Privacy Policy

What we collect

• Account information — identifiers, email, and name used to create and administer your account. Clerk handles authentication.
• Your homestead data — records you enter, such as animals, gardens, pastures, finances, tasks, notes, photos, map boundaries, and similar material.
• Weather station data — readings sent when you connect a supported station.
• Technical and security data — limited operational metadata used to secure, support, and rate-limit the service.

App security events

When a high-signal control blocks suspicious or abusive activity, our app may store a bounded, deliberately sampled security event. It may include the event type and severity, a user or household identifier when known, a pseudonymous HMAC-hashed network identifier when a server-side salt is configured, the relevant routes or scopes, a sample count, short allowlisted metadata, and timestamps. This table is a sampled security signal, not a record of every blocked occurrence.

App security events do not include request bodies, customer record content, emails, authentication tokens, cookies, full headers, or the original network address. The hashed network value is used only to recognize repeated security activity; it is not used for advertising.

Where data is processed

We use a small set of providers, primarily in the United States. Railway hosts the app and managed PostgreSQL/Redis services. Clerk provides authentication. Cloudflare operates the edge network in front of the app. Sentry may receive configured application error or performance diagnostics when monitoring is enabled. Microsoft Graph sends transactional email.

Those providers may process their own service, network, security, or diagnostic logs under their contracts and privacy practices. Their logs are separate from the bounded app security-event table described above, and this policy does not claim that their systems use the same fields or retention period.

How we use information

We use information to provide and maintain the app, isolate household data, secure accounts, prevent and investigate abuse, send transactional messages, respond to support requests, debug problems, back up and recover the service, and improve reliability. We do not sell personal data or share it for targeted advertising.

Household privacy and operator access

Homestead records are scoped to a household and are not available to unrelated users. Household members may see records according to their role. The owner/operator and authorized providers may access systems and logs when reasonably needed for support, maintenance, security, backups, legal obligations, or migrations.

Retention and deletion

Deleted homestead records are normally soft-deleted and then permanently purged after about 21 days. You may export records and request deletion of your account and associated personal data. Some information may be retained when reasonably necessary to complete deletion, protect the service, prevent fraud or abuse, establish or defend legal claims, keep required business records, or comply with law.

By default, app security events are retained for 90 days. A specific event may be retained longer under an explicit, time-bounded hold for an active security investigation or legal obligation, then deleted when the hold and other applicable obligations end.

Infrastructure backups are maintained for disaster recovery and are not an individual-record restore service. Deleted information may remain in protected backup copies until those copies rotate out, and it is not restored to active systems except as part of disaster recovery.

Versioned legal acknowledgements may be retained as evidence of the terms accepted and the acceptance timestamp, including after an account-deletion request when reasonably necessary for legal compliance or claims.

Your choices and rights

You can review and correct many records in the app, export your homestead data, and request account deletion. Subject to applicable law and identity verification, you may also have rights to access, correct, delete, or receive certain personal data, restrict or object to certain processing, or appeal a request decision.

A deletion request does not require deletion of information that applicable law permits or requires us to retain, such as limited security evidence, legal acknowledgements, fraud-prevention records, or protected backup copies awaiting normal rotation. Contact us to make a request; we will respond as required by applicable law.

Security

We use reasonable safeguards including encrypted transport, access controls, bounded security telemetry, and per-household authorization checks. No system is perfectly secure, so we cannot guarantee absolute security. Keep independent exports of critical records.

Children

The app is not directed to children under 13 or the minimum applicable age in their country, and we do not knowingly collect their personal data.

Changes and contact

Material policy changes will receive a new effective date and version date. Questions and privacy requests may be sent to [email protected].