Privacy Policy

Your garden observations are private. We don’t sell your data, we don’t use your observations to target you with ads, and we don’t share what you tell Percy with anyone. Your observations are used only to help you. Full stop.

If you want the longer version, it’s below.

What you tell Percy. Voice notes and text observations you record. These are the heart of the product. We store them so you can search and review them, and so Percy can surface patterns over time.

Your account information. Your email address, your location (a city, postal code, or region you provide during setup), and the password you use to sign in (stored securely, never in plain text). If you sign in with Google, we receive only what Google passes along, typically your name and email address.

Weather data. When you share an observation, Percy automatically looks up the current weather conditions (temperature, humidity, wind, precipitation, cloud cover) based on the general location you provided. This weather data is attached to your observation to enrich your garden’s history. Percy also checks the forecast daily to alert you about frost, heat, or severe weather that could affect your garden. Weather data is fetched from Open-Meteo, a free weather API. We send only your general location (not your name, email, or any identifying information) to look up conditions.

Photos you attach. If you add a photo to an observation, it’s stored securely in the cloud alongside your observation. Photos are checked by an automated moderation system (to keep things family-friendly) before they’re stored. The moderation check uses AI and the image is not retained by the moderation service.

Garden layout sketches and photos. If you choose to share your garden layout, any sketches or photos you upload are stored alongside your profile. They help Percy understand your space. Where the beds are, what’s near what, how it’s all arranged. So advice about what goes where is based on your actual garden rather than a guess.

Your garden address. If you choose to share it, your street address is stored securely and used only to calculate how sunlight moves across your specific space through the seasons. It’s never shared with anyone. This is entirely optional. Percy works well without it. If you do share it, the address is converted to geographic coordinates for sun calculations via OpenStreetMap’s Nominatim service, which receives only the address text, nothing else about you.

Basic usage data. Aggregate, anonymized data about how the app is used, things like which features people use most. We use Plausible Analytics, which is privacy-respecting and doesn’t use cookies or track you across the web. No individual sessions, no fingerprinting.

What we don’t collect. We don’t collect your contacts, your calendar, or anything from your device you didn’t explicitly give us. We don’t track your precise location or use GPS. The one exception: if you choose to share your garden’s street address during setup, it’s used to calculate sunlight patterns for your specific space. That’s the extent of it, and it’s always your choice. The location you provide during setup is used to look up weather conditions and tailor advice to your growing region. Our analytics (Plausible) show us aggregate traffic by country and city. We see that visitors came from Boston, not that you came from Boston. No individual tracking, no cookies.

Your observations are used to run the product: parsing what you said into organized data, making it searchable, surfacing patterns, and generating your Migration Report. That’s it.

Your location is used to look up weather conditions for your area, check the forecast for alerts that matter to your garden, and tailor Percy’s advice to your growing region and planting zone.

Your garden layout is used to understand the spatial relationships in your space: which beds get sun, what’s near what, how the whole thing is oriented. Combined with your address, Percy can estimate actual sun hours per growing area at different times of year. The result is advice that’s specific to your conditions rather than general to your region.

Your email is used to send you your Migration Report, updates about Percy, and the occasional thing we think you’d actually want to know about. You can unsubscribe anytime.

Your data is never used to train AI models. What you tell Percy stays in your garden. We use the Claude API (Anthropic) to parse observations. Anthropic’s API data policies apply to that processing, but your observations are not used to train their models under our agreement.

We don’t sell your data. Not to advertisers, not to data brokers, not to anyone. We’re not in that business.

Supabase stores your data securely in the cloud. They’re our database provider. They don’t have access to your data for their own purposes.

Anthropic (Claude API) processes your observations to parse them into structured data. This is what makes voice input work. Anthropic does not use API data to train models.

OpenAI (Whisper API) provides speech-to-text transcription when you use voice input. Your audio is sent to OpenAI for transcription only and is not stored or used to train models.

Open-Meteo provides weather data. When Percy looks up weather conditions for your observations or checks the forecast for alerts, it sends only your general location (latitude and longitude derived from the city or postal code you provided). No personal information is sent. Open-Meteo is a free, open-source weather API.

OpenStreetMap (Nominatim) converts your garden address to geographic coordinates if you choose to share it. Only the address text is sent. No name, email, or account information. OpenStreetMap is a free, open-source mapping service.

Cloudflare hosts the app and website. They handle content delivery and SSL but don’t access your data.

Buttondown manages our email list. If you joined our waitlist or receive emails from us, your email address lives there.

No one else. We don’t use ad networks, tracking pixels, or third-party analytics beyond the privacy-respecting Plausible.

Export anytime. You can export everything you’ve logged at any time from your account settings.

Delete anytime. You can delete individual observations or your entire account. When you delete your account, your data is removed. We keep backups for a short period for technical reasons, then it’s gone.

If you don’t subscribe after your free season, you keep read-only access to everything you logged. We don’t delete it just because you didn’t pay. If you change your mind later, it’s right where you left it.

If Percy ever shuts down (we’re not planning on it), we’ll give you plenty of notice and make sure you can take everything with you.

Your data is stored securely using Supabase’s infrastructure, which encrypts data at rest and in transit. Passwords are hashed and never stored in plain text. We use HTTPS everywhere.

We’re one person building this carefully and taking security seriously. If you find a vulnerability, please email us at hello@percy.garden.

When you use voice input, your audio is processed in real time to convert speech to text. We don’t store raw audio recordings, only the text transcript and what Percy parses from it. Your voice is the input, not the data.

How speech recognition works: Percy uses OpenAI’s Whisper API to convert your speech to text. Your audio is sent to OpenAI’s servers for transcription only. It is not stored by OpenAI or used to train their models. Once the transcript is returned, the audio is discarded.

If we make meaningful changes, we’ll let you know by email before they take effect. The “last updated” date at the top of this page reflects the current version.

If you have questions about any of this, email us at hello@percy.garden. We read everything.