Privacy Policy

Grovekeeper (“we”, “us”, “our”) operates the Grovekeeper website, web app and mobile app at grovekeeper.app. If you have a question about your privacy or the information we hold, email info@grovekeeper.app. We are the agency responsible for your personal information.

We collect the following, and only what we need to run the service.

• Account details. Your first name, email address, a password (stored only as a secure hash, never in plain text) and the name of your garden. You give us these when you sign up.
• Garden records. The trees and plants you add, tasks, observations, notes, corrections, tags and any photos you upload of your garden. This is the record you build as you use Grovekeeper.
• Location. The address or coordinates of your garden, which we turn into a latitude and longitude so we can fetch your local weather and place your trees on a map. You choose to provide this during onboarding or in settings.
• Billing details. If you subscribe on the website, Stripe handles your payment. Purchases in the Android app are handled by Google Play, with RevenueCat helping us manage subscriptions. We receive purchase identifiers, subscription status and plan information, not your full card number.
• Usage and device data. Basic analytics about how the app is used, such as pages viewed, features used, rough device and browser type, and error reports. This helps us fix bugs and improve the app.
• Messages you send us. If you email us for support, we keep that correspondence. Feedback sent in Settings is stored in our private Cmd Deck inbox with its category, app platform and version. We include your account email only if you choose to share it. No garden records or location are automatically attached.

We use the information above to:

• run your account and keep your garden records in sync across your devices;
• work out the two or three jobs that matter this week, timed to your local weather;
• generate advice, diagnoses and the Grower’s Note using AI (see below);
• take payment and manage your subscription;
• send you the emails and notifications that keep the service working, such as welcome, password reset and billing messages;
• keep Grovekeeper secure, and diagnose and fix problems.

We do not sell your personal information, and we do not use it for advertising.

Grovekeeper uses AI to read your photos and garden records and turn them into advice, plant diagnoses and your weekly note. To do this we send the relevant garden data and photos to our AI providers, Anthropic and Google, purely to generate your result.

Under the commercial terms we use with these providers, your data is not used to train their models. If you connect your own AI assistant through the Grovekeeper connector, that assistant reads and writes your garden data on your instruction, and its own provider’s privacy terms apply to what it does with it.

We share your information with the services that run Grovekeeper, and only so they can perform their part. These are our processors:

• Supabase: database, file storage and sign-in.
• Vercel: hosting for the website and app.
• Stripe: website payments and subscriptions.
• Google Play and RevenueCat: Android purchases, subscription management and restoring paid access.
• Anthropic and Google: the AI that generates your advice and notes.
• Open-Meteo and MetOcean: weather forecasts, for which we send your garden coordinates.
• Google Maps: the map you place your tree pins on.
• Resend: the emails we send you.
• Cmd Deck: feedback you send us, with your account email only when you opt in.
• PostHog: product analytics and error reporting.

We may also share information if the law requires it, or to protect the rights, safety and property of Grovekeeper and our users.

If you choose to connect Google Calendar, we ask only for permission to create a dedicated GroveKeeper calendar and manage its task blocks. We check free and busy times on your primary calendar to avoid clashes; we do not read the titles, descriptions or other content of those events. When a task changes day, its block can move; completing or deleting a task removes its future block. We store your connected account email, calendar and event identifiers, scheduled times, and access credentials securely to keep this connection working. Calendar access credentials are kept on our server and are never sent to AI providers. You can disconnect in GroveKeeper Settings to remove the stored connection, or revoke access from your Google account settings. Existing blocks remain in Google Calendar until you remove them. Grovekeeper’s use of information from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Some of the services above are based overseas, including in the United States and Europe, so your information may be stored and processed outside New Zealand. Where we send personal information overseas we take reasonable steps to ensure it is protected by comparable safeguards, as required by the Privacy Act.

We keep your garden records for as long as your account is open. If you close your account or ask us to delete your data, we remove your personal information within a reasonable period, except where we are required to keep some records for legal, tax or accounting reasons.

Your connection to Grovekeeper is encrypted in transit, passwords are stored only as secure hashes, and access to your data is limited to what is needed to run the service. No system is perfectly secure, but we take reasonable steps to guard against loss, misuse and unauthorised access.

To delete your Grovekeeper account and data, open Settings in the app and choose Delete account. You can also request deletion without signing in by emailing info@grovekeeper.app from your account email address with the subject “Grovekeeper account deletion”.

Deletion removes your login and data in gardens you solely own, including their photos. Shared gardens remain available to their other members. Deleting your account does not cancel a store subscription. Cancel it separately in Google Play subscriptions or Apple subscriptions to stop future charges.

Under the Privacy Act 2020 you can:

• ask for a copy of the personal information we hold about you;
• ask us to correct anything that is wrong;
• ask us to delete your account and your data;
• opt out of non-essential emails using the unsubscribe link, or by emailing us.

To do any of these, email info@grovekeeper.app. If you are not happy with how we have handled your information, you can contact the Office of the Privacy Commissioner at privacy.org.nz.

We use a small number of cookies and similar storage to keep you signed in and to remember your preferences, and our analytics provider uses storage to understand how the app is used. We do not use advertising or cross-site tracking cookies.

Grovekeeper is made for adults tending their gardens and is not directed at children. We do not knowingly collect personal information from children under 16. If you believe a child has given us their information, email us and we will remove it.

We may update this policy as Grovekeeper grows. When we do, we will change the date at the top of this page, and for significant changes we will let you know in the app or by email.

Questions about this policy or your information? Email info@grovekeeper.app and we will get back to you.