Privacy policy
Last updated: 18 September 2026
Cropsy is made by Vision Tech B.V. This policy explains what the app and this website process, why, and what say you have over it. No ads, no third-party trackers, no profiles sold on to anyone.
Who we are
Vision Tech B.V., registered in the Netherlands under Chamber of Commerce number 42058048, is the controller for the data Cropsy processes. Privacy questions go to hello@cropsyapp.com.
The app works without an account
Your garden, plants, tasks and journal live on your phone, in a database on the device itself. Without an account none of it leaves. Delete the app and that data is gone — we hold no copy.
What an account adds
If you make an account we store your email address and sync your gardens, plants, tasks, journal, photos and harvests, so they follow you to a new device. That happens at Supabase in Frankfurt, and only you can reach your own rows.
Location
Your frost dates need a place: your postcode or, if you allow it, your GPS location. Coordinates are rounded to two decimals — about a kilometre — before they leave your device. That rounded place goes to our own API for your frost profile and to Open-Meteo for this week's weather. We never store your exact location.
Photos
Journal photos stay on your device and, with an account, in a private folder at Supabase only you can open. If you use the plant scan, that one photo goes to Pl@ntNet (France) or Kindwise (EU) to work out what it shows. They don't keep it for us, and we don't attach it to your account.
Usage data — only if you say yes
Cropsy asks once whether we may see which screens get used. Say no, or say nothing, and nothing starts: no id, nothing sent. Say yes and four events (plant added, task logged, onboarding finished, paywall shown) plus app opens and closes go to PostHog in the EU. Never your notes, photos or location. Settings turns it off again at any time.
Crash reports
When the app breaks we send the crash to Sentry in the EU: which code failed, and on what kind of device. No screenshots, no IP address, nothing from your garden.
Sign-in links, confirmations and the receipt for a deleted account go out through Resend (Ireland). Seasonal mail — two a year — only reaches you if you switch it on in Settings, and every one carries an unsubscribe link that stops it in one click.
Purchases
Apple takes the payment; we never see your payment details. To know whether you have premium we use RevenueCat (United States), which receives a random user id and the status of your purchase. That transfer runs under the European Commission's standard contractual clauses.
Who we rely on
Supabase (database and storage, Frankfurt), Vercel (hosting for our API and this site, Frankfurt), Sentry (crash reports, EU), PostHog (usage data, EU, only with consent), Resend (email, Ireland), RevenueCat (purchase status, US), Pl@ntNet (plant identification, France), Kindwise (plant health, EU), Open-Meteo (weather, Germany) and PDOK (postcode to coordinates, the Netherlands). Nobody else.
How long we keep it
As long as your account exists. Delete it in the app and everything goes at once — gardens, journal, photos, harvests — and you get an email confirming it. Unsubscribe from the newsletter and your address leaves that list.
Your rights
You can see and export your data from Settings (JSON, everything we hold), have it corrected, have it deleted, or object to a particular use. Write to hello@cropsyapp.com. You may also complain to the Dutch Data Protection Authority.
Children
Cropsy isn't made for children under sixteen and we don't ask anyone's age. If you notice a child has made an account, write to us and we'll remove it.
Changes
As the app changes, so does this policy. The date at the top is always the current version.