Privacy policy

Written to match what this service actually does, not a generic template. This is a genuinely useful starting point, written honestly — it is not a substitute for proper legal review before this service is promoted beyond a small beta.

What we collect

At signup: your email address, the postcode you enter, your chosen mow height, whether you've opted into No Mow May, and — optionally — when your lawn was laid. If you use the paid photo-diagnosis feature, we also process the photo you upload and payment details for that purchase — see below for how each is handled. We don't use tracking cookies or analytics on this site.

How your email is stored

Your email address is encrypted at rest (AES-256-GCM) using a key that is never stored in the database itself — a database-only breach would not on its own expose email addresses. Alongside the encrypted value, we store a one-way cryptographic hash of your email, used only to detect duplicate signups and to look up your account from the links we send you; that hash cannot be reversed back into your email address.

How your location is stored

We look up your full postcode once, at signup, purely to validate it and find its outward code (e.g. the "N8" part of "N8 7RN"). We only ever store the outward code's approximate centre point — never your postcode's own precise, near-doorstep location. That's already more precision than the weather data we use actually needs.

If you use photo diagnosis

Uploading a photo for an AI diagnosis is entirely optional, and separate from the core alerts. The photo itself is never stored by us — it's sent directly to Anthropic's Claude vision API for analysis, used once, and discarded on our end immediately after. Only the diagnosis result (the AI's text summary) is saved, so you can see your history of past diagnoses. Payment is handled entirely by Stripe — we never see or store your card details ourselves.

Who else sees your data

A few third-party services are necessarily involved in running this: Resend (sends the emails, and therefore sees your email address and message content), postcodes.io (a free UK postcode lookup service, sees your postcode at signup only), Open-Meteo (weather data, looked up by approximate location only — never sees anything that identifies you), our database host, Neon (stores the encrypted data described above), and — only if you use the paid photo-diagnosis feature — Stripe (processes payment; sees your payment details, not the rest of your account) and Anthropic (its Claude model sees the photo you upload, to generate the diagnosis; see above for how that's handled). None of these are paid to advertise to you, and we don't sell or share your data with anyone else.

How long we keep it

For as long as your account exists. There's no automatic expiry — you control deletion yourself (see below).

Your rights

Every email we send includes a link to manage your account. From there you can pause alerts (keeps your data, stops emails) or permanently delete your account (removes your email, postcode, lawn preferences, and any diagnosis history entirely, immediately — this cannot be undone). No login or password is needed; the link itself is your access.

Contact

This service doesn't yet have a dedicated support inbox. For now, the manage link in your emails is the primary way to exercise control over your own data.