Last updated 18 October 2026.
Gardener's Almanac is a small app made by one person. We store the least we can get away with, we keep it in the EU, and you can take it with you or delete it at any time. This page is the long version of the summary you agreed to when you signed up.
Who is responsible
Olof Montin is the data controller for the personal data described here.
- Email: contact@gardeners-almanac.app
- A postal address is available on request.
We have not appointed a data protection officer; the scale of this service does not require one.
What we store, and why
- Your email address — signing you in; there is no password. It is also how we send you the codes, a short first-steps email the first time you connect an AI assistant, and any notification you have asked for.
- Your garden locations (address, latitude, longitude) — fetching local weather, and working out sowing and planting timing for your climate.
- Your garden activity log — sowings, waterings, soil checks, harvests, notes. This is the app: your log is what the reminders, watering guidance and plant timing are calculated from.
- Photos you attach to log entries — showing them back to you in your garden log.
- Push notification tokens — sending the alerts you have turned on, and nothing else.
- Your subscription, if you have one — the seller's record of the purchase, Apple's, Google's or Stripe's: which plan, when it renews or ends, and the identifiers that tie it to your account. That is how the app knows what you have paid for. The payment itself is the seller's, and we never see your card.
- Your language preference — showing the app in the language you chose.
- How you first signed in — on the website, in one of our apps, or through an AI assistant, and which one. We only ever count it across all accounts, to see how new gardeners find us.
- Feedback you send us — answering you, and fixing what you told us about.
We do not build advertising profiles, we do not sell anything to anyone, and we do not track you across other sites.
What we do not store
We do not ask for your name, your date of birth, your phone number, or your payment details. The app has no third-party analytics, no advertising SDKs, and no social login.
Legal basis
We process this data on the basis of your consent (GDPR Art. 6(1)(a)), which you gave when you created your account and which you can withdraw at any time by deleting your account. Operational and security logging — which requests reached our servers, and errors — and counting which way new accounts came in, rest on our legitimate interest (Art. 6(1)(f)) in keeping the service running and safe, and in knowing how people find it.
Two things you agree to when you sign in
There is a single checkbox at sign-in, and it covers two separate agreements:
- How your data is handled — your consent under Art. 6(1)(a) to everything on this page. The first time you sign in, this is also what creates your account: there is no separate registration step, so the first email address to arrive is the one the account is made for.
- What the app in front of you may do — the same screen names that app and lists the access it is asking for, and the permission it gets is limited to what is listed.
Our own iPhone app is not a special case here. It asks for access the same way an AI assistant does, and appears in the same list in Settings. The only difference is that it may ask to manage your other connections, which no third-party app is allowed to request.
The two agreements come apart again, separately. Disconnecting an app in Settings revokes its access immediately and leaves your account and your data untouched. Deleting your account withdraws your consent and removes everything.
Where it is stored
On servers in the EU, rented from Hetzner in Germany and Finland. Your photos live in EU object storage. Our monitoring and error logs run on the same servers — none of it goes to a third-party observability provider.
Who else touches it
We use a small number of processors, all of whom are bound to use the data only to provide their service to us:
- Hetzner Online GmbH (Germany) — servers, database, and photo storage.
- Brevo (France) — sending your sign-in codes and account emails. They receive your email address and the content of those messages.
- Apple (APNs), Google (Firebase Cloud Messaging, on Android) and your browser's push service — delivering push notifications, if you have turned them on. Apple and Google receive a device token and the notification itself: its title and text, which can name your garden, a bed or a crop, or who invited you to a garden, and the ids and link it refers to. A browser's push service receives the notification encrypted, and cannot read it.
Paying is a case of its own. A subscription is sold to you by Apple, in the app on Apple devices, by Google Play, in the Android app, or by Link, Stripe's payment service, on the website. Each is the seller rather than our processor: your card, your billing address and your receipts are theirs, held under their own privacy policies, and what they tell us is the record described above. If you subscribe on the website, we also keep a customer record for you in our Stripe account, holding your email address and the name and address you give at checkout. It is deleted with your account.
Weather is a special case worth spelling out. We fetch forecasts and climate averages from Open-Meteo, SMHI and MET Norway, but we request them per map grid cell, not per gardener — the request says "this 0.1° square", never who is asking or which garden it belongs to. No identifier of yours reaches a weather provider.
Places are looked up in OpenStreetMap's Nominatim: the address you type, the pin you drop, and, when a garden is created or moved, which country it lies in. The request carries the address or the coordinates and nothing else — no account, no garden name, nothing that says who is asking.
The map you place a garden on comes from a map provider, and your device fetches it straight from them: Google Maps in the Android app, Apple Maps in the app on Apple devices, and OpenStreetMap on the website and on Android phones without Google's services. As with any website you visit, the provider sees your device's network address and which part of the map it shows — usually the area around your garden. It is not told who you are or anything about the garden.
How long we keep it
Until you delete your account. There is no separate retention clock ticking in the background: your log is meant to be a multi-year record, so we keep it as long as you want it. When you delete your account, your data — including your photos — is removed from our database and our object storage. The one exception is a plant you submitted to the shared catalogue: it stays for other gardeners, without your name on it, as the terms say.
Deleting your account also cancels a subscription bought on the website, at once, and deletes the customer record in our Stripe account. What Stripe and Link must keep as the seller, for tax and accounting, they keep under their own policies. It also cancels a subscription bought through Google Play, so that nothing more is charged. A subscription bought in the app on Apple devices is Apple's to cancel, in your Apple Account settings.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to it. Two of those are buttons rather than requests:
- Export — Settings → Your data → Export gives you everything we hold about you as a JSON file, immediately.
- Delete — Settings → Your data → Delete account removes it all, immediately and permanently, except the plants you submitted, which stay in the catalogue without your name.
For anything else, email contact@gardeners-almanac.app and we will respond within one month.
If you are not happy with how we have handled your data, you have the right to complain to Integritetsskyddsmyndigheten (IMY), the Swedish supervisory authority — imy.se.
Cookies
We set one cookie: the session cookie that keeps you signed in. It is strictly necessary, it is not shared with anyone, and there is nothing to opt out of because there is nothing else there. No analytics cookies, no advertising cookies, no tracking pixels.
Connected apps and AI assistants
You can connect an AI assistant or another app to your garden through our API. When you do, you are shown exactly what access it is asking for and you have to agree to it explicitly. We never hand over your data without that step, you can see every connection in Settings, and you can disconnect any of them at any time — which revokes its access immediately.
Signing in through an assistant works like signing in to the app: if the address is new to us, it creates your account.
What you ask an assistant, and what it reads from your garden to answer you, goes to the company that runs the assistant, and from there it is covered by their privacy policy, not ours. We never see the conversation itself — only the requests the assistant makes to your garden, such as reading your to-do list or logging a harvest.
Disconnecting an assistant takes away its access and nothing else. Your gardens and everything in them stay, exactly as they do in the app.
Changes to this policy
If we change what we collect or why, we will update this page and, where the change is significant, ask you to agree again the next time you sign in.