Privacy Policy

On The Grow, LLC ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Microgreen Tracker application ("the Service").

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide to us:

• Account Information: Name, email address, and account preferences when you create an account
• Profile Information: Business information, contact details, and profile settings
• Customer Data: Customer names, business names, email addresses, phone numbers, physical addresses, delivery preferences, and order history
• Order Information: Order details, delivery instructions, and transaction records. Payments are processed by our payment processor (Stripe); we do not store your full card or bank details.
• Grow Data: Tray information, crop varieties, sowing dates, harvest data, grow notes, and yield metrics
• Inventory Data: Seed stock levels, supplier information, cost data, and usage tracking
• Communications: Messages, feedback, support requests, and other communications with us
• Bug reports: If you submit an in-app bug report, we receive your description of the problem, the page you were on, and your account email so we can follow up
• Push notification subscription: If you opt in to watering reminders, your browser gives us a push endpoint and encryption keys. These identify a browser installation, not you personally, and are used only to deliver the reminders you asked for. Turning notifications off deletes them.

1.1a Information from Other People

Customer records you enter. The Service lets you store details about your own customers. We process that information solely to provide the Service to you — we do not contact your customers, market to them, or use their details for our own purposes. You are responsible for having a lawful basis to store it and for handling any requests they make to you about it, as described in Section 5.2 of our Terms of Service.

Shared workspaces. If an account owner invites you into their workspace, or you invite someone into yours, everyone in that workspace can see the grow data in it — trays, harvests, supplies, customers, and orders — and can see which member recorded a given action. Billing details and membership management stay with the owner. Personal settings such as text size, language, and Simple Mode are per person and are not shared.

1.2 Information Automatically Collected

When you use the Service, we may automatically collect:

• Usage Data: How you interact with the Service, features used, time spent, and navigation patterns
• Device Information: Device type, operating system, browser type, IP address, and unique device identifiers
• Performance Data: App performance metrics, error reports, and diagnostic information
• Location Data: We do not collect precise device location. Our hosting or analytics providers may receive general region-level information (e.g., derived from IP address) where applicable for security or performance.

1.3 Cookies and Tracking Technologies

We use a small number of cookies and similar technologies:

• Strictly necessary: keeping you signed in, securing your session, and protecting against cross-site request forgery
• Preference: remembering your chosen text size so the app renders correctly on your next visit
• Performance, only with your consent: aggregated page-speed measurement (Vercel Speed Insights)

We do not use advertising cookies, we do not run third-party ad or social tracking pixels, and we do not track you across other websites. Performance measurement loads only if you choose Accept on our cookie notice; choosing Reject prevents it from loading, and your choice is remembered on that device. Strictly necessary and preference cookies are not optional, because without them you cannot stay signed in. You can also block or delete cookies in your browser, though the Service will not work correctly without the necessary ones. Full detail is in our Cookie Policy.

2. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service: Operate, customize, and improve the Microgreen Tracker
• Process transactions: Handle orders, payments, and business operations
• Customer management: Maintain customer records and communication preferences
• Analytics and insights: Generate reports, track business metrics, and provide recommendations
• Communication: Send service updates, respond to inquiries, and provide customer support
• Security: Detect fraud, prevent unauthorized access, and ensure data integrity
• Legal compliance: Meet legal obligations, enforce our Terms of Service, and protect our rights
• Business development: Develop new features, conduct research, and improve user experience
• De-identified grow data: We derive non-personally-identifiable grow records and insights (e.g., crop growth times, harvest timing, grow methods, yields, failure reasons) from usage of the Service, retain them permanently, and use them after account deletion. Part of our business model and revenue comes from this data—for example, to create or license industry insights, benchmarks, or research. See Section 3.5.

3. Information Sharing and Disclosure

3.1 We do not sell your personal information. We may share your information in the following circumstances:

3.2 Service Providers (Subprocessors)

We share information with the following third-party providers, each only to the extent needed for the purpose listed. This is our full list; we will update it here when it changes.

These providers act on our instructions, are bound to protect your information, and may use it only for the purposes we specify. We are not responsible for their independent practices; each publishes its own privacy policy.

3.3 Legal Requirements

We may disclose information if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect our rights, property, or safety
• Prevent fraud or security issues
• Enforce our Terms of Service or other agreements

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control.

3.5 De-identified and Aggregated Grow Data

We collect and use de-identified grow data that cannot identify you personally. We use it to improve the Service, develop industry insights, conduct research, and for our own business purposes. Part of our revenue model around the app is derived from this data: we may use or license insights about crop growth times, processes, and growing practices, and may share de-identified or aggregated information with partners or for research, analytics, or business development.

This applies on every plan, including Free. De-identified grow data is collected the same way whether you pay us or not, and it is not something you can be charged more or less for. What your plan changes is what you can see — the Grow Stats page, cost analytics, and export are paid features — not what we learn from the growing itself.

Specifically, when a grow finishes we record:

• Crop and seed: crop and variety (or simply that it was a custom crop), sow weight, sowing density, seed type, seed age at sowing, and whether it was a blend
• Setup: tray size, growing method and type, and which tracking mode was used
• Growing medium: the type of medium and, where it matches a product in our built-in catalog, which one; how much was used per tray; the size the product is sold in; and whether it is reusable and how far into its life this grow was
• Fertilizer: whether fertilizer was used at all, its type, the dilution or concentration rate, and the amount used per tray
• Water: how many waterings, total volume, the method (mist, top, or bottom), and the watering schedule used at each stage
• Timing: days from sowing to harvest, how long each stage lasted, pre-soak time, and how far you adjusted our suggested timings — which is how we find out where our crop library is wrong
• Outcome: yield weight, yield relative to seed sown, quality grade, number of cuts, and — where a grow failed — the reason chosen from our list and the estimated loss
• Cost: the cost figures already calculated for that tray — seed, medium, fertilizer, and electricity

What it never contains. De-identified grow data excludes your name, your account, your contact details, your notes and comments, and everything about your customers and orders. It is stripped of anything that points back to you before it is stored, and it carries no link to your account.

We will not try to re-identify it. We commit not to attempt to re-identify de-identified data, or to link it back to any individual or account, and we maintain technical and process safeguards against doing so. We require the same of anyone we share it with.

It is retained permanently and is not affected by deleting your account. Because it is not personal information and cannot be traced to you, de-identified grow data is kept indefinitely and survives deletion of your account — deletion removes your workspace and everything personal in it, as described in Section 6.2. By using the Service, you acknowledge and consent to this collection, retention, and use, as described here and in our Disclaimer.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure data centers and infrastructure
• Employee training on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Account data: Retained while your account is active and for a reasonable period after deactivation
• Transaction records: Retained for tax, legal, and business purposes as required by law
• Customer data: Retained while you maintain an active business relationship
• Usage data: Retained for analytics and service improvement purposes

When information is no longer needed, we will securely delete or anonymize it.

6. Your Rights and Choices

You have certain rights regarding your personal information:

6.1 Access and Control

You can:

• Access and update your account information through the Service
• Export your data (such as trays, calendar, and stats) to CSV or Excel from within the app on paid plans
• Delete specific records you uploaded
• Control notification preferences

Your right to a copy of your data does not depend on what you pay. In-app export is a paid feature, but if you are on the free plan and want a copy of your account data, email us at info@onthegrow.net and we will provide it free of charge.

6.2 Deleting Your Account

You can delete your account yourself, without contacting us, from Settings → Account → Danger zone. Scheduling deletion cancels any paid subscription immediately and starts a 30-day grace period, during which you can cancel the request from the same screen and nothing is erased. After the grace period we permanently delete your workspace and everything in it — trays, harvests, supplies, customers, orders, and notes. This cannot be undone.

Deletion is limited to the account owner, so that one member of a shared workspace cannot erase another grower’s records. If you are a collaborator rather than an owner, you can leave a workspace instead.

One current limitation, stated plainly: our automated purge removes your workspace and its data, but your sign-in record with our authentication provider may persist. If you want that removed as well, email us at info@onthegrow.net and we will delete it manually.

We may retain a limited amount of information after deletion where the law requires it — for example transaction records kept for tax purposes — and de-identified grow data (Section 3.5) is unaffected and is retained permanently, because it can no longer be linked to you.

6.3 Marketing Communications

You can opt out of marketing communications by following the unsubscribe instructions in our emails or by contacting us directly.

7. Third-Party Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these external services. We encourage you to review the privacy policies of any third-party services you use.

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

10. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to delete your personal information (subject to exceptions)
• Right to opt out of the sale of your personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us using the information provided below.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about our privacy practices.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: