Privacy Policy

What GroJo collects, why, who sees it, and how to delete it. We don't sell your data or show ads.

Effective November 12, 2026

What we collect

Account: your email address, password (stored by our sign-in provider, never readable by us), screen name and profile photo if you add one.

What you add: gardens, garden maps, plants, care logs, notes, photos, saved seeds, FarmStand listings, comments, reactions, follows, caretaker invitations and messages.

Location, if you choose to add it: a garden's location, which you can fill in from your phone's location or by entering a ZIP code. We use it for weather and your hardiness zone, and to show nearby gardens and listings. We use your phone's location only when you ask us to, and never track you in the background. The exact location is visible only to you and your caretakers.

Device: a push notification token for each phone you sign in on, so we can send reminders and alerts.

Crash reports and usage (optional): if "Help improve GroJo" is on in Account, which it is by default, we collect crash reports and counts of which features are used, linked to an account ID but never to your garden content, notes, messages or location. You can turn it off at any time.

Seed packet scanning reads the packet on your phone. The packet photo is never uploaded.

How we use it

To run GroJo: save your gardens, sync them across your devices, send the reminders you set up, deliver messages and notifications, and show public gardens and listings to others.

To keep GroJo safe: we automatically screen comments, messages and listings for abusive language, hide anything flagged, and keep a copy for a person to review. We review reports people send us.

To fix and improve GroJo, using crash reports and usage counts if you've allowed them.

We don't sell your personal information, share it for advertising, or use an advertising ID.

Who can see what

Private gardens are visible only to you and any caretakers you invite. Public gardens, their plants, photos and care history, your screen name, profile photo, comments and FarmStand listings can be seen by anyone using GroJo. A public garden or listing shows only an approximate area, never its exact location. Messages are visible only to the people in the conversation, except when a message is reported or flagged for review.

Services we use

Google Firebase (sign-in, database, file storage, cloud functions, crash reports and analytics) stores and processes GroJo's data on Google's servers in the United States.

Expo delivers push notifications to your phone.

Open-Meteo receives a garden's or your phone's coordinates to return the weather, and phzmapi.org receives a ZIP code to return its hardiness zone. Neither receives your name or account.

Each provider uses the data only to provide its service to us.

How long we keep it, and deleting it

We keep your data while your account exists. You can delete a garden, plant, photo, listing or comment at any time.

To delete your account, go to Account, then Delete account, and confirm your password. This permanently deletes your profile, gardens, plants, photos, seeds, listings, comments, follows, blocks and conversations within minutes. Gardens you help with as a caretaker stay with their owners. If you can't use the app, email support@grojoapp.com from your account's address and we'll delete it within 30 days.

Crash reports and usage counts are kept for up to 14 months. Deleted data can remain in backups for up to 30 days.

Your choices and rights

You can see and edit your information in the app, turn off crash and usage sharing, turn off notifications in your phone's settings, make a garden private, and delete your account.

Depending on where you live, including the EU, UK and US states such as California, you may have the right to access, correct, delete or get a copy of your personal information, and to object to how we use it. Email support@grojoapp.com and we'll respond within 30 days. We won't treat you differently for exercising these rights.

Children

GroJo isn't for children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has an account, email support@grojoapp.com and we'll delete it.

Security

Data is encrypted in transit and at rest, and access rules limit who can read what. No service is perfectly secure, so please use a strong password you don't use anywhere else.

Changes and contact

If we make a significant change to this policy, we'll tell you in the app before it takes effect. Questions or requests: support@grojoapp.com.