Simple Seed Organizer (“the Service”) is operated by Beck Harris Design (“we”, “us”). This policy explains what we collect, how we use it, and the third parties that help us run the Service.
1. What We Collect
- Account data: your email address and password, managed by Supabase Auth (we never store your password ourselves)
- Seed inventory data: seed names, varieties, growing notes, and any photos you upload
- Uploaded photos: seed-packet and seed photos you upload are stored in our Supabase storage. Photo URLs are publicly accessible — anyone with the link can view the photo without signing in. Photos are permanently deleted when you delete the associated seed or when your account is deleted, at which point the URL will stop working. Anyone you previously shared a link with may have saved a copy.
- Profile data: optional information you provide such as your zip code and growing zone, used to show planting-timing features
- Payment data: billing details are handled by Stripe — we never see or store your card details. Your email address is shared with Stripe to identify your account.
- Usage data: page views, feature interactions, device type, browser, and operating system, collected via Google Analytics. We associate a user identifier with these events to understand return usage patterns.
2. How We Use It
- To provide and operate the Service
- To process payments and manage your subscription
- To send transactional emails (account confirmation, password reset)
- To read your uploaded seed-packet photos and enrich your seed entries using AI. Photos and seed text you submit for these features are sent to OpenAI for processing (see Third-Party Services)
- To understand how the app is used and improve it
3. Third-Party Services
We share data with these providers only as needed to run the Service:
- Supabase — database, authentication, and photo storage (hosted on AWS)
- OpenAI — AI reading of seed-packet photos and enrichment of seed entries, via the OpenAI API
- Stripe — payment and subscription processing
- Google Analytics— usage analytics, including device type, browser, and operating system. We send a user identifier to Google Analytics to track return usage; this data is governed by Google’s Privacy Policy.
- Vercel — application hosting
The photos and seed text you submit for AI features are sent to the OpenAI API. Under OpenAI’s API terms, this content is not used to train OpenAI’s models and is deleted within 30 days, except as needed to detect abuse or as required by law. We do not sell your personal data.
4. Data Retention
We retain your data for as long as your account is active. Photos are deleted when you delete the associated seed. When your account is deleted, all seed data, photos, and associated records are permanently removed within 30 days. You may request deletion of your account and all associated data at any time by emailing us (see Contact).
5. Cookies
We use cookies for authentication session management (Supabase) and analytics (Google Analytics). Google Analytics cookies collect device and browser information and persist across sessions. No advertising cookies are used. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
6. Your Rights
You may request access to, correction of, export of, or deletion of your personal data at any time. To make a request, email us at the address below.
7. Children
The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
8. International Data Transfers
Your data is stored with our hosting providers and may be processed in the United States and other countries — including by the OpenAI API for the AI features described above. By using the Service, you consent to this processing.