← Back to Cropd

Privacy Policy

Last updated: April 2026

Overview

Cropd is a cannabis cultivation tracking application. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

Data Stored Locally (On Your Device)

The following data is stored on your device by default and is not transmitted to our servers unless you choose to publish or share it:

  • Plant profiles (names, strains, growth stages, photos)
  • Grow logs (watering, nutrients, observations, photos)
  • Grow space configurations
  • Sensor readings from connected BLE devices
  • App preferences and settings

This data stays on your device unless you explicitly publish a grow to the community or create a grow guide. When you publish, only the data you choose to share (controlled by visibility toggles) is uploaded to our servers. Unpublished grow data is never transmitted and cannot be accessed by us.

Data Transmitted to Our Servers

When you use Sage (our grow assistant), the following data is sent to our servers to generate responses:

  • Current plant information (strain, growth stage, day count, growing medium)
  • Recent grow log entries (last 15 days)
  • Current sensor readings (temperature, humidity, VPD)
  • Your chat messages and any photos you attach
  • Token usage metrics

This data is processed in real-time and is NOT stored on our servers. It is forwarded to our AI provider (Anthropic) to generate responses and is not retained after the response is delivered.

Account Data

If you create an account (via Apple Sign In or Google Sign In):

  • Email address
  • Display name (optional)
  • Subscription status
  • Monthly Sage usage metrics

Community Data

When you publish a grow to the community:

  • Plant data you choose to share (with granular visibility controls)
  • Photos you upload
  • Your public profile (username, display name, avatar)
  • Follows, likes, and bookmarks

You control what data is shared through visibility toggles when publishing. You can unpublish at any time.

Data We Do NOT Collect

  • Location data
  • Contact information
  • Browsing history
  • Device identifiers for advertising
  • Any data from other apps on your device

Third-Party Services

Anthropic (Sage)

When you use Sage, your plant data and messages are processed by Anthropic's Claude API. We send only the minimum data necessary to generate helpful grow advice.

Apple / Google (Authentication & Subscriptions)

Authentication is handled by Apple or Google. We receive only your email and a unique identifier. Payment processing is handled entirely by Apple App Store or Google Play Store.

Supabase (Cloud Database & Storage)

Community features (published grows, profiles, follows) and uploaded photos are stored in Supabase with Row Level Security policies ensuring users can only access their own data.

Sentry (Crash Reporting)

We use Sentry to collect crash reports and error diagnostics. This includes device type, OS version, and stack traces when the app encounters an error. No personal grow data is included in crash reports.

Data Retention

  • Local data: Retained until you delete it or uninstall the app
  • Sage chat sessions: Stored locally on your device until you delete them
  • Account data: Retained while your account is active
  • Published grows: Retained until you unpublish them

Account Deletion

You can delete your account at any time from the app's Profile settings. This will permanently remove your profile, published grows, community interactions, and all cloud-stored data. Local grow data on your device is not affected.

Your Rights

  • Access: All your grow data is on your device — you have full access at all times
  • Export: You can export your data as CSV or PDF at any time
  • Deletion: Delete any plant, log, or session within the app. Delete your account to remove all cloud data.
  • Opt-out: Sage is optional. Core app features work without any data leaving your device.

Your California Privacy Rights (CCPA)

If you are a California resident, you have the right to: request what personal information we collect about you, request deletion of your personal information, and opt out of the sale of your personal information. We do not sell your personal information. To exercise these rights, contact [email protected].

European Privacy Rights (GDPR)

If you are in the European Economic Area, you have the right to access, rectify, delete, restrict processing of, and port your personal data. You also have the right to withdraw consent at any time. To exercise these rights, contact [email protected].

Children's Privacy

Cropd is not intended for use by anyone under the age of 21. We do not knowingly collect data from minors.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the app.

Contact

For privacy questions or data deletion requests, contact: [email protected]