Privacy Policy

Grovekeeper (“we”, “us”, “our”) operates the Grovekeeper website, web app and mobile app at grovekeeper.app. If you have a question about your privacy or the information we hold, email info@grovekeeper.app. We are the agency responsible for your personal information.

We collect the following, and only what we need to run the service.

• Account details. Your first name, email address, a password (stored only as a secure hash, never in plain text) and the name of your garden. You give us these when you sign up.
• Garden records. The trees and plants you add, tasks, observations, notes, corrections, tags and any photos you upload of your garden. This is the record you build as you use Grovekeeper.
• Location. The address or coordinates of your garden, which we turn into a latitude and longitude so we can fetch your local weather and place your trees on a map. You choose to provide this during onboarding or in settings.
• Billing details. If you subscribe to a paid plan, our payment provider Stripe handles your card. We receive your subscription status and plan, not your full card number.
• Usage and device data. Basic analytics about how the app is used, such as pages viewed, features used, rough device and browser type, and error reports. This helps us fix bugs and improve the app.
• Messages you send us. If you email us for support, we keep that correspondence.

We use the information above to:

• run your account and keep your garden records in sync across your devices;
• work out the two or three jobs that matter this week, timed to your local weather;
• generate advice, diagnoses and the Grower’s Note using AI (see below);
• take payment and manage your subscription;
• send you the emails and notifications that keep the service working, such as welcome, password reset and billing messages;
• keep Grovekeeper secure, and diagnose and fix problems.

We do not sell your personal information, and we do not use it for advertising.

Grovekeeper uses AI to read your photos and garden records and turn them into advice, plant diagnoses and your weekly note. To do this we send the relevant garden data and photos to our AI providers, Anthropic and Google, purely to generate your result.

Under the commercial terms we use with these providers, your data is not used to train their models. If you connect your own AI assistant through the Grovekeeper connector, that assistant reads and writes your garden data on your instruction, and its own provider’s privacy terms apply to what it does with it.

We share your information with the services that run Grovekeeper, and only so they can perform their part. These are our processors:

• Supabase: database, file storage and sign-in.
• Vercel: hosting for the website and app.
• Stripe: payments and subscriptions.
• Anthropic and Google: the AI that generates your advice and notes.
• Open-Meteo and MetOcean: weather forecasts, for which we send your garden coordinates.
• Google Maps: the map you place your tree pins on.
• Resend: the emails we send you.
• PostHog: product analytics and error reporting.

We may also share information if the law requires it, or to protect the rights, safety and property of Grovekeeper and our users.

If you choose to connect Google Calendar, we ask only for permission to create calendar events, so a garden task can land in your calendar when you ask for it. We do not read your existing calendar. You can disconnect at any time from your Google account settings, and Grovekeeper’s use of information from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Some of the services above are based overseas, including in the United States and Europe, so your information may be stored and processed outside New Zealand. Where we send personal information overseas we take reasonable steps to ensure it is protected by comparable safeguards, as required by the Privacy Act.

We keep your garden records for as long as your account is open. If you close your account or ask us to delete your data, we remove your personal information within a reasonable period, except where we are required to keep some records for legal, tax or accounting reasons.

Your connection to Grovekeeper is encrypted in transit, passwords are stored only as secure hashes, and access to your data is limited to what is needed to run the service. No system is perfectly secure, but we take reasonable steps to guard against loss, misuse and unauthorised access.

Under the Privacy Act 2020 you can:

• ask for a copy of the personal information we hold about you;
• ask us to correct anything that is wrong;
• ask us to delete your account and your data;
• opt out of non-essential emails using the unsubscribe link, or by emailing us.

To do any of these, email info@grovekeeper.app. If you are not happy with how we have handled your information, you can contact the Office of the Privacy Commissioner at privacy.org.nz.

We use a small number of cookies and similar storage to keep you signed in and to remember your preferences, and our analytics provider uses storage to understand how the app is used. We do not use advertising or cross-site tracking cookies.

Grovekeeper is made for adults tending their gardens and is not directed at children. We do not knowingly collect personal information from children under 16. If you believe a child has given us their information, email us and we will remove it.

We may update this policy as Grovekeeper grows. When we do, we will change the date at the top of this page, and for significant changes we will let you know in the app or by email.

Questions about this policy or your information? Email info@grovekeeper.app and we will get back to you.