1. Introduction
Built by Foundry, Inc. ("Foundry," "we," "us," or "our") operates The Garden Almanac mobile application ("App") for the Auxhart gardening team. This Privacy Policy explains how we collect, use, share, and protect information when you use the App or contact us about it. The App is local first. Your garden record lives on your device, and nothing leaves it unless you turn on backup by signing in.This Privacy Policy describes the personal information we collect, where it comes from, why we use it, when we disclose it, and the choices available to you.Controller and contact: Built by Foundry, Inc. (f/k/a Playpen Games, Inc.), 2261 Market Street, Suite 86046, San Francisco, California 94114, United States. For privacy requests, email privacy@builtbyfoundry.io. For general questions: support@builtbyfoundry.io2. Information We Collect
2.1 Information Stored on Your Device
• Your garden record: crops, beds and containers, plantings, tasks, season history, and wish lists, stored on your device
• Journal entries and any photos you attach to them. Photos are copied into the App's private storage on your device and are never uploaded to our servers
• Your garden location and confirmed frost dates, used to time planting windows and weather alerts
• Notification preferences and alert settings2.2 Information You Provide if You Sign In (Optional)
• Account details from Sign in with Apple: your name (if shared), email address, and a sign in identifier
• A backup copy of your garden record, including your garden location coordinates, crops, plantings, tasks, journal text, and season history, stored on our server so a new phone can pick up where you left off. Journal photos stay on your device and are not part of the backup
• Support requests and feedback you send us, including any information you include in the message2.3 Location
If you allow location access, the App uses your coordinates to look up your average frost dates from NOAA climate records and to fetch your local National Weather Service forecast. These lookups send coordinates to those services per request; neither service is given your name or any account information. You can also type a location instead of granting access. If you sign in, your garden's coordinates are included in your encrypted backup so your plan restores correctly on a new device.2.4 Automatically Collected Information
• Usage analytics: screens viewed, onboarding completion, task responses, plantings added, and journal activity, collected through PostHog to improve the App
• Device and app information: device type, operating system, app version
• If you sign in, analytics events are associated with your account identifier so we can understand product usage across devices2.5 Weather and Climate Services
Forecasts come from the National Weather Service (weather.gov) and average frost dates come from NOAA climate normals via the Applied Climate Information System. Requests include only coordinates and are not tied to your identity by us.Sources of information: We receive information from you, automatically from your device and use of the App, and from any sign-in provider, marketplace, or other service you choose to connect, including the app store. The categories above describe what we collected during the preceding 12 months; we do not collect a category unless the App uses the related feature.3. How We Use Your Information
• Build your personalized planting calendar from your local frost dates
• Watch the forecast for frost, heat, planting windows, and useful dry spells, and schedule alerts on your device
• Keep your garden journal and season history so next year starts smarter
• Back up and restore your garden record when you sign in
• Authenticate your account and support account deletion
• Monitor product performance, debug issues, and improve the App
• Detect abuse, enforce our terms, and comply with legal obligations4. Third-Party Service Providers
We disclose only the information reasonably needed to service providers and contractors that host, secure, analyze, support, or process purchases for the App. They process information under their agreements with us and their own legal obligations.Infrastructure and Authentication: Supabase (database, auth, edge functions) for optional accounts and garden backup. Data processed in the United States.Weather and Climate Data: National Weather Service (api.weather.gov) for forecasts and the NOAA Applied Climate Information System (data.rcc-acis.org) for average frost dates. Requests carry coordinates only.Analytics: PostHog for product analytics (screens viewed, features used, task completion).Distribution: Apple App Store for distribution and TestFlight beta testing.No sale or behavioral-advertising sharing: We do not sell personal information for money or share it for cross-context behavioral advertising. We have not done so during the preceding 12 months. We may disclose information if required by law, to protect people or the App, or as part of a merger, financing, or sale of the business, subject to appropriate safeguards.5. International Data Transfers
Foundry is based in the United States. We and our providers may process information in the United States and other countries where privacy laws may differ from those where you live.EEA/UK/Swiss users: Where required, we rely on an adequacy decision, approved standard contractual clauses, or another lawful transfer mechanism. You can ask about safeguards for a particular transfer by contacting privacy@builtbyfoundry.io.6. Data Retention and Deletion
We keep personal information only as long as reasonably needed for the purposes described here, including to provide the App, maintain security, resolve disputes, and meet legal or accounting duties. Retention depends on the type of information, whether your account is active, and applicable law. When it is no longer needed, we delete or de-identify it. Copies may remain temporarily in backups or where law requires retention.Your local garden record, journal, and photos remain on your device until you erase the garden, clear App data, or uninstall the App. Account details and cloud garden backups are kept while your account is active. A verified account-deletion request removes or de-identifies eligible active server records, subject to temporary backups and security, support, or legal retention; the local copy remains until you erase it. Analytics and support records are kept only as reasonably needed for their stated purposes.7. Your Privacy Rights
Depending on where you live, you may ask to access, correct, delete, or receive a copy of personal information, or object to or restrict certain processing. You may withdraw consent at any time where processing relies on consent, without affecting earlier processing.Legal bases for processing
Legal bases: We process information as needed to provide the App and perform our contract with you; for legitimate interests such as security, support, product improvement, and fraud prevention; with consent where required; and to comply with law.EEA, UK, and Swiss users
You may also have rights to data portability and to complain to your local data protection authority. We may ask for information necessary to verify and complete your request.United States state privacy rights
Residents of California and certain other states may have rights to know, access, correct, delete, or obtain personal information and to receive information about categories of recipients. We do not discriminate against you for exercising a privacy right. Where applicable, you may use an authorized agent and may appeal our response by replying to it.How to Exercise Rights
Email privacy@builtbyfoundry.io with the App name, the email or account identifier you used (if any), and your request. You may also use an account-deletion control where the App provides that control. We will verify requests as reasonably necessary and respond within the time required by applicable law.Some information may be exempt from a request or retained where permitted by law. We may charge a reasonable fee or decline requests only where applicable law allows it.8. Children's Privacy
The Garden Almanac is not directed to children under 13. We do not knowingly collect data from children under 13.Parents: If your child under 13 has provided information, contact privacy@builtbyfoundry.io. We will investigate and delete the information when required.Teens (13-17): Review this policy with a parent or guardian.9. Data Breach Notification
We maintain an incident-response process. If a security incident affects personal information, we will investigate, contain, and provide notices to regulators or affected people when and as required by applicable law.Report security concerns: privacy@builtbyfoundry.io10. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls and protections offered by our hosting and authentication providers. No method of storage or transmission is completely secure.You should: Protect your device, credentials, and connected accounts and tell us promptly if you suspect unauthorized access.11. Garden Guidance Is Editorial, Not a Guarantee
Planting windows, frost alerts, and crop guidance are based on historical climate averages, current forecasts, and creator authored horticultural guidance. Weather is uncertain and microclimates vary; a frost can arrive outside the forecast window. Use your own judgment for valuable or sensitive plantings, and correct your frost dates in Settings if your yard runs warmer or colder than the local average.12. Updates to This Policy
We may update this policy as the App or law changes. The Last Updated date shows when it was revised. If a change materially affects how we use personal information, we will provide notice in the App, by email when available, or by another reasonable method before the change takes effect where required.