Sprigwise Privacy Policy

Last updated: November 4, 2026

This policy explains what information Sprigwise collects, why, and who it goes to. It covers the website at www.sprigwise.com and the Sprigwise mobile apps. Sprigwise is run by Sprigwise LLC in Port Wentworth, Georgia. Questions or requests: support@sprigwise.com.

1. Accounts are optional

You can browse plant matches and keep a garden on your device without an account. AI advice requires signing in or activating Premium.

AI advice is unavailable in version 1.2.0 of the iPhone app. Plant matching and care information are still available in that version.

If you create an account, Supabase handles your email, password authentication, email confirmation and password recovery. We use the account to sync your My Garden list (plant IDs, status and planting date), manage changes across devices, and protect access to AI advice. When change-aware sync is enabled, new garden updates are stored in a private database record linked to your account, separately from your sign-in information. It also stores change markers, deletion markers and a random device identifier so an older device cannot undo a deletion. Garden data already attached to an older account is kept for recovery, along with a dated copy captured when the new sync first saves. Garden sync does not upload your photos or yard answers. If you choose "Remember this device", sign-in information is kept in your browser's local storage until you log out, clear it, or the session becomes invalid. Otherwise it is kept in session storage for the browser session. Use the session option on a shared device.

2. What is stored on your device

• The yard photo you add in Analyze My Yard. The light check runs on your device and the photo is never uploaded.
• Your ZIP code. Your hardiness zone, broad region and typical soil are looked up on your device. Nursery searches can send your ZIP code as described below.
• Your answers about sun, soil, water and space.
• My Garden, the plants you save and their status. If you sign in, the garden list also syncs to your account.
• Your plant photo logs. New photos stay on this device and are shown under the account or signed-out garden that saved them. Older photos without an account label are preserved and can be copied into the signed-out garden through the recovery option; they are not automatically added to a signed-in account. Photos do not sync between devices.
• Your Yard Code backup, which only leaves your device if you copy or share it yourself.
• In the iPhone app, the weekly garden check-in reminder. It is scheduled on your phone and nothing is sent to us.

Removing a plant changes the current garden list; it does not erase every photo, deletion marker or recovery copy. Clear your browser's site data to remove local records, photos and backups. App or device backups can remain outside Sprigwise's control.

3. What leaves your device, and when

• Plant advice. When you tap How would this do in MY yard?, we send the plant you picked plus your zone, broad region, sun, soil, drainage, watering and space answers to our server.
• Photo check-ins. When you snap a photo in How's it doing? or tap Check this photo, we send that one photo (resized, with its location data removed) plus your zone, broad region, sun, soil, drainage and watering answers to our server.
• Who writes the advice. Our server passes these requests to Anthropic's Claude Fable 5 model to write the answer. Sprigwise processes the photo and yard answers for the response without saving a copy in our application database. Anthropic's published policy for this model generally retains inputs and responses for at least 30 days and describes exceptions. Our hosting provider may also retain data under its own policy. The iPhone app asks for your permission before it sends the first request.
• Yard and usage counts. When you first record a plant status other than Planning, your device sends a random yard ID. Our server stores that ID with first-seen and last-seen times in Supabase so repeat requests can be counted as one yard. When you finish a yard analysis, the server stores a completion time. These records do not include your name, email, photos or plant list. A separate total counts signed-in accounts whose synced garden has a recorded outcome. The random yard ID is not linked to an account by these counters.
• Service protection. Requests reach our hosting provider with technical information such as IP address, browser information and request time. We use account or Premium identifiers and usage counters to control access and limit AI usage. When durable AI limits are enabled, Supabase stores a keyed hash of the account or Premium identifier, the usage period and the amount used. These counter records do not contain emails, IP addresses, card details, prompts or photos.
• Newsletter (website only). If you join the email list, your email address is sent through FormSubmit, an email relay service, to our inbox. Every email lets you unsubscribe.
• Premium (website only). Premium is bought on the website through Stripe, which collects your card details directly. We receive purchase information such as your email, customer and subscription identifiers, and payment status, but never your full card number. A confirmation link from your completed checkout can activate access on a device, which then keeps a Premium token for checks with our server. Email and card digits no longer restore access. For help, email support@sprigwise.com. Do not pay again to restore access.
• Website analytics. The website loads GoatCounter and Vercel Web Analytics to count page views and feature use. They receive page or event addresses, referring sites, browser or device information, and approximate location derived from connection information. See GoatCounter's privacy policy and Vercel's analytics privacy information. These services do not use advertising cookies. Our server also forwards yard-analysis and outcome events to GoatCounter with the request's browser information and forwarded IP address, but not the random yard ID. The bundled iPhone app omits the website page-view scripts; its yard-analysis and outcome actions can still send these server events.
• Nurseries near you. To show local nurseries, Sprigwise sends the first three digits of your ZIP code or the full ZIP code, depending on your app version and whether you scanned a store's card. A scanned card also sends its store code. Our host, Vercel, can retain this location information in its request logs. The server uses Stripe's store subscription records to find featured stores. Opening a map sends a ZIP search to Google Maps. On the website, if you allow it, your browser's location is used for that map search instead. The iPhone app does not request your device location. Google handles these searches under its own privacy policy.
• Nursery subscriptions. If you buy a Featured Store subscription, we send the store details you enter, including its name, town and ZIP code, to Stripe with the subscription. The store's name and town may appear in local nursery listings and on results reached through its counter cards.
• Store links. Links to retailers and other sites take you to those sites, which have their own privacy policies. Our retailer links don't add tracking codes.

4. Service providers

Vercel hosts the website and API and provides website analytics. We also use Anthropic for AI advice, Supabase for accounts, garden sync and usage records, Stripe for payments and nursery subscription records, FormSubmit to relay email-list signups, and GoatCounter for page and event counts. These providers process information to deliver their services and may keep technical logs and backups under their own retention policies. We do not promise that provider records are erased when a request finishes.

We do not sell your personal information, and we do not share it for targeted advertising. We may disclose information if the law requires it or to protect the rights and safety of our users or Sprigwise.

5. How long we keep information

• Newsletter addresses: until you unsubscribe or ask us to delete them.
• Premium purchase records: for as long as your subscription is active, and afterward as long as tax and accounting rules require.
• Account and synced garden information: kept while your account is active. Garden deletion markers, the dated recovery copy and older garden data attached to the account have no automatic expiry. Removing a plant updates the current garden but does not erase it from those historical copies. A successful account deletion removes the active account and its linked private garden record, including that record's recovery copy.
• Yard and completion records: stored persistently in Supabase. There is currently no automatic expiry for these records. Clearing your device or deleting an account does not automatically delete the separate random yard record or historical completion records.
• AI access and usage records: retained to enforce service limits. When durable AI limits are enabled, counters whose usage period began more than 48 hours ago are removed during the next usage check while the limit policy is active. They can remain longer while the service is inactive or paused. Provider logs, analytics and backups follow the relevant provider's policy; Sprigwise has not set a single retention period for all of them.
• Advice photos and answers: processed for the response without an application database copy. This does not override Anthropic's or our hosting provider's retention policies.

6. Deleting your data

Removing a plant in My Garden removes it from the current list, but retained deletion markers and recovery copies can still contain its record. Clear your browser's site data to remove local garden information, saved backups and sign-in information. Deleting an app may leave device or cloud backups outside Sprigwise's control. If you made an account, open My Garden and choose "Delete my account". After a successful account deletion, the active account and its linked private garden record, including its recovery copy, are removed; separate copies on your devices stay until you clear them. This action does not erase Stripe records, analytics, separate usage records or provider backups.

For other deletion requests, email support@sprigwise.com with the email address you used. If your request concerns the random yard record, contact us before clearing that device so we can help identify the record. We confirm and complete verified requests within 30 days, subject to applicable legal requirements. We may keep records the law requires us to keep.

7. Your privacy rights

Depending on where you live, including California and the European Economic Area and United Kingdom, you may have the right to know what information we hold about you, to get a copy, to correct it, to delete it, and to object to or limit how we use it. We do not sell personal information or share it for targeted advertising, and we will not treat you differently for using these rights. To make a request, email support@sprigwise.com. You may also complain to your local data protection authority.

8. Security

Information that leaves your device travels over encrypted connections (HTTPS), and we limit who can access our systems. No method of storage or transmission is completely secure.

9. Children

Sprigwise is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has sent us information, email us and we will delete it.

10. Changes to this policy

If we change this policy, we will post the new version here with a new "Last updated" date.