Last updated 27 July 2026.
Gardener's Almanac is a small app made by one person. We store the least we can get away with, we keep it in the EU, and you can take it with you or delete it at any time. This page is the long version of the summary you agreed to when you signed up.
Who is responsible
Olof Montin is the data controller for the personal data described here.
- Email: contact@gardeners-almanac.app
- A postal address is available on request.
We have not appointed a data protection officer; the scale of this service does not require one.
What we store, and why
- Your email address — signing you in; there is no password. It is also how we send you the codes and any notification you have asked for.
- Your garden locations (address, latitude, longitude) — fetching local weather, and working out sowing and planting timing for your climate.
- Your garden activity log — sowings, waterings, soil checks, harvests, notes. This is the app: your log is what the reminders, watering guidance and plant timing are calculated from.
- Photos you attach to log entries — showing them back to you in your garden log.
- Push notification tokens — sending the alerts you have turned on, and nothing else.
- Your language preference — showing the app in the language you chose.
- Feedback you send us — answering you, and fixing what you told us about.
We do not build advertising profiles, we do not sell anything to anyone, and we do not track you across other sites.
What we do not store
We do not ask for your name, your date of birth, your phone number, or your payment details. The app has no third-party analytics, no advertising SDKs, and no social login.
Legal basis
We process this data on the basis of your consent (GDPR Art. 6(1)(a)), which you gave when you created your account and which you can withdraw at any time by deleting your account. Operational and security logging — which requests reached our servers, and errors — rests on our legitimate interest (Art. 6(1)(f)) in keeping the service running and safe.
Two things you agree to when you sign in
There is a single checkbox at sign-in, and it covers two separate agreements:
- How your data is handled — your consent under Art. 6(1)(a) to everything on this page. The first time you sign in, this is also what creates your account: there is no separate registration step, so the first email address to arrive is the one the account is made for.
- What the app in front of you may do — the same screen names that app and lists the access it is asking for, and the permission it gets is limited to what is listed.
Our own iPhone app is not a special case here. It asks for access the same way an AI assistant does, and appears in the same list in Settings. The only difference is that it may ask to manage your other connections, which no third-party app is allowed to request.
The two agreements come apart again, separately. Disconnecting an app in Settings revokes its access immediately and leaves your account and your data untouched. Deleting your account withdraws your consent and removes everything.
Where it is stored
On servers in the EU, rented from Hetzner in Germany and Finland. Your photos live in EU object storage. Our monitoring and error logs run on the same servers — none of it goes to a third-party observability provider.
Who else touches it
We use a small number of processors, all of whom are bound to use the data only to provide their service to us:
- Hetzner Online GmbH (Germany) — servers, database, and photo storage.
- Brevo (France) — sending your sign-in codes and account emails. They receive your email address and the content of those messages.
- Apple (APNs) and your browser's push service — delivering push notifications, if you have turned them on. They receive a device token and the notification, not your garden data.
Weather is a special case worth spelling out. We fetch forecasts and climate averages from Open-Meteo, SMHI and MET Norway, but we request them per map grid cell, not per gardener — the request says "this 0.1° square", never who is asking or which garden it belongs to. No identifier of yours reaches a weather provider.
How long we keep it
Until you delete your account. There is no separate retention clock ticking in the background: your log is meant to be a multi-year record, so we keep it as long as you want it. When you delete your account, your data — including your photos — is removed from our database and our object storage.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to it. Two of those are buttons rather than requests:
- Export — Settings → Your data → Export gives you everything we hold about you as a JSON file, immediately.
- Delete — Settings → Your data → Delete account removes it all, immediately and permanently.
For anything else, email contact@gardeners-almanac.app and we will respond within one month.
If you are not happy with how we have handled your data, you have the right to complain to Integritetsskyddsmyndigheten (IMY), the Swedish supervisory authority — imy.se.
Cookies
We set one cookie: the session cookie that keeps you signed in. It is strictly necessary, it is not shared with anyone, and there is nothing to opt out of because there is nothing else there. No analytics cookies, no advertising cookies, no tracking pixels.
Connected apps and AI assistants
You can connect an AI assistant or another app to your garden through our API. When you do, you are shown exactly what access it is asking for and you have to agree to it explicitly. We never hand over your data without that step, you can see every connection in Settings, and you can disconnect any of them at any time — which revokes its access immediately.
Changes to this policy
If we change what we collect or why, we will update this page and, where the change is significant, ask you to agree again the next time you sign in.