Privacy Policy

1. Who we are

Harvestead (“we,” “us,” or “our”) helps people grow food, learn from each other, and keep track of their garden. This Privacy Policy explains what information we collect, why we collect it, who we share it with, and the choices you have.

The controller of your personal data is reapandsowpa, LLC. You can reach us any time at hello@harvestead.com.

2. Information we collect

• Account information: email address, password hash, and optional display name when you create an account.
• Garden data: your USDA zone, frost dates, planting records, harvest logs, task reminders, and journal entries you choose to save.
• Community content: posts, photos, comments, event RSVPs, and group interactions you add to The Grove.
• Uploaded photos: images you upload for garden planning, pest identification, community posts, or your profile.
• Device and usage data: basic device type, pages and features used, approximate location derived from your ZIP code or IP address, and crash logs.
• Email engagement: whether an email we send was delivered, opened, or clicked, so we can fix broken sends and stop mailing people who are not reading.
• Payment data: plan selections and subscription status. Payment processing is handled by Stripe; we never receive or store full card numbers.
• Email subscribers: name, email address, sign-up source, and topic tags when you join our list.

3. Automated features and how they use your data

Some Harvestead features are powered by third-party machine-learning models. When you use them, the text or image you submit is sent to the model provider to generate a response:

• Harvestead Garden Guardian: your question, and any photo or garden context you attach, is processed by Google Gemini models via the Lovable AI Gateway.
• Photo screening: images uploaded to The Grove are automatically checked for unsafe or off-topic content before they appear publicly.

These providers process the submission to return a result and act as our processors. Do not submit sensitive personal information, medical details, or anything you would not want processed by a third party. Automated suggestions can be wrong; verify important growing, food safety, and financial decisions locally.

4. How we use information

• Provide and personalize your garden plan, lessons, and schedule.
• Run The Grove community and protect it from spam or abuse.
• Process subscriptions, manage billing, and respond to support requests.
• Send account, learning, and optional marketing emails.
• Produce aggregated, de-identified regional insights, for example what crops succeed in a growing zone. Aggregated insights never identify an individual grower or exact address.
• Improve the app, measure feature usage, and fix issues.

5. Cookies, local storage, and tracking

We use cookies and browser local storage to keep you signed in, remember your zone and preferences, and measure feature usage. Links in our emails may pass through a redirect so we can count clicks. We do not run third-party advertising networks and we do not sell or share personal information for cross-context behavioral advertising. You can clear cookies and local storage in your browser at any time, though signing in requires them.

6. Sharing and service providers

We do not sell your personal information. We share limited data with trusted service providers who help run the app:

• Lovable Cloud / Supabase: database, authentication, file storage, and hosting.
• Stripe: payment processing and subscription management.
• Lovable AI Gateway and Google (Gemini): automated garden grow coach, plant identification, and photo screening.
• Lovable email delivery: sending and delivery reporting for account and marketing email.
• Kit (formerly ConvertKit): email list management, if you subscribe through a Kit form.
• Google: optional sign-in and product analytics.

We may also disclose information when required by law, to enforce our terms, to protect people from harm, or in connection with a merger or sale of the business. Some providers process data in the United States; where required, transfers rely on standard contractual clauses.

7. Your rights and choices

• Update your profile, garden data, and email preferences in the app.
• Unsubscribe from marketing email using the link in every marketing message, or at harvestead.com/unsubscribe. Account and billing messages are not marketing and continue while your account is open.
• Request access to, correction of, export of, or deletion of your personal data by emailing hello@harvestead.com. We respond within 30 days and will not discriminate against you for exercising a right.
• If you are in the EEA or UK, you may object to processing, withdraw consent, or lodge a complaint with your local supervisory authority. Our lawful bases are contract (running your account), legitimate interests (security, product improvement), and consent (marketing email).
• If you are in California, you may exercise access, deletion, correction, and opt-out rights described above. We do not sell personal information.

8. Data retention and security

Changing or cancelling a paid plan does not delete anything you logged. Plantings, harvests, sales, notes, and designs stay on your account. A lower plan limits which past-season views you can open; upgrading restores access to those views. You can download everything you have logged as CSV at any time from your data and continuity page, which also states plainly what happens to your order book and buyer list.

We keep your account and garden data while your account is active. If you ask us to close your account, write to hello@harvestead.com and personal data is removed within 30 days, except records we must keep for tax, legal, or fraud-prevention reasons, and de-identified aggregate statistics that can no longer be linked to you. Data is encrypted in transit, access is restricted by row-level security rules, and we review permissions regularly. No system is perfectly secure; report a concern to hello@harvestead.com.

9. Children

Harvestead is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes and contact

We will post updates to this page and note the date above; material changes are announced in the app or by email. Questions about this policy, your data, or a copyright concern (see our copyright policy)? Reach the team at hello@harvestead.com.