Legal
Privacy Policy
Last updated: October 7, 2026
This policy covers both the Good Soil Society website and the Good Soil Society app. One account works across both.
We use analytics tools to understand how people use this site. This helps us improve content, fix bugs, and make GSS more useful for families like yours.
What we collect
Pages you visit, how long you stay, what you click, where you came from, and your general location (country and region, not your address). On some pages, we record anonymized sessions — what a typical visit looks like, with all personal information automatically hidden — to find and fix usability problems.
When you submit a form (email signup, vendor application, customer waitlist), we store what you submitted in a secure database operated by Supabase. We use that information only to deliver the service you asked for and to communicate with you about Good Soil Society.
What we don't do
We don't sell your data. We don't share it with advertisers. We don't run ads on this site. We don't run retargeting pixels that follow you around the internet.
Accounts and the app
If you create an account, we store what you give us: your email address, your name, optionally a phone number, and whatever you fill in about your growing conditions. Your password is handled by Supabase Auth and stored hashed — we never see it.
Some profile fields are health-adjacent and worth naming: health focuses, dietary approach, and a free-text allergies note. They are entirely optional, and you can clear them at any time from your growing profile. If you fill them in, they form part of the context Sower uses — see below.
The app does not read your device location. It never asks for the permission. Your hardiness zone, frost dates and nearby producers all come from a ZIP code you type in. The app does not use your camera or microphone either, and does not track you across other apps or websites.
Sower and AI
Sower is Good Soil Society's garden guide. It answers from our own library of soil science, extension research and regenerative growing practice, and from the growing context in your profile. To turn that into a written reply, Sower uses Claude, a language model provided by Anthropic. When you ask Sower a question, we send Anthropic the text of your question, the earlier turns in that conversation, and the growing context from your profile — your zone, climate, setup, goals, household size and children's age bands, and the optional health-adjacent fields above.
We do not send Anthropic your name, your email address, your phone number, your street address or any payment information. Requests go through our own server, never from your device directly, so our API key is never in the app.
This only happens if you agree to it. Sower is switched off until you give consent specifically for AI data sharing — separate from accepting these terms. You can withdraw that consent at any time under Account → Sower & AI, after which Sower stops working and nothing further is sent. Our server checks your consent on every single request, so withdrawing takes effect immediately rather than when the app next updates.
Your conversations are stored in your account so you can come back to them, and are not used to train anyone's AI models. Sower can be wrong, and nothing it says is medical advice.
If a Sower answer is offensive, unsafe or wrong, you can report it from the answer itself. We store the reason, your note, and a copy of the reply as it was written, so we can act on it.
Payments
Payments are handled by Stripe. Checkout happens on Stripe's own hosted page, so your card number never reaches us and we never store it. We receive your subscription status so we know what to unlock.
Stripe billing records outlive your account. If you delete your account we cancel your subscription and erase your personal data, but Stripe keeps the invoices and receipts for payments you already made. Tax and payment-dispute rules require us to be able to produce them. Those records are no longer linked to a Good Soil Society account, and no card details are kept on file.
Error reporting
When something crashes we may send a diagnostic report to Sentry. These reports are deliberately stripped: they carry an account ID and technical details about where the fault happened, and we remove email addresses, access tokens, anything card-shaped, and the contents of network requests. Your Sower conversations are never included.
Where your data goes
| Data | Who receives it | Why | Tied to you |
|---|---|---|---|
| Email address, name, phone number | Supabase (storage), Resend (email delivery) | Signing you in, transactional email, the newsletter if you opted in | Yes |
| Your growing profile — ZIP, county, hardiness zone, yard, soil, water, goals, experience, household size, children's age bands | Supabase, and Anthropic as context for Sower | Tailoring planting guidance to your actual conditions | Yes |
| Optional health-adjacent fields — health focuses, dietary approach, allergies note | Supabase, and Anthropic as context for Sower | Biasing crop suggestions toward what your household eats, and avoiding allergens | Yes |
| Your questions to Sower and its replies | Supabase, and Anthropic to generate the reply | Answering the question, and letting you return to the conversation | Yes |
| Photos you attach to a Sower question (a leaf, a pest, a bed) | Supabase (private storage, your account only), and Anthropic to read the photo and answer | Identifying what the photo shows so the answer fits it; kept with the conversation so you can look back | Yes |
| Garden plans, soil logs, saved guides, photos you upload | Supabase | The feature you are using | Yes |
| Producer listing details — business name, address, hours, products, photos | Supabase, and published publicly once approved | The producer directory | Yes, and public by design |
| Subscription status | Stripe | Billing and unlocking paid features | Yes |
| Card details | Stripe only — entered on Stripe's own page | Taking payment | We never receive or store them |
| Crash and error reports | Sentry, once enabled | Finding and fixing faults | Account ID only — see below |
| How often a producer listing was seen, opened and contacted | Supabase | Showing producers how their listing performs | No — counts only, with no record of who looked |
| Pages you visit on this website | Plausible, Microsoft Clarity, Google Analytics 4 | Understanding how the site is used | No |
| Map tiles and address lookups on the website map | Google Maps | Drawing the map | No |
None of the above is used for advertising, and none of it is sold.
Deleting your account
You can delete your account yourself, at any time, from the website or the app — here is how, including exactly what is removed and the Stripe records noted above that are not.
Your choices
You can opt out of analytics at any time using the privacy controls in our footer. The site works fine without analytics enabled. You can request a copy or deletion of your data by emailing hello@goodsoilsociety.com.
Tools we use
Plausible Analytics (privacy-first metrics), Microsoft Clarity (anonymized session insights), Google Analytics 4 (marketing attribution), Supabase (database, accounts, file storage), Anthropic (Sower's AI replies), Stripe (payments), Resend (email delivery), Sentry (error reports), and Google Maps (the map). When we add a new tool, we update this page first.
Contact
Questions about this policy? hello@goodsoilsociety.com.