GrowSmart ("we," "our," "us") is operated by Amanda Holt in Ontario, Canada. This policy explains how we collect, use, and protect your information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Information We Collect
Data you provide directly:
- City and province/state selection (to determine your hardiness zone and frost dates)
- Plant selections and garden plan configuration
- Care log entries (watering, feeding, pruning dates)
- Email address (only if you subscribe to the newsletter or create a Pro account)
- Payment information (processed by LemonSqueezy — we never see or store your card details)
- Feedback form responses (submitted voluntarily)
Data collected automatically:
- Anonymous usage analytics via Plausible Analytics — no cookies, no personal data, no tracking across sites. Plausible collects page views, referral sources, browser type, and country. No individual can be identified.
- Anonymous, aggregated product analytics via Supabase — we record anonymous events such as which features are used, which plants are popular, and general app interactions. These events are linked to a randomly generated device identifier stored in your browser's localStorage. This identifier cannot be used to identify you personally. No names, email addresses, IP addresses, or location data beyond your selected city are included in these events.
Data we do NOT collect:
- No cookies are set by GrowSmart
- No fingerprinting or cross-site tracking
- No location data beyond the city you select
- No social media data
2. How Your Data Is Stored
Phase 1 (current): All garden data (plant selections, care log, settings) is stored in your browser's localStorage. This data lives on your device only. We cannot access it, and it is not transmitted to any server. If you clear your browser data or switch devices, this data is lost.
Anonymous analytics: Aggregated usage events are stored in Supabase's cloud infrastructure with encryption at rest and in transit. These events contain no personally identifiable information.
Phase 2 (planned — Summer 2026): Optional cloud sync via Supabase will allow you to save your garden across devices. Cloud sync will require account creation and will be opt-in. Your data will be stored in Supabase's infrastructure with encryption at rest and in transit.
3. How We Use Your Information
We use your information to:
- Generate your personalized growing schedule based on your zone and frost dates
- Process Pro subscription payments
- Send gardening newsletters and product updates (only with your express consent)
- Improve GrowSmart based on anonymous analytics and voluntary feedback
- Understand which features are most useful so we can prioritize development
We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data for advertising. We do not profile you.
4. Third-Party Services
GrowSmart uses the following services, each with their own privacy policies:
- LemonSqueezy — Payment processing and subscription management. Handles all payment card data. We never see your card number.
- Plausible Analytics — Privacy-friendly, cookie-free website analytics. No personal data collected. GDPR and PIPEDA compliant by design.
- Supabase — Anonymous product analytics and future cloud sync infrastructure. Stores only anonymized event data in Phase 1.
- Resend — Email delivery for newsletters and transactional emails. Processes your email address only if you subscribe.
- Netlify — Web hosting. Processes standard server logs (IP address, browser type) as described in their privacy policy.
- Pinterest — Conversion tracking pixel on the landing page only. Tracks page visits for advertising campaign measurement. No personal data is shared with Pinterest from within the app.
5. Consent
By using GrowSmart, you consent to the collection of anonymous analytics data via Plausible and Supabase. For all other data collection (email, payment, cloud sync), we obtain your express consent at the point of collection.
You may withdraw consent at any time by contacting us. Withdrawal of consent may affect our ability to provide certain services (for example, withdrawing email consent means you will no longer receive newsletters).
6. Your Rights
Under PIPEDA, you have the right to:
- Access — Request a copy of the personal information we hold about you
- Correction — Request corrections to inaccurate information
- Deletion — Request deletion of your personal information
- Withdrawal of consent — Withdraw consent for data collection at any time
To exercise any of these rights, email hello@getgrowsmart.com. We will respond within 30 days.
For data stored in localStorage (Phase 1), you can delete it yourself at any time by clearing your browser's site data for getgrowsmart.com.
7. Data Retention
localStorage data persists on your device until you clear it. We have no control over this data.
Anonymous analytics events are retained for a maximum of 2 years, then deleted.
Email addresses are retained for as long as your subscription is active, or until you unsubscribe.
Payment records are retained by LemonSqueezy according to their retention policy and applicable tax law (typically 7 years for financial records in Canada).
8. Data Security
We protect your information through:
- HTTPS encryption on all connections to getgrowsmart.com
- No server-side storage of garden data in Phase 1
- Payment processing handled entirely by PCI-compliant LemonSqueezy
- Row-level security on all Supabase tables
- Minimal data collection — we only collect what is necessary to provide the service
9. Children's Privacy
GrowSmart is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at hello@getgrowsmart.com and we will delete it promptly.
10. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we will provide additional notice (such as an in-app notification or email to subscribers). Your continued use of GrowSmart after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this privacy policy or our data practices:
GrowSmart
Amanda Holt
Email: hello@getgrowsmart.com
Foxboro, Ontario, Canada