Privacy Policy

Last updated: June 27, 2026

1. Who we are

Growing Green is operated by Mana Softworks LLC ("we," "us," "our"). We make farm management and marketplace software for small and mid-size farms. Privacy questions: [email protected].

2. What we collect

Account data

• Name, email, farm or business name
• Phone number (optional)
• Approximate farm location (for marketplace geolocation and distance filtering)

Farm operational data

• Harvests, inventory, livestock records, yields, breeding events
• Sales records, expenses, customer orders
• Photos and voice notes you choose to upload

Worker app data

• GPS location stamps used at clock-in and clock-out
• Time entries and shift records
• Voice notes (audio is transcribed and stored as text)

Payment data

Card numbers and bank details are handled directly by Stripe and Stripe Connect. We never store full card numbers. For marketplace transactions, the farmer is the merchant of record via Stripe Connect; we are a platform.

Technical data

• IP address, device type, app version
• Crash logs and error reports
• Anonymized analytics (page views, feature usage) — no cross-site tracking, no advertising IDs

Device permissions

The mobile apps request these permissions only when a feature needs them. You can decline any of them and still use the rest of the app:

• Location — to log fields and beds (Farmer App), find nearby farms (Market App), and stamp clock-in and clock-out (Worker App). Used only while the app is open; we never collect location in the background.
• Camera — to scan QR and barcodes and to take product, harvest, and task photos.
• Photos and media — to attach images you choose from your library.
• Microphone — for voice notes. Audio is transcribed to text on your device; the audio itself is not stored or uploaded.
• NFC (Farmer App) — for Stripe tap-to-pay card readers.

3. How we use your data

• To provide the apps and sync your data across devices
• To process payments and marketplace orders
• To send transactional emails (account confirmation, receipts, password resets, important service notices)
• To diagnose bugs and improve the apps

We do not sell your data, and we do not use it for behavioral advertising.

4. Third parties we share with

• Supabase — backend database, authentication, file storage. Hosted in the United States.
• Stripe / Stripe Connect — payment processing for subscriptions and marketplace orders.
• Cloudflare — web hosting, DNS, and DDoS protection.
• Sentry — crash and error diagnostics so we can find and fix bugs. Receives crash logs and basic device/technical data.
• Email service provider — for transactional emails (account verification, receipts, etc.).

Each of these providers acts as a processor on our behalf and is bound by their own published privacy and security commitments.

When you place an order through the Market App, the farm you are buying from receives the order details and the contact and fulfillment information needed to complete it — such as your name, and where applicable your phone number and pickup or delivery address. The farm is the seller and merchant of record for that order.

5. Data retention

• Waitlist signups — retained for up to 2 years, then deleted.
• Account data — retained while your account is active. After deletion, purged from active storage within 30 days.
• Encrypted backups — rotated out within 90 days of deletion.
• Anonymized financial records — retained for up to 7 years to meet tax and legal obligations. Name and email are stripped; the transaction record itself remains.

6. Your rights

You can request to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and data — see how to delete your account
• Export a copy of your data — email [email protected] from your account address and we'll send it to you

To exercise these rights, email [email protected] from the address on your account.

7. Children

Our apps are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

8. International users

Your data is stored in the United States. By using the apps from outside the U.S. — including the European Union, the United Kingdom, or Canada — you acknowledge that your data will be transferred to and processed in the United States.

9. California residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and share
• Request deletion of your personal information
• Opt out of the sale of your personal information — we do not sell personal information
• Be free from discrimination for exercising any of these rights

To exercise these rights, email [email protected].

10. Security

• In transit — TLS encryption on every request
• At rest — Row-Level Security (RLS) on every database table; encrypted database backups
• Access — your data is isolated from every other farm by RLS policies tied to your account
• We never store full payment card numbers. Stripe handles all card data.

11. Changes to this policy

If we make material changes, we'll notify you by email and with an in-app banner before the changes take effect. The "Last updated" date at the top of this page always reflects the most recent revision.

12. Contact

For privacy questions, requests, or complaints:
[email protected]