Privacy Policy
Introduction
When To Plant Ltd. ('we', 'us', 'our') operates the WhenToPlant application. We are committed to protecting your privacy while providing location-based gardening schedules and garden management tools. This Privacy Policy explains how we collect, use, and safeguard your personal information. By using our service, you agree to the practices described here.
Information We Collect
1. Account Information
If you register for an account (Gardener or Allotmenteer plans), we collect:
- Identity Data: Name and email address.
- Authentication Data: Encrypted passwords.
- Subscription Data: If you subscribe to a paid plan, our payment processor (Stripe) handles your payment method. We only store transaction history and subscription status.
2. User-Generated Content
When using our garden management features, we collect:
- Garden Data: Names of your gardens, plant varieties, and planting logs.
- Media: Photos of plants or gardens you upload.
- Collaboration Data: Information regarding users you invite to your gardens or gardens you have been invited to.
3. Location & Technical Data
- Location Preference: Your selected UK town/location ID used to calculate personalised planting schedules.
- Technical Usage: IP address, browser type, and error logs via PostHog to help us fix bugs.
- Analytics: Anonymized page view data via Umami.
How We Use Your Information
- Service Delivery: To calculate dynamic planting schedules based on your specific location and local climate conditions.
- Account Management: To manage your gardens, plant logs, and subscription limits.
- Data Improvement: We may aggregate and anonymize user-generated content (such as planting dates or harvest times) to refine our algorithms and improve data accuracy for all users. This aggregated data will never be personally identifiable.
- Communication: To send transactional emails (e.g., password resets, subscription receipts) via Resend.
- Improvement: To track application errors and analyze usage patterns to improve the platform.
Third-Party Service Providers
We utilize trusted third-party services to operate our application. These providers process data on our behalf:
| Service | Purpose |
|---|
| Stripe | Payment processing and subscription management. |
| Cloudflare R2 | Storage of user-uploaded images. |
| PostHog | Error tracking and product analytics. |
| Resend | Delivery of transactional emails. |
| Umami | Privacy-focused, self-hosted website analytics. |
Cookies & Local Storage
We use cookies essential for the application to function:
- Session Cookies: Keeps you logged in and secures your session (CSRF protection).
- Location Cookie: Stores your selected location ID if you are a guest user.
- Remember Me: Optional cookie to keep you logged in for extended periods.
Advertising
Where advertising is enabled, we use Google AdSense. Google and other advertising partners may place and read cookies, use web beacons, and collect information such as your IP address to serve and measure ads. Advertising cookies can be used to personalise ads based on earlier visits to this site and other websites.
You can manage personalised Google ads in Google Ads Settings. You can also opt out of some other advertising partners' personalised advertising through AdChoices. These choices do not necessarily stop ads from appearing.
Read more about how Google uses information from partner sites. Advertising cookies are separate from the essential cookies listed above.
Collaboration Features
If you use the "Allotmenteer" plan collaboration features:
- When you invite a user to your garden, your name and email may be visible to them.
- If you accept an invite to a garden, your activity within that garden is visible to the Garden Owner and other Editors.
Data Retention & Deletion
We retain your account data for as long as your account is active.
- Soft Deletion: Some data (like plants or gardens) uses "soft deletes," meaning it is marked as deleted in our database but retained for a period to allow for recovery before permanent deletion.
- Account Deletion: You may request full account deletion from your profile settings. This will permanently remove your personal data and gardens.
Last Updated: 7 September 2026