Privacy policy

Last updated 4 November 2026

We collect as little as we can:

• Waitlist (closed on 17 October 2026): if you joined, we hold your email address, your selected interest tier, an optional 4-digit postcode, and — only if you tick the optional box — a single yes flag saying you have or would consider a home weather station or garden thermometer. If you leave that box unticked, nothing about it is sent or recorded at all: your answer is simply absent, and we treat absence as not interested. Stored in a locked database (insert-only from the public form; not readable via the public key). We will not email you: no launch email will be sent, and the address is not used to contact you. The details are used only to prioritise which climate zones we build first and — for the yes/no station flag — to decide whether a feature that reads your own sensor is worth building at all. The flag is a boolean; we never ask for, receive, or store any reading from a device you own. Never sold or shared. Delete-on-request: email us and we remove your row, the station flag included.
• The app: it works without an account. Your garden profile (location label, climate zone, growing conditions, preferences) is stored on your device, not on our servers (the one exception is the rounded area of your postcode, sent only if you turn on Weather alerts, described below). Your plantings, beds, harvest log, notes and the names of your own plants are on your device only, and are in your exported backup file only when you export one. If you type a plant name the catalogue does not carry, the app tells you so and records nothing.
• “Ask us to add this plant”. When you type a plant the catalogue does not carry, you can choose this button. It opens your own mail app with a draft addressed to hello@gardnery.com that names the plant you typed. You read it and decide whether to send it; the app sends nothing itself, and counts or records nothing without that email. If you send it, your mail provider handles the email under its own policy, and we read it to decide what to add.
• No tracking. The waitlist page has no analytics, ads or pixels, and nothing on it profiles you. It is not, however, a page that talks to nobody: submitting the form sends your email, your interest, your optional postcode and the station flag (only if you tick it) to our database, which is hosted by Supabase. That request is the only one the page makes on your behalf. We do not sell what it sends. Email hello@gardnery.com to have your row deleted.
• Purchases. The “My Garden” subscription (a 7-day free trial for eligible new subscribers, then monthly or yearly) is bought through Apple’s App Store or Google Play, and they take the payment and hold the billing relationship under their own privacy policies; prices come from them too. We never see a card number, a billing address, or your store account. To tell whether a subscription is active, and to restore it after a reinstall or on a new phone, the app uses RevenueCat, a purchase service run by RevenueCat, Inc. of the United States, which acts for us as a processor and stores its data on Amazon Web Services in the United States. RevenueCat’s software in the app gives it a generated anonymous app id (Gardnery gives RevenueCat no name, no email and no Gardnery account; the id is a random number, not an advertising id), the store’s purchase receipt or purchase token, the app version, the platform and operating-system version, the device model and your locale or store region; like any online request the connection also carries your IP address. RevenueCat’s privacy policy describes what it keeps and for how long. It answers whether My Garden is active, and keeps a signed copy of that answer on your phone so the app can work out, without a connection, whether your subscription is still running. Gardnery sends it no garden records: not your postcode, plantings, beds or notes. While subscriptions are on sale the app contacts RevenueCat only when it needs to: when you open the My Garden tab for the first time, when it asks the store whether you can have a free trial and what the plans cost; when you open the page that shows the plans or make a purchase; when you use a Help row that needs the store (Restore purchases, Redeem a code, Manage or cancel subscription, Copy purchase id); or when your phone already holds a Gardnery purchase, which the app knows from a note kept on the phone and not by asking RevenueCat. In that last case it also checks your access each time it opens and each time you come back to it, using the saved answer when that is recent and whenever you are offline. It does the same at launch if you have reminders or Weather alerts switched on and it does not yet know whether they are still part of your subscription. If you have never opened the My Garden tab, never bought anything and never used those rows, the app does not contact RevenueCat at all; in a version where nothing is on sale it does not set up RevenueCat or make these checks. The app itself stores no purchase record, and none goes into the backup file the app can export.
• Weather alerts (off until you turn them on). Weather alerts are part of My Garden, so you can turn them on only while a free trial or a subscription is running. In Settings you can turn on Weather alerts. Then, only while the app is open, it asks for a seven-day forecast for your area: at most every six hours once it has one, and, if a request fails, again after about half an hour. It does not ask while the app is closed or in the background, so an alert is only as fresh as the last time you opened the app. What is sent: a latitude and longitude rounded to two decimals — the centre of your postcode, accurate to about a kilometre, not your address — and nothing else: no name, no email, no install id and no cookie, and not your postcode, plantings or notes. The request goes to a small service run for Gardnery, hosted on Cloudflare. It necessarily sees the IP address of your connection, as any website does, but it keeps no logs and sets no cookies; we have Cloudflare’s own request logging for it switched off. It then asks MET Norway (the Norwegian Meteorological Institute) for the forecast, so MET Norway sees only that service and never your phone. The service stores a forecast summary against the rounded coordinates (not against you, your phone or any id) so that people in one area share one request: a copy is normally kept for as long as MET Norway says the forecast stays current, and in any case is deleted after at most 30 days. Because Cloudflare hosts the service, the connection, including its IP address, passes through Cloudflare’s network, and Cloudflare handles it under Cloudflare’s own privacy policy and may keep its own operational records of connections, which we do not receive and cannot read. The app keeps the last forecast on your phone, shows how old it is, and deletes it when you turn the switch off, and when My Garden ends. When Weather alerts are on, the app asks for permission to show notifications; an alert is built on your phone from the forecast and your plantings, and shown at 5 pm for the next day, at most one a day. The forecast is MET Norway’s, licensed under CC BY 4.0: Based on data from MET Norway. A note is a forecast for about a square kilometre, not a promise about your garden.
• Reminders. If you turn reminders on, the notifications are built and scheduled on your device from the plantings you added. Nothing about them leaves the phone and there is no push service.
• The free-trial reminder. If you start a free trial, the app schedules notifications on your device, two days before it ends and on its last morning, from the end date and the renew-or-cancelled status the store reported to the purchase service. It is built and shown on your phone like the reminders above; nothing about it is sent anywhere, and the app does not ask permission for it — it shows only if you have already allowed notifications for Gardnery.
• “Contact us”. Settings → Help → Contact us opens your own mail app with a note to hello@gardnery.com. The note lists only the app version, your platform and, while subscriptions are on sale, your purchase id; you read and can change it before you press send, and the app sends nothing itself. Your mail provider handles the email under its own policy; we read it to answer you. The Email us about a refund button under Settings → Help → Ask for a refund opens the same kind of draft, with the subject “[Refund request]”.
• Gardnery works offline. It goes online only for purchases, when needed, and, if you turn on weather alerts, to fetch the forecast for your postcode’s area. It never sends your plantings, beds or notes anywhere. Everything the app answers with is in the app: the catalogue is built in, answers are worked out on your device, and reminders are scheduled on your device. The connections the app can make are for purchases (RevenueCat’s software setting up, listing the plans, buying, restoring and checking access, made only when needed) and, only if you turn on Weather alerts, for the forecast (described above). Neither carries a planting, bed, note or backup. Sharing or exporting your garden, opening a link, and importing a file use the apps and services you choose; those are yours, not Gardnery’s. There is no account, no analytics SDK and no advertising. On Android, the store billing libraries, RevenueCat’s software and weather alerts are why the app carries the internet permission, and a Google library bundled with Play Billing may send its own diagnostics to Google; we neither receive nor read that traffic.
• Deleting your purchase record. RevenueCat holds an anonymous record for your install, keyed by that generated id. To have it deleted: before you uninstall, open Settings → Help → Copy purchase id (shown while subscriptions are on sale), then email the id to hello@gardnery.com; we ask RevenueCat to delete that record. Uninstalling deletes the id and the cached answer from your phone only, not RevenueCat’s copy. Cancelling a subscription is done in Google Play or the App Store and is separate. Apple and Google keep their own transaction records under their own policies.
• App Store refund requests. When you ask Apple for a refund, Apple asks us for basic information about that purchase so it can decide, such as when it was bought and whether it has been used. RevenueCat sends that on our behalf and, for a request made within the 48-hour goodwill window, our preference that the refund be granted. It is about the purchase only: nothing from your garden is sent. We never ask for your bank details.
• Your device’s own backup. The app keeps your profile, plantings and ticked tasks in the phone’s ordinary app settings, and Android’s Auto Backup is left on for exactly that one file (allowBackup is true and the backup rule set in the app names FlutterSharedPreferences.xml and nothing else). So Google’s backup — or iCloud’s, on an iPhone — may copy those settings off the device to your own cloud account. That is the operating system’s backup under its own privacy policy, not a Gardnery server; we cannot read it, and you can turn it off in your device settings. The diagnostics log leaves the device only when you share it yourself; on iOS we ask the system not to back it up, and the OS backup may still copy other saved settings.
• “Report a problem”. The app writes a short local log of recent errors. It leaves the device only if you open the report yourself and pick a destination in your phone’s share sheet — it holds recent error text, the app version and the device type, and it does not contain your garden.
• If we add accounts later, this policy will be updated first, and the new collection will be spelled out before it starts.

Overseas processors (Australian Privacy Principle 8). We are an Australian operation, but the services below are run overseas, and information that goes to them can be stored or handled outside Australia:

• RevenueCat, Inc. (purchase checking) — the United States, on Amazon Web Services. It receives the anonymous app id, the store receipt or token, the app version, platform, device model and locale, and the connection’s IP address (see Purchases above).
• Cloudflare (the weather service), only if you turn on Weather alerts — its network runs in many countries. It handles your connection, including its IP address, and holds the forecast summary for each rounded location.
• MET Norway (the forecast source), only if you turn on Weather alerts — Norway. It sees only our weather service, never your phone.
• Supabase (the closed waitlist’s database) and Vercel (this website).

We use Supabase and Vercel only to hold the waitlist entries and run this site, RevenueCat only to check purchases, and Cloudflare and MET Norway only for the forecast. We do not send these services your plantings, beds, notes or harvest log. Apple and Google, who take payment, are separate providers under their own policies. Access, correction and deletion. Email hello@gardnery.com and we will tell you what we hold about you, correct it, or delete it. For most people that is nothing, because your garden is on your phone; what we can hold is a closed-waitlist row and any email you sent us. Complaints: write to us first at the same address and we will reply within 30 days. If you are not satisfied you can complain to the Office of the Australian Information Commissioner, the OAIC (oaic.gov.au).