Croft
Privacy Policy
Effective July 16, 2026
Information we collect
Croft collects account and profile details you provide, records you choose to keep about gardens and pantries, community content and uploads, support messages, and transaction status supplied by our payment provider. If you enable location-based features, we process the location details you provide, such as ZIP code or coordinates.
We also collect device, browser, referral, campaign, usage, and diagnostic information needed to operate, secure, measure, and improve Croft. Payment card details are handled by Stripe and are not stored by Croft.
How we use information
We use information to provide accounts and requested features, personalize seasonal guidance, process subscriptions, deliver service and safety messages, answer support requests, prevent abuse, diagnose failures, measure campaigns, and improve Croft.
Mobile waitlist addresses are used to send requested iOS or Android availability updates. They are stored separately from the Seed Swap waitlist and do not create a Croft account.
Service providers and disclosures
We disclose information to service providers that support Croft, including hosting, database, file storage, payments, email, video, weather, security, and error-monitoring providers. Current providers include Vercel, Supabase, Amazon Web Services, Stripe, Resend, Mux, Sentry, and weather-data services.
We may also disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information.
Retention, security, and choices
We retain information while an account or requested service is active and as needed for security, legal, accounting, and operational obligations. Account deletion requests follow the in-product deletion process; limited records may remain where retention is required or in protected backups until those backups cycle out.
You can update profile and notification settings in Croft. You may request access, correction, or deletion by contacting us. No internet service can guarantee absolute security, but we use administrative and technical safeguards appropriate to the information we process.
Children, changes, and contact
Croft is not directed to children under 13, and we do not knowingly collect personal information from children under 13. We may update this policy as Croft changes and will post the revised effective date here.
Questions and privacy requests may be sent to privacy@thecroft.app.