Privacy policy

Who this covers

This policy describes how Yop & Tom Garden Companion (the "service") collects and uses personal information when you create an account and use the app.

What we collect

• Account data: email address and authentication details (including optional sign-in with Google via our auth provider).
• Profile & settings: choices you make in Settings (for example name, country or region, time zone), security preferences such as optional two-step verification, and subscription status tied to billing.
• Content you add: plant records, garden plans and maps, journal entries, photos you upload for plants, care schedules, harvest logs, seed and bulb inventories, checklists and tasks, shopping lists, expense entries, badges or progress hints, seasonal notes — everything stored with your account on the backend.
• Billing data (subscriptions): when you subscribe to a paid plan, our payment processor receives and handles payment details; we retain identifiers needed to manage your subscription (such as customer and subscription IDs), not full card numbers on our own servers.
• Technical data: diagnostics the hosting and auth platforms may collect (such as IP address, timestamps, device or browser clues) to operate, secure, and debug the service.

Why we use it

We process this information to provide and improve the service, keep your account secure, sync your data across devices, operate optional paid plans, deliver account-related emails, and respond when you reach out. We do not sell your personal information.

Email & messages

Sign-in confirmations, magic links, password resets, and similar account mail are handled through our authentication provider's email channel. Messages you initiate through the contact form may be delivered using a transactional email provider (for example Resend) using the email address you provide so we can reply. Those processors handle message delivery under their own terms as sub-processors of the service.

Plant identification & photos

Photo scan sends the image or identifier you submit to Kindwise's plant.id service solely to return identification suggestions. We do not use scan content for targeted advertising; Kindwise processes requests under its own terms and privacy policy — worth a read if you use scanning often. Optional links in the product may open other sites (for example search or reference pages); those are outside this service unless stated.

Care calendar subscriptions

If you enable a subscribed calendar feed, your calendar application fetches updates from an unguessable link we issue. Anyone with that URL could see aggregated care timings for your account's schedules; treat the link like a password and regenerate it from Settings if it is ever exposed.

Where data is stored

Your account and app content live in databases and authentication services operated by suppliers we use today (including Supabase for backend and identity), alongside web hosting infrastructure. Paid billing is handled by Stripe. Providers may store or process data in regions they operate, consistent with agreements that back the product.

How long we keep it

We keep your information for as long as your account exists and for a short period afterwards where needed for backups, legal obligations, or dispute resolution, unless the law requires otherwise.

Your choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to certain processing. You can update profile, security, subscription, and most content inside the app. You can also download a copy of your data or delete your account from Settings → Security. For other privacy-specific requests, use our contact page or write to contact@yopandtom.com.

Changes

We may update this policy from time to time. We will post the revised version here and adjust the "Last updated" date. Continued use of the service after changes means you accept the updated policy.