Privacy Policy

What This Policy Covers

This policy explains what information Microgrower collects, why, who sees it and what you can do about it. Microgrower is run by Josh Morrow, located in Spring, Texas. It is offered to people in the United States. You can reach us at josh@microgrower.app.

The short version: Microgrower stores the records you put into it so it can show them back to you. We don't sell your information for money, and we don't show ads in Microgrower. Our website uses advertising cookies from Meta to measure, target and deliver our ads, and you can turn them off on Your Privacy Choices. The sections below say exactly what is kept.

Information You Give Us

When you create an account, we collect your email address and a password. Supabase, our sign-in provider, stores the password in a protected form; we never see it. We also record the time zone your browser reports, your answers to the two welcome questions (why you're growing and where), how much help you want, and which reminders you want.

As you use Microgrower, we store the records you add. For growing: your varieties and their growing steps, racks, shelves and places, trays and jars, tasks and when you completed or skipped them, photos of your trays and the date each was taken, observations and issues you log, harvest weights, seed lots and their costs, supplies, checklists you fill in, and temperature and humidity readings. For the Business plan: your farm's name, tagline and logo, the contact details you print on invoices, your products and prices, your customers and the contact details you enter for them, your recurring orders, orders, deliveries and packing records, markets and the organizer contacts you enter, invoices and payments, market takings, expenses and receipt photos.

If you use Sprout, the AI helper, we store your questions and its answers as saved threads, and a record of how many credits each answer used.

Information Collected Automatically

• Sign-in sessions. On the web, Microgrower uses cookies to keep you signed in. They are set only for app.microgrower.app. In the iPhone app, your session is stored encrypted on your phone.
• Preferences. A cookie remembers whether you are in practice mode. It doesn't identify you.
• Reminders. If you turn on reminders, your browser or phone gives us an address to send notifications to and the keys to encrypt them, and we keep a record of which digests were sent to you and when. We also keep the browser or device description so you can tell devices apart in Settings. Reminders to the iPhone app go through Expo's notification service and Apple's.
• Server logs. Our hosting provider, Vercel, keeps standard request logs, including IP addresses, for a limited time, to run and secure the service.
• Billing on the web. If you pay for a plan on the web, Stripe gives us a customer reference, your plan, its status and renewal dates. Stripe keeps your card details and billing address; we never see your card number.
• Billing in the iPhone app. If you buy a plan or credits in the app, you pay Apple through the App Store. RevenueCat, the company that connects the app to the App Store, gives us what you bought, its status and renewal dates, and the store's transaction number. We give RevenueCat your account's ID number, a random code, and not your email address. Apple keeps your payment details; neither we nor RevenueCat see them.
• Crash reports. If the iPhone app crashes, Sentry receives a report of what went wrong: the error, the app version, the type of phone and its system version, and recent screens. We've set it not to send your name, email address, records, photos or IP address.
• Agreement records. When you agree to these terms or this policy, we record which version you agreed to and when. We do not record your IP address with it.

Our website, www.microgrower.app, uses Google Analytics to count visits and to see which pages, guides and buttons people use. It sets cookies on www.microgrower.app only. It collects the pages you view, the links and buttons you click, your browser and device type, and your approximate location, which Google works out from your IP address. Google Analytics does not run in the app at app.microgrower.app, and we never send it your account details or your records. Our website has no forms and doesn't ask for your name or email address. We've turned off Google's use of this data for its own products, so Google processes it as our service provider, and keeps it for no longer than 14 months. Google processes information under its own privacy policy.

Our website also uses the Meta Pixel, an advertising tool from Meta, the company behind Facebook and Instagram. Third parties, including Meta, may use cookies, pixels and similar technologies to collect or receive information from our website and from elsewhere on the internet. On our website, the Meta Pixel tells Meta that you visited, which pages you viewed, and whether you tapped a link to get the app. Meta uses this information to measure ads and to target and deliver ads, including our ads on Facebook and Instagram, and may connect it to your Facebook or Instagram account. The Meta Pixel sets cookies for microgrower.app, so your browser also sends them to the app, but the app doesn't read them, and the Meta Pixel never runs in the app. It doesn't load at all if your browser sends Global Privacy Control, or if you turn advertising cookies off on Your Privacy Choices. You can also opt out of ad targeting by many advertising companies at once with the Digital Advertising Alliance's WebChoices tool. We turn on Meta's Limited Data Use for every visitor. For visitors in the states it covers, which include California, Connecticut and Texas, Meta processes this information as our service provider, and its use is limited. Meta processes information under its own privacy policy.

If you came to our website from one of our ads, your browser keeps the ad's click code and campaign name for up to 90 days, on our website only. They aren't passed to the App Store or the app. When advertising cookies are off, none of this is kept.

We don't use your records, or what you do in the app, for advertising. The iPhone app has no analytics or advertising tools.

Apart from Meta, through the Meta Pixel, we don't allow third parties to collect information about your activity on our website over time and across other websites. Google Analytics collects information on our website for us.

Some browsers send a Do Not Track signal. There is no common standard for responding to it, so our website and the app don't change what they do when they receive one. Our website does respond to Global Privacy Control, as described above.

Cookies and Browser Storage

• Sign-in cookies, set on app.microgrower.app, keep you signed in. They last until you sign out or your session ends.
• mm-practice, on app.microgrower.app, remembers that you are in practice mode, until you leave it.
• _ga and _ga_ followed by an ID, from Google Analytics, on www.microgrower.app, count visits. They last 2 years.
• _fbp and _fbc, from Meta, set for microgrower.app, measure, target and deliver ads. They are set only when advertising cookies are on, and last 90 days.
• mg_ads, on www.microgrower.app, remembers your choice on Your Privacy Choices or the advertising notice. It lasts 1 year.
• mg_attribution, kept in your browser's storage on www.microgrower.app, holds an ad's click code and campaign name. It lasts 90 days.
• mg_notice_seen, kept in your browser's storage on www.microgrower.app, notes that you've seen the advertising notice, until you clear it.

How We Use It

We use your information to run Microgrower for you: to show your records, generate your tasks and reminders, work out your harvest averages, plans and money figures, make your labels, invoices and reports, answer your Sprout questions, bill your plan, send you the emails you ask for (confirming your address, resetting your password), keep the service secure, and fix problems. We may also use records that no longer identify anyone to understand how Microgrower is used and to improve it.

Sprout and the AI Service

Sprout is off until you turn it on in Settings > AI Help. When it is on and you ask a question, we send your question, the thread so far and a summary of your farm's records to an outside AI service, Anthropic, to produce the answer. The summary includes your varieties, trays and their stages, tasks, harvests, issues, seed lots, supplies, and, on Business, your products, orders, markets and money figures. It never includes your customers' or market organizers' names, phone numbers, email addresses, addresses or notes, and it never includes your email address or password. When you ask Sprout to check a photo, we send that photo with the variety, day and stage.

Anthropic processes this information to produce the answer under its commercial terms, which, as of this policy's date, say it may not train its models on information sent through its service. We keep your questions and Sprout's answers in your account so you can read them again; you can delete a thread at any time. Sprout's answers are generated automatically and can be wrong; the Terms of Service say more.

Who Else Sees Your Information

We use a small number of companies to run Microgrower. Each one processes information only to provide its service to us:

• Supabase, for the database, sign-in and photo storage, hosted in the United States.
• Vercel, for hosting the app and the website.
• Cloudflare, for our domain.
• Google, for Google Analytics on our website, www.microgrower.app, as our service provider. It is not used in the app.
• Meta, for the Meta Pixel on our website, www.microgrower.app, to measure, target and deliver ads. It is not used in the app.
• Resend, for sending account emails such as confirmations and password resets.
• Stripe, for payments on the web.
• Apple, for the App Store and payments in the iPhone app, under its own privacy policy.
• RevenueCat, for connecting the iPhone app to the App Store. It keeps a record of purchases under your account's ID number.
• Expo, for sending reminders to the iPhone app.
• Sentry, for crash reports from the iPhone app.
• Anthropic, for Sprout, only when you turn Sprout on.

We don't sell your information for money. Apart from the Meta Pixel on our website, described above, we don't share it for advertising. Some state privacy laws count advertising cookies like Meta's as a "sale" or "sharing" of personal information, or as targeted advertising. Where Limited Data Use applies, Meta acts as our service provider. We may share information if the law requires it, to protect the rights or safety of you, us or others, or as part of a sale or merger of the business, in which case this policy continues to apply to it.

Microgrower is built for one farm per account. No other account can see your records: the database limits every record to the account that made it.

Information About Other People

If you use the Business plan, you may enter information about your customers and market organizers, such as names, phone numbers, email addresses and delivery addresses. You decide what to enter, and you are responsible for having the right to. We store it only to show it to you and put it on your orders, delivery lists, labels and invoices. It is never sent to the AI service, and we never contact your customers.

Photos

Photos you take of your trays are resized on your phone and stored privately; they are shown only to you through time-limited links. We read the date a photo was taken from the photo file so it can go on the right day; we do not read or keep the location a camera may have saved in the file. Receipt photos work the same way.

How Long We Keep It

Your records stay in your account for as long as you have it. If your plan ends, your records stay readable and exportable; we never delete them for not paying.

When you delete your account, we delete your records, your photos, receipts and logo, your Sprout threads, your reminder addresses, your purchase record at RevenueCat and your account itself, and we cancel any plan you pay for on the web. We can't cancel a subscription you pay for through the App Store, so cancel it there first; the app reminds you. Copies in our database backups are removed as those backups age out, within 7 days. Two things remain: a one-way scrambled form of your email address, which we keep to limit free trials to one per email address, and the records Stripe and Apple keep about past payments, which the law requires them to keep.

Server logs at our hosting provider are kept for the period its policy sets.

Your Choices and Rights

• Export. Settings > Export gives you every record in your account as CSV files, at any time.
• Correct. You can change your records, your email address and your settings in the app.
• Reminders. You can turn them off for any device in Settings > Notifications.
• Sprout. You can turn it off in Settings > AI Help and delete any thread.
• Website analytics. You can block Google Analytics cookies in your browser's settings, or install Google's opt-out add-on.
• Advertising cookies. Turn them off on Your Privacy Choices. We treat a Global Privacy Control signal from your browser the same way. To opt out of ad targeting on other websites and apps, use the Digital Advertising Alliance's WebChoices tool. To change the ads Meta shows you anywhere, use Meta's ad preferences.
• Delete. Settings > Account deletes your account as described above. Export first if you want to keep your records.

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to opt out of targeted advertising and of any sale or sharing. The tools above let you see, correct, export and delete your information. We don't sell your information for money. To opt out of the advertising cookies on our website, use Your Privacy Choices or send Global Privacy Control.

To make any other request, write to josh@microgrower.app. We may need to confirm the request comes from you. We answer within 45 days. If we need more time, we'll tell you why within those 45 days, and take no more than 45 more.

If we decline your request, you can appeal. Reply to our answer with "Appeal" in the subject, or write to josh@microgrower.app. We answer appeals within 45 days and explain our decision. If we deny your appeal, we'll tell you how to contact your state's attorney general. We won't treat you differently for using your rights.

Children

Microgrower is for adults. It is not directed to children under 13, and we don't knowingly collect information from them. If you think a child has given us information, write to josh@microgrower.app and we will delete it.

Security

Your records are stored in a database that limits every record to the account that made it, with encrypted connections, and your photos are in private storage that only your signed-in session can reach. Passwords are stored by our sign-in provider in a protected form. No service can promise perfect security, so keep your password private and tell us if you think your account has been used by someone else.

Changes to This Policy

We may update this policy as Microgrower changes. When we do, we will publish the new version here with its date, and Microgrower will ask you to agree to it before you continue.

Contact

Questions about privacy: josh@microgrower.app.

Effective November 7, 2026. Version 3.