Privacy Policy

Your garden observations are private. We don’t sell your data, we don’t run ads, and we don’t share what you tell Percy with anyone. Your observations are used only to help you — full stop.

If you want the longer version, it’s below.

What you tell Percy. Voice notes and text observations you record. These are the heart of the product. We store them so you can search and review them, and so Percy can surface patterns over time.

Your account information. Your email address and the password you use to sign in (stored securely, never in plain text). If you sign in with Apple, we receive only what Apple passes along — typically a masked email address.

Basic usage data. Aggregate, anonymized data about how the app is used — things like which features people use most. We use Plausible Analytics, which is privacy-respecting and doesn’t use cookies or track you across the web. No individual sessions, no fingerprinting.

What you don’t tell us. We don’t collect your precise location, your contacts, your calendar, or anything from your device you didn’t explicitly give us. Our analytics (Plausible) show us aggregate traffic by country and city — we see that visitors came from Boston, not that you came from Boston. No individual tracking, no cookies.

Your observations are used to run the product: parsing what you said into organized data, making it searchable, surfacing patterns, and generating your Migration Report. That’s it.

Your email is used to send you your Migration Report, updates about Percy, and the occasional thing we think you’d actually want to know about. You can unsubscribe anytime.

Your data is never used to train AI models. What you tell Percy stays in your garden. We use the Claude API (Anthropic) to parse observations — Anthropic’s API data policies apply to that processing, but your observations are not used to train their models under our agreement.

We don’t sell your data. Not to advertisers, not to data brokers, not to anyone. We’re not in that business.

Supabase stores your data securely in the cloud. They’re our database provider. They don’t have access to your data for their own purposes.

Anthropic (Claude API) processes your observations to parse them into structured data. This is what makes voice input work. Anthropic does not use API data to train models.

Buttondown manages our email list. If you joined our waitlist or receive emails from us, your email address lives there.

No one else. We don’t use ad networks, tracking pixels, or third-party analytics beyond the privacy-respecting Plausible.

Export anytime. You can export everything you’ve logged at any time from your account settings.

Delete anytime. You can delete individual observations or your entire account. When you delete your account, your data is removed. We keep backups for a short period for technical reasons, then it’s gone.

If you don’t subscribe after your free season, you keep read-only access to everything you logged. We don’t delete it just because you didn’t pay. If you change your mind later, it’s right where you left it.

If Percy ever shuts down (we’re not planning on it), we’ll give you plenty of notice and make sure you can take everything with you.

Your data is stored securely using Supabase’s infrastructure, which encrypts data at rest and in transit. Passwords are hashed and never stored in plain text. We use HTTPS everywhere.

We’re a small team, which means we move carefully and take security seriously. If you find a vulnerability, please email us at [email protected].

When you use voice input, your audio is processed in real time to convert speech to text. We don’t store raw audio recordings — only the text transcript and what Percy parses from it. Your voice is the input, not the data.

If we make meaningful changes, we’ll let you know by email before they take effect. The “last updated” date at the top of this page reflects the current version.

If you have questions about any of this, email us at [email protected]. We’re a small team and we read everything.