This is a draft for the owner's review, and it needs legal review. A lawyer hasn't read it, and it isn't in force. It describes what the app does today. Marked items are still to be filled in.
Privacy
What we keep
- If you ask for early access: your email address, your name if you give it, and whether we've invited you.
- Your account: name, email address, phone number if you give it, and your password as a one-way hash.
- Your homestead: its name, address, acreage, coordinates, and time zone, and who you've invited.
- Your records: what you enter about animals, trees, treatments, production, stores, money, and work, including the names of people you add, such as your kids.
- Photos: stored as you upload them. A photo can carry the place and time it was taken, so we keep that too.
- Sign-ins: for each one, the IP address and browser or device, to keep track of sign-ins and limit abuse.
On your device
- Cookies that keep you signed in until you sign out, protect forms, and carry a message from one page to the next. We set none for advertising or tracking, and we run no analytics.
- Saved pages and queued entries. So the app can work without signal, your browser keeps pages you've visited and entries waiting to send. Weather isn't kept with them. Signing out clears the pages, and so does a different person signing in or a change to what you can open.
Who else sees it
We don't sell your data, and we don't use it for advertising. These services handle some of it to run HomesteadTrack:
| Service | What it does | What it gets |
|---|---|---|
| [Hosting provider] | Runs the app and its database | Everything above |
| Amazon S3 | Stores photos | Your photos |
| Plausible | Counts visits to these public pages, and never the app once you sign in | The page, where you came from, and your browser, device, and rough location. It sets no cookies, and doesn't keep your IP address |
| Cloudflare Turnstile | Checks that an early access signup comes from a person | Your IP address, and technical details of your browser, when you open or submit an early access form |
| Resend | Sends mail | Your email address and the message |
| AppSignal | Reports errors and slow pages | Technical details of the request, with passwords, email addresses, and tokens filtered out |
| Apple (WeatherKit) | Supplies the forecast on the dashboard | Your homestead's coordinates, sent to Apple when a dashboard asks for weather |
| Anthropic | Answers when someone uses Prep's planning assistant, or asks to have what they said drafted into records | For planning, that homestead's planning data and the request. For drafting, only the words typed or said, with no records from the homestead. Nothing is sent unless someone asks |
| Anthropic, for Seeds | Looks up Latin names when a variety is added without one, and on request researches growing guides and how long seed keeps, describes varieties, and maps an uploaded seed spreadsheet to plant types | Variety, crop, and category names, and for a spreadsheet: variety and source names, sheet names, years, notes from those rows, and the homestead's seed source names. Adding a variety with no Latin name sends its name without anyone asking again |
| Stripe | Takes payments on its own hosted pages, and we keep the results with the Pay library | The billing email and payment details. We keep the plan, charge amounts, and receipts, and never see card numbers |
Talking instead of typing uses your browser's or device's own speech input, which we don't run. Some browsers send the sound to their maker to turn it into words: Chrome sends it to Google. We only get the words, once you send them.
People you invite to a homestead see its records according to their role. If an owner connects another app or creates a service token, that app can reach that homestead's records.
We may share data if the law requires it. [For counsel.]
We send mail for your account: an invitation when there's room for you, email address checks, password resets, and invitations to a homestead. We send no marketing mail.
How long we keep it
Most records you delete are hidden and kept, so older records that point to them still make sense. Early access requests stay until we've dealt with them. [Retention periods and backups, for the owner.]
Copies we keep
[For the owner: a nightly read-only copy of production can run on an operator's machine (docs/REPLICA.md), which today refuses to run if production holds a homestead it doesn't allow. Decide what to say here before anyone else joins.]
Your choices
You can change your account and records in the app. To get a copy of your data, or to have your account and homestead deleted, write to us at the address below, because there's no button for it yet. [Rights by region, such as GDPR and US state law, for counsel.]
Children
HomesteadTrack is for adults running a homestead. A parent may add a child's name to a homestead's records. [COPPA and any kid sign-in, for counsel, before kid view ships.]
Security
We send everything over HTTPS, hash passwords, and keep each homestead's records apart in the database. No system is perfect, and we'll tell you if a breach affects your data.
Changes
If this changes in a way that matters, we'll tell you by email first.
Contact
[Contact email address.] Our terms cover the rest.