YOUR INFORMATION, YOUR GARDEN

Privacy & storage

Last updated: 31 October 2026 · Applies to GroMere at gromere.com, including guest gardens, registered accounts and the optional Hobby waitlist.

Who looks after your information?

GroMere is operated by Kim Holse in Denmark, who is responsible for the personal information described here (the data controller). For privacy questions or requests, contact [email protected].

What we use and why

• Your account: email address, account ID, optional nickname, access level and authentication records. Registration does not request your real name, address, birthday or phone number. We use these to create or invite your account, verify sign-in and keep your garden private. Providing the requested account and garden service is based on GDPR Article 6(1)(b). An email address is required for an online account.
• Your garden: layouts, crops, dates, harvest records, seedling batches and garden history you save. These are associated with your account and used to provide the planner, under Article 6(1)(b). Your garden is not a public post.
• Feedback and support: what you write, your account identifier and any app context you choose to include. We use these to respond and improve the tester service, based on our legitimate interests under Article 6(1)(f). Our interest is resolving problems with the service; we do not use this for targeted advertising. Avoid including sensitive information in free-text fields.
• Security and service operation: hosting, authentication and email providers process technical information such as IP address, request time, browser information and email delivery status to deliver and protect the service. GroMere also keeps small per-account counters for saving and downloading: your account ID, operation type, remaining allowance and last check time. These counters are overwritten as used, contain no IP address or browsing history, are included in your account download, and are removed with your account. This is based on our legitimate interests in secure, reliable operation under Article 6(1)(f).
• Privacy requests and deletion protection: we keep a minimal account identifier and request/completion dates to handle your rights and prevent an old backup from bringing a deleted account back into use. A separate protected Cloudflare record holds only the account identifier and deletion-record date, not your email or garden. This supports our legal obligations to handle your rights under Article 6(1)(c).
• Optional saved preferences: display, music and growing-location settings are remembered on your device only with your permission, under Article 6(1)(a). You can withdraw permission in Privacy settings as easily as you give it. Withdrawal does not affect the lawfulness of earlier processing.

No advertising trackers or visitor analytics scripts are enabled. The separate, optional Hobby waitlist described below is not required to use your garden. Login and invitation emails are service messages. No payments are taken. No automated decisions with legal or similarly significant effects are made about you.

Optional Hobby waitlist

If you choose to join, we use your email address to send a confirmation link and, after you confirm, an announcement when Hobby opens. Joining is optional and based on your consent (Article 6(1)(a)). It creates no garden account, payment or subscription. We record the request and confirmation dates and the wording version of your consent. Only a percentage is displayed publicly; your address is not published.

We use Supabase for the waitlist and Resend to deliver confirmation and launch emails. A daily-changing fingerprint of your network address helps limit abusive requests; we do not store the raw address in the waitlist table. Providers may separately retain security and delivery logs. Unconfirmed links expire after 24 hours; confirmed entries expire after 12 months. A daily cleanup removes expired entries and abuse-limiting records older than two days. Recovery copies expire under the backup schedule below.

To withdraw, open the removal link in your confirmation email and press Remove my waitlist entry, or email [email protected]. We will remove your entry from the active list. This does not affect your garden account or the lawfulness of processing before withdrawal. We will not use this consent for unrelated newsletters. No optional cookies, analytics or advertising tracking are used for the waitlist or landing-page animations.

Cookies and browser storage

GroMere uses browser local storage and session storage. These technologies are covered by storage rules even though they are not ordinary cookies. You can use the garden with Necessary only. Optional preferences still work during the current visit but are not remembered between visits without consent.

Our hosting provider may also use strictly necessary security mechanisms to protect requests. We do not enable advertising or analytics through those mechanisms. Changing optional storage choices does not delete your account, garden or downloaded files.

Garden tasks and optional live weather

Your task checklist, postponed reminders and planted-group checkmarks are saved with your garden. They are included in account exports and backups. These records do not create actual harvests or automatically alter your planting dates.

Live weather is optional and off until you enable it in In the garden. GroMere requests a forecast for your chosen public reference area through its Cloudflare server. Only that reference point and GroMere’s service identification are sent to the Norwegian Meteorological Institute (MET Norway); your account, email, exact location and browser IP address are not forwarded. Cloudflare handles your request as our hosting provider. The forecast is cached and displayed only while you use the app; there are no background location checks, weather emails or push notifications. You can turn this off in Weather & care.

Forecast data: MET Norway, used under CC BY 4.0. GroMere derives time-period summaries and gardening prompts. Read MET Norway’s privacy information.

Growing region and climate averages

Your chosen reference area and optional frost dates are saved with your garden so its seasonal advice works across devices. No GPS permission is requested. Historical climate averages from NASA POWER are included with the app; selecting an area does not send your location to NASA or another weather service. A custom area name is optional location information you choose to provide. These averages are not forecasts.

Who receives information?

Access is limited to the service providers needed to run GroMere and Kim when administering accounts or handling support:

• Supabase: account sign-in, saved gardens, catalogue files, the Hobby waitlist and daily database recovery copies. The primary database is hosted in West EU (Ireland). Uploaded 3D model files are backed up separately because database backups do not include their contents.
• Cloudflare: website delivery, DNS, security and the separate, access-controlled deletion record used during recovery.
• Resend: invitation/login and requested waitlist emails, and delivery records.
• GitHub (previous backup provider): automated customer-data backups stopped on 31 October 2026. Previously created encrypted recovery archives remain under their existing retention period of up to 14 days, unless removed sooner. Those backup jobs temporarily processed database records before encryption. No new customer-data backups are sent to GitHub while this arrangement is in place; the recovery key is held separately.
• one.com: the [email protected] support mailbox, if you email us.

Some providers and their subprocessors operate outside the EU/EEA. An EU database location does not mean all processing stays in Europe. Relevant safeguards can include adequacy decisions and Standard Contractual Clauses. You can ask us about the safeguards applicable to your information. Provider information is available from Supabase, Cloudflare and Resend. External articles are links, not automatically loaded videos or embeds; visiting them is subject to the other website’s rules.

How long is information kept?

Account and garden data is kept while your account is active and needed to provide the planner. You can request deletion at any time. Feedback and support are kept while needed to resolve the issue and follow up during testing; we review whether they remain necessary rather than keeping them indefinitely. If information must be kept for a legal obligation or dispute, we restrict its use to that purpose.

Resend states that email and log data is retained for 30 days on its current Free, Pro and Scale plans. Other security logs follow each provider’s service retention settings. Copies downloaded to your own device remain under your control.

Recovery copies are restricted to recovery, not normal use. Supabase Pro provides a rolling seven-day history of daily database backups. Existing encrypted GitHub archives have a retention period of up to 14 days from creation; new GitHub backup jobs stopped on 31 October 2026. Downloaded or offline copies do not expire automatically: Kim reviews their dates and removes them under the recovery retention procedure. Downloading a copy does not restart its retention period. These arrangements do not guarantee a successful backup every day.

Deleted information may remain temporarily in a recovery copy that cannot be selectively edited. Before restored data is returned to use, completed deletion requests and waitlist withdrawals must be reapplied. We retain the minimal independent deletion-protection record until all affected recovery copies have expired or been removed, then review whether it is still needed. Uploaded model files are backed up separately from customer account and garden records.

Optional two-step login

You can enable an authenticator app under Profile → Login & two-step security. Supabase processes the authenticator setup and verifies codes; no phone number is required. GroMere does not include login tokens or authenticator secrets in personal-data downloads. Losing all enrolled authenticators can prevent access; email alone does not bypass an enabled second factor.

Your choices and rights

Depending on the circumstances, you can request access, a copy, correction, deletion, restriction, portability or object to processing based on legitimate interests. You can withdraw optional storage permission at any time. These choices do not stop necessary account processing while you continue using the service.

Use Privacy & storage in the planner for a copy of your account summary, loaded gardens and device preferences, or to send Kim a private request. The verified account download additionally includes the saved account workspace, all saved/recovery gardens, greenhouse interiors, app feedback and a matching Hobby waitlist record. It requires a fresh email code and your second step if enabled. Provider logs and support emails are handled separately on request. When self-service deletion is available for your account, Privacy & storage offers Delete my account and gardens. It requires fresh email verification, your authenticator if enabled, and a final confirmation. It removes your app account, saved gardens, app feedback, associated sign-in records and matching Hobby waitlist entry. A separate recovery-protection record must be confirmed before deletion proceeds. A success message remains visible until you close it. Owner accounts use assisted deletion to protect the service. If the button instead says Request account deletion, it sends Kim a verified request and does not immediately delete the account.

Self-service deletion does not automatically erase support emails, provider delivery/security logs or retained recovery copies. Contact us to include these in your request. Kim checks their scope and applicable retention, including any legal reason for limited retention. The minimal account-ID and request/completion-date records are kept separately from recovery copies until the affected copies expire or are removed, then reviewed for removal when no longer needed. Recovery checks reapply completed deletions before restored data can return to use. You can also email [email protected], preferably from your account email. We may need proportionate information to verify your identity, but will never ask for your login code. We normally respond within one month; if an extension is permitted and needed, we will explain why.

You may complain to Datatilsynet, the Danish Data Protection Agency, or your local supervisory authority.

Changes

We will update this notice when the service changes. New optional tracking will remain off until a new, specific consent choice is offered. Agreeing to optional storage is not agreement to marketing, payments or new uses of your information.

Review my privacy settings