
> **Note on garden names:** Garden names are stored exactly as you enter them. Please avoid including personal information (such as your home address) in your garden name.
### Garden Competition Submissions
If you choose to submit your garden to the Garden Mapper competition, your garden name and garden design will become **publicly visible** on our website and app. Participation is entirely voluntary. By submitting, you consent to your garden and its name being displayed publicly.
### Custom Plant Requests
If you submit a request for a plant to be added to the catalog, you have the **option** to include your email address so we can follow up when it's added. This is entirely voluntary and used only to respond to your request.
### Subscription Billing
If you subscribe to Garden Mapper Premium through the **web**, billing is handled securely by **Stripe**. We never see or store your full payment details. Stripe's privacy policy applies: [stripe.com/privacy](https://stripe.com/privacy).
If you subscribe through **Google Play** or the **Apple App Store**, billing is handled entirely by those platforms under their respective terms. We use **RevenueCat** to manage subscription status across platforms — RevenueCat receives your platform-issued purchase receipt, not your payment details.
---
## How We Protect Your Data
All data transmitted between your device and our servers is encrypted using HTTPS. We verify that all third-party SDKs integrated into Garden Mapper comply with Google Play Developer Program policies and do not sell user data.
---
## What We Don't Collect
- Your location
- Your contacts or address book
- Your browsing history
- Any personal information from children under 13
- Payment card details (all billing is handled by Stripe, Google Play, or Apple)
---
## Third-Party Services
We use a small number of third-party services to run the app. Each of these services may process standard server data (such as IP addresses and access logs) as part of their normal operation, subject to their own privacy policies.
| Service | Purpose | Their Privacy Policy |
| Supabase | Optional cloud garden storage & authentication | supabase.com/privacy |
| Google Sign-In / Apple Sign-In | Account authentication only | policies.google.com/privacy / apple.com/legal/privacy |
| Stripe | Web subscription billing | stripe.com/privacy |
| Google Play | Android app distribution & billing | policies.google.com/privacy |
| Apple App Store | iOS app distribution & billing *(coming soon)* | apple.com/legal/privacy |
| RevenueCat | Subscription & purchase management (Android/iOS) | revenuecat.com/privacy |
| Wix Analytics | Anonymous usage analytics on gardenmapper.ca | wix.com/about/privacy |
We do not currently use advertising networks or social media tracking pixels. If this changes, we will update this policy.
---
## Data Retention
We retain your account data for as long as your account is active. Upon receiving a deletion request, your account and all associated cloud data are permanently deleted within 30 days. Payment transaction records may be retained by our payment processors (Stripe, Google Play, Apple) for up to 7 years as required by financial regulations — these records contain only transaction data, not your garden designs.
---
## Your Rights
You're in control:
- **Delete your account and data:** You can request account deletion directly within the app (Profile → Delete Account) or by visiting [gardenmapper.ca/delete-account](https://www.gardenmapper.ca/delete-account). You can also email garden.mapper.app@gmail.com. We'll remove your account and all associated cloud data within 30 days.
- **Your local garden data:** On the web, your garden is stored in your browser's local storage — it belongs to you and is only accessible from your own browser. On Android, it is stored on your device. You can clear it at any time by clearing your browser data or uninstalling the app.
- **Opt out of plant suggestion follow-ups:** If you submitted a plant request with your email, just reply asking to be removed and we'll delete it immediately.
- **EU/EEA users:** If you are located in the European Union or European Economic Area, you may have additional rights under the General Data Protection Regulation (GDPR), including the right to access, correct, or erase your personal data, and the right to data portability. Contact us at garden.mapper.app@gmail.com to exercise these rights.
---
## Data Breach Notification
In the unlikely event of a data breach that poses a real risk of harm to users, we will notify affected users and relevant privacy authorities as required by applicable law (including Canada's PIPEDA).
If you have a registered account, we may use your email address to notify you directly of a breach, regardless of your other communication preferences. This is a legal obligation and overrides standard communication opt-outs. Users without an account will be notified via an in-app notice on their next session and a notice posted on gardenmapper.ca.
---
## Children's Privacy
Garden Mapper is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, contact us at garden.mapper.app@gmail.com and we'll delete it promptly.
---
## Changes to This Policy
If we ever change how we collect or use your data — including adding new third-party integrations — we will update this page and note the effective date at the top. We review this policy at least quarterly.
---
## Privacy Policy Link
This privacy policy is also accessible within the Garden Mapper app under Profile → More → Privacy Policy.
---
## Contact
Questions?
📧 garden.mapper.app@gmail.com
---
*Made with care by Rob's Lab. We believe software should respect the people who use it.*