Effective date: September 30, 2026
This privacy policy explains how Planter LLC ("Planter", "we", "us") collects, uses, and shares information when you use:
- the Planter app on any device or platform we offer it on, including phones, tablets, computers, and the web (currently iOS, iPadOS, Android, Amazon Fire OS, macOS, and planter.garden/app), and
- our websites planter.garden and myfrost.date.
The short version: we collect what we need to run Planter and make it better. We don't sell your data and we don't share it with advertisers. Analytics are off until you agree in the EU/EEA, the UK, Switzerland, and Quebec, and you can turn them off anywhere. You can delete your account at any time.
Who we are
Planter LLC, 1206 Storrs Rd, Ste C #285, Storrs, CT 06268-2234, USA. For anything privacy-related, including requests to exercise your rights, email privacy@planter.garden. That address reaches our Privacy Officer, who is also our person in charge of the protection of personal information under Quebec law.
What we collect
Information you give us
- Account details: your email address, and your name and profile picture if your sign-in method provides them (Google, Apple, Facebook, or email). You can use much of Planter without an account.
- Your garden content: gardens, plants, varieties, notes, photos, tasks, and settings you create.
- Community content: anything you choose to make public, such as feature requests, comments, and shared plants or varieties. Public content can be seen by other people.
- Planter purchases: when you buy Planter Premium, which plan you bought, when, its price, and its status. Payment details are handled by Apple, Google, Amazon, or Stripe; we never see or store your full card number.
- Messages: what you send us when you contact support or send feedback, including any screenshot you attach.
- Newsletter: your email address and subscription status, if you subscribe.
Information collected automatically
- Device and app information: device type and model, operating system, app version, language, and identifiers such as a Firebase installation ID and push-notification token.
- Approximate location: your country, region, city, and postal code, and approximate (city-level) coordinates, derived from your IP address. We use this for things like local pricing, frost-date suggestions, and deciding whether analytics need your consent. We don't collect your precise location. If you choose to use your device's location to find your frost dates, it's used once to look up nearby climate data and isn't stored.
- Usage information (only if analytics are on): which screens and features you use, and events such as creating a garden or custom plant.
- Crash and error reports: technical details when the app crashes or hits an error, so we can fix it.
- Newsletter engagement: which links in our newsletter you click, and whether you open it (using a small image in the email). We don't track opens in the EU/EEA, the UK, Switzerland, or Quebec.
- Promo links: if you open a Planter promo link, we briefly keep your IP address and basic device details (screen size, time zone, and language) so the offer is applied when you open the app. They're deleted automatically after 20 minutes.
How we use it
| Purpose | Information used | Legal basis (EU/UK) |
|---|---|---|
| Sync your gardens and data across your devices | Account details, garden content | Contract (providing Planter to you) |
| Send reminders and notifications you turn on | Push-notification token, garden content | Contract |
| Process Planter purchases and restore your subscription | Planter purchases, account details | Contract; legal obligation (tax and accounting records) |
| Local pricing, frost-date suggestions, regional settings | Approximate location | Legitimate interests (a relevant, local experience) |
| Understand how Planter is used and improve it | Usage information | Consent in the EU/EEA, UK, Switzerland, and Quebec; legitimate interests elsewhere, with an opt-out |
| Fix crashes and errors, keep Planter secure, and prevent fraud and abuse | Crash reports, device information, IP address | Legitimate interests |
| Answer support requests and feedback | Messages, account details | Contract; legitimate interests |
| Send service messages (for example receipts, security notices, important changes) | Email address | Contract; legitimate interests |
| Send the newsletter | Email address, newsletter engagement | Consent (you opt in; unsubscribe any time) |
| Apply promo links | IP address and basic device details (deleted after 20 minutes) | Legitimate interests |
| Comply with the law and protect our rights | Any, as needed | Legal obligation; legitimate interests |
Who we share it with
We don't sell your personal information and we don't share it for cross-context behavioral advertising. We share it only with service providers that process it on our behalf, under contracts that limit their use of it:
| Provider | What they do for us |
|---|---|
| Google (Firebase and Google Cloud) | Sign-in, database and file storage, hosting, push notifications, crash reports (Crashlytics), analytics (Google Analytics for Firebase), app configuration, and AI features such as plant icon generation |
| Amplitude | Product analytics (only when analytics are on) |
| Sentry | Error reports from the web app |
| Wiredash | In-app feedback and bug reports |
| RevenueCat | Managing Planter subscriptions and purchases |
| Apple, Google, Amazon, and Stripe | Taking payment for Planter purchases (Stripe for purchases on the web) |
| Mailgun and Mailjet | Sending email, including the newsletter |
| Ipregistry | Turning your IP address into an approximate location |
| Shorebird | Delivering app updates |
| OpenStreetMap (maps, Nominatim), Apple, and Google | Maps and place search |
| Google (YouTube) and Uploadcare | Embedded videos and images on our websites, which receive your IP address when loaded |
| GitHub (via rawcdn.githack.com) | The emoji font for garden summary PDFs, downloaded only when you export one |
| Facebook, Google, and Apple | Sign-in, only if you choose that sign-in method |
We may also disclose information if required by law, to protect the rights, property, or safety of Planter, our users, or others, or as part of a merger, acquisition, or sale of assets (we'll tell you before your information becomes subject to a different privacy policy).
Cookies and similar technologies
- Our websites use Google Analytics cookies to understand how they are used. In the EU/EEA, the UK, Switzerland, and Quebec they're only set if you accept them in the cookie banner; elsewhere you can turn them off at any time with "Cookie settings" at the bottom of each page. Your choice is stored in your browser. We don't use advertising cookies.
- The web app uses the same banner and also stores data in your browser (local storage and IndexedDB) to keep you signed in and remember your settings. Analytics storage follows your banner choice.
- The mobile and desktop apps don't use cookies. Analytics follow Settings → Privacy → Analytics, which is off by default in the EU/EEA, the UK, Switzerland, and Quebec.
How long we keep it
- Account and garden content: while your account exists. When you delete your account, your account, gardens, notes, and photos are deleted from our database and storage straight away. Copies in our backups are deleted as the backups expire, within 60 days. We also ask our analytics and email providers to delete your data; crash reports expire on their own (see below), and purchase records are kept as described below. Public content you shared, such as feature requests, comments, and public plants, stays up but is no longer linked to you.
- Planter purchase records: kept indefinitely, including after you delete your account, for accounting, tax, refunds, and dispute handling.
- Analytics data: 14 months in Google Analytics and 12 months in Amplitude, then deleted or kept only in aggregate.
- Crash and error reports: 90 days.
- Support messages and feedback: kept indefinitely, so we can refer back to earlier conversations; ask us to delete them at any time.
- Newsletter: until you unsubscribe; we keep a minimal record of the unsubscribe so we don't email you again.
- Promo link data: 20 minutes.
Your choices and rights
Wherever you live, you can:
- Access or get a copy of your information: email us (see "Who we are").
- Correct it: in the app, or email us.
- Delete your account and its data: in the app under Settings → Manage Account → Delete Account, or email us if you can't sign in (see also how to delete your account). Deleting your account doesn't cancel a subscription: cancel it in your app store's subscription settings, or, for purchases on our website, with the link in your receipt email or by emailing us.
- Turn off analytics: in the app under Settings → Privacy → Analytics, or with "Cookie settings" on our websites.
- Turn off crash reports: in the app under Settings → Privacy → Crash reports.
- Unsubscribe from the newsletter: with the link in any newsletter, or in Settings → Notifications.
- Turn off push notifications: in your device settings.
EU/EEA, UK, and Switzerland: you also have the right to object to processing based on legitimate interests, to restrict processing, to data portability, to withdraw consent at any time (without affecting earlier processing), and to complain to your data protection authority.
California and other US states with privacy laws: you have the right to know what personal information we collect, use, and disclose (described in this policy), to access, correct, and delete it, and not to be discriminated against for using these rights. We don't sell or share personal information, or use sensitive personal information to infer characteristics about you. You can use an authorized agent. If we decline your request, you can appeal by replying to our response.
Canada (including Quebec): you can access and correct your information, withdraw consent, and ask about how it's used and where it's stored. In Quebec, you can also ask how decisions using your information are made and have it deleted or de-indexed where applicable.
Australia: you can access and correct your information and complain to us, and then to the Office of the Australian Information Commissioner.
We don't make decisions about you based solely on automated processing.
We'll reply within 30 days (45 days for some US requests), and may need to verify your identity first.
Where your information is stored
Planter is based in the United States, and our service providers mostly process information in the US. If you live outside the US, your information will be transferred to, stored, and processed in the US and other countries where our providers operate, which may have different data protection laws from yours. When we transfer information from the EU/EEA, the UK, or Switzerland, we rely on the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on the European Commission's standard contractual clauses.
Children
Planter isn't directed at children under 13 (under 16 in the EU/EEA and UK), and we don't knowingly collect their personal information. If you believe a child has given us personal information, contact us and we'll delete it.
Security
We protect your information with measures such as encryption in transit, access controls, and limiting access to people who need it. No system is perfectly secure, but we work to keep your information safe and will notify you and the authorities of a breach where the law requires.
Changes to this policy
We'll post any changes here and update the effective date. If we make a significant change, we may also let you know, for example in the app or on our websites, before it takes effect.
Contact us
Questions or requests: privacy@planter.garden, or write to Planter LLC, 1206 Storrs Rd, Ste C #285, Storrs, CT 06268-2234, USA.