Privacy Policy
Introduction
When To Plant Ltd. ('we', 'us', 'our') operates the WhenToPlant application. We are committed to protecting your privacy while providing location-based gardening schedules and garden management tools. This Privacy Policy explains how we collect, use, and safeguard your personal information. By using our service, you agree to the practices described here.
Information We Collect
1. Account Information
If you register for an account (Gardener or Allotmenteer plans), we collect:
- Identity Data: Name and email address.
- Authentication Data: Encrypted passwords.
- Subscription Data: If you subscribe to a paid plan, our payment processor (Stripe) handles your payment method. We only store transaction history and subscription status.
2. User-Generated Content
When using our garden management features, we collect:
- Garden Data: Names of your gardens, plant varieties, and planting logs.
- Media: Photos of plants or gardens you upload.
- Collaboration Data: Information regarding users you invite to your gardens or gardens you have been invited to.
3. Location & Technical Data
- Location Preference: Your selected UK town/location ID used to calculate personalized planting schedules.
- Technical Usage: IP address, browser type, and error logs via PostHog to help us fix bugs.
- Analytics: Anonymized page view data via Umami.
How We Use Your Information
- Service Delivery: To calculate dynamic planting schedules based on your specific location and local climate conditions.
- Account Management: To manage your gardens, plant logs, and subscription limits.
- Data Improvement: We may aggregate and anonymize user-generated content (such as planting dates or harvest times) to refine our algorithms and improve data accuracy for all users. This aggregated data will never be personally identifiable.
- Communication: To send transactional emails (e.g., password resets, subscription receipts) via Resend.
- Improvement: To track application errors and analyze usage patterns to improve the platform.
Third-Party Service Providers
We utilize trusted third-party services to operate our application. These providers process data on our behalf:
| Service | Purpose |
|---|
| Stripe | Payment processing and subscription management. |
| Cloudflare R2 | Storage of user-uploaded images. |
| PostHog | Error tracking and product analytics. |
| Resend | Delivery of transactional emails. |
| Umami | Privacy-focused, self-hosted website analytics. |
Cookies & Local Storage
We use cookies essential for the application to function:
- Session Cookies: Keeps you logged in and secures your session (CSRF protection).
- Location Cookie: Stores your selected location ID if you are a guest user.
- Remember Me: Optional cookie to keep you logged in for extended periods.
Collaboration Features
If you use the "Allotmenteer" plan collaboration features:
- When you invite a user to your garden, your name and email may be visible to them.
- If you accept an invite to a garden, your activity within that garden is visible to the Garden Owner and other Editors.
Data Retention & Deletion
We retain your account data for as long as your account is active.
- Soft Deletion: Some data (like plants or gardens) uses "soft deletes," meaning it is marked as deleted in our database but retained for a period to allow for recovery before permanent deletion.
- Account Deletion: You may request full account deletion from your profile settings. This will permanently remove your personal data and gardens.
Last Updated: November 2025