Privacy Policy

Trowel & Error is a personal garden planning tool. This privacy policy explains what information is collected when you use the app, how it is used, and how it is protected. This app is a personal project and is not operated as a business.

📋 Information We Collect

We collect the following information when you use Trowel & Error:

• Email address — collected when you sign up or sign in with Google or email/password. Used solely for authentication and account identification.
• Garden plans — the bed layouts, plant placements, and garden names you create and save within the app.
• Plant library — the list of plants you have selected or customised in your plant library.
• App preferences — settings such as dark mode and unit preferences, stored to restore your experience between sessions.

We do not collect your name, address, phone number, payment information, or any other personal information beyond what is listed above.

🔐 Google Sign-In & Google User Data

Trowel & Error offers the option to sign in using your Google account via OAuth 2.0. If you choose to sign in with Google, we receive your email address from Google for the sole purpose of creating and authenticating your account.

We do not access your Google Drive, Gmail, contacts, calendar, or any other Google service. We request only the minimum information necessary (your email address) to provide the sign-in feature.

🗄️ How We Store Your Data

Your account information and garden data are stored using Supabase, a managed database and authentication platform. Data is stored on Supabase-hosted infrastructure and is encrypted in transit (HTTPS) and at rest.

Trowel & Error is hosted on Cloudflare Pages. No personal data is stored on Cloudflare's infrastructure beyond standard server access logs, which are subject to Cloudflare's own privacy policy.

🚫 How We Do Not Use Your Data

We will never:

• Sell your data to any third party
• Share your data with advertisers or data brokers
• Use your data for targeted advertising or remarketing
• Use your Google account data for any purpose other than authentication
• Transfer your data to third parties for any purpose unrelated to running this app

🤝 Third-Party Services

Trowel & Error uses the following third-party services to operate:

• Supabase — database, authentication, and storage. Privacy Policy
• Google OAuth (optional sign-in only) — Google Privacy Policy
• Cloudflare Pages — app hosting. Privacy Policy

These services have their own privacy policies and data practices, which we encourage you to review.

🗑️ Data Retention & Deletion

Your data is retained for as long as your account is active. You can delete your garden plans and plant library at any time from within the app.

To request full deletion of your account and all associated data, contact us at the email address below. We will permanently delete your account and all stored data within a reasonable timeframe.

🔒 Security

We take reasonable steps to protect your data. All data is transmitted over HTTPS. Authentication is handled by Supabase, which uses industry-standard security practices. Access to the database is restricted and protected by row-level security policies, meaning your data is only accessible to your own account.

This is a personal project maintained by a single developer. While we take security seriously, no system is perfectly secure. If you discover a security issue, please contact us directly.

👶 Children's Privacy

Trowel & Error is not directed at children under the age of 13 and does not knowingly collect personal information from children. If you believe a child has provided personal information through this app, please contact us so we can delete it.

✏️ Changes to This Policy

This policy may be updated occasionally. The date at the top of this page reflects when it was last revised. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

✉️ Contact

If you have any questions about this privacy policy or how your data is handled, please reach out:

Note: This is a personal project. Responses may not be immediate but all requests will be addressed.