Privacy policy

1. Introduction

This Privacy Policy describes how Turf ("we," "us," "our") collects, uses, and protects your information when you visit the Turf website at onturf.co ("Website") and when you use the Turf mobile application ("App"). We are committed to being transparent about what we collect, why we collect it, and how it is used.

Turf is a lawn care companion app. To provide personalized, condition-aware guidance, we need certain information about you, your lawn, and your local environment. This policy explains that exchange clearly.

2. Information we collect

2a. Information you provide

When you create an account and use Turf, you provide:

• Account information: Your name and email address, provided through Google or Apple sign-in via our authentication provider (Supabase).
• Lawn profile: Grass type, soil type, lot size, sprinkler system details, and care tier preference — entered during onboarding and editable in your profile.
• Task activity: Records of lawn care tasks you mark as completed, skipped, or deferred, including the date and time of those actions.
• Feedback: Any feedback you submit through the App's feedback feature, including optional screenshots and category selections.

2b. Information collected automatically

When you use Turf, we automatically collect:

• Location data: Your device's GPS coordinates, used to determine your USDA climate zone, retrieve local weather and soil temperature data, and provide geographically accurate timing recommendations. Location data is collected when you use the App and is sent to our servers to fetch environmental data. You can decline to share location, but the App cannot provide personalized guidance without it.
• Device information: Device type, operating system version, app version, and timezone.
• Usage data: App open timestamps, session frequency, screen navigation, feature usage, and notification interaction — collected through PostHog analytics.
• Crash data: Error logs and crash reports collected through Sentry to help us identify and fix bugs.

2d. Information collected on the Website

When you visit the Turf website at onturf.co, we automatically collect:

• Website analytics: Cloudflare Pages collects aggregate traffic data including page views, visitor counts, and performance metrics. Cloudflare may process your IP address and browser information to deliver this service. This data is processed by Cloudflare, Inc. See Cloudflare's Privacy Policy.
• Early access form submissions: If you submit the early access request form on the Website, your email address and any information you provide is sent to and stored by Tally.so, our form provider. See Tally's Privacy Policy. We use this information solely to contact you about Turf's availability.

2c. Information from third-party services

We retrieve environmental data from external APIs based on your location:

• Weather data: Air temperature, precipitation, forecasts, and evapotranspiration (ET₀) from Open-Meteo.
• Soil temperature: Modeled soil temperature data (not measured at your property) from Open-Meteo.
• Mapping data: Satellite imagery and parcel boundary data from Mapbox, used for lawn area estimation.

This environmental data is cached on our servers to reduce redundant API calls and improve performance. It is associated with your location coordinates, not your personal identity.

3. How we use your information

We use the information we collect to:

• Provide the core service: Generate your personalized lawn care plan, evaluate task timing based on environmental conditions, and deliver context-aware recommendations.
• Generate companion text: Your lawn profile, task history, and environmental conditions are sent to the Anthropic API (Claude) to generate personalized narrative text within the App. Only lawn-relevant data is sent — never your name, email, or account credentials.
• Send notifications: Deliver timely push notifications about task windows, seasonal transitions, and lawn care timing based on your notification preferences.
• Improve the App: Analyze usage patterns, crash reports, and beta feedback to identify bugs, improve features, and refine the product experience.
• Communicate with you: Respond to feedback submissions and send important service-related notices.

4. How we share your information

We do not sell your personal information. We do not share your personal information for advertising purposes.

We share information with third-party service providers only as necessary to operate the App:

Service	Data shared	Purpose
Supabase	Email, auth tokens	Account authentication
Open-Meteo	GPS coordinates	Weather and soil temperature data
Mapbox	GPS coordinates	Mapping and satellite imagery
Anthropic (Claude)	Lawn profile, task state, environmental conditions	AI-generated companion text
PostHog	Device info, usage events	Product analytics
Sentry	Device info, error context	Crash reporting and debugging
Cloudflare	IP address, browser info (Website)	Website hosting and edge analytics
Tally	Email address (Website early access form)	Early access waitlist management

Each of these providers processes data according to their own privacy policies. We select providers that maintain reasonable data protection practices.

We may also share information if required by law, to protect our legal rights, or to prevent fraud or security issues.

5. Data storage and security

• Backend infrastructure: Your account data, lawn profile, and task history are stored in a SQLite database hosted on Railway. Environmental data is cached on the same infrastructure.
• Authentication: Account authentication is managed by Supabase. We do not store your Google or Apple passwords.
• Encryption: Data is transmitted over HTTPS (TLS encryption in transit).
• Access controls: Backend access is restricted and protected by API keys and admin authentication.
• Backups: We maintain regular backups of the database with a defined retention period.

While we implement reasonable security measures, no system is perfectly secure. We cannot guarantee absolute security of your data.

6. Data retention

• Account data: Retained for as long as your account is active. Deleted when you delete your account.
• Task history: Retained for as long as your account is active. Deleted with your account.
• Environmental cache: Weather and soil temperature data is refreshed regularly (approximately every 4 hours) and older cached data is overwritten.
• Analytics data: Usage events in PostHog are retained according to PostHog's data retention policies.
• Crash reports: Error logs in Sentry are retained according to Sentry's data retention policies.
• Feedback: Beta feedback submissions are retained for product improvement and may persist after account deletion in anonymized form.

7. Your choices and rights

• Account deletion: You can delete your account at any time from the App's settings (My Lawn > Settings > Account). This permanently deletes your account, lawn profile, and task history from our servers.
• Data export: You can request an export of your data through the App's settings (My Lawn > Settings > Privacy & Data).
• Location: You can revoke location permissions through your device settings at any time. Without location data, the App cannot provide personalized guidance and will operate in a limited demo mode.
• Notifications: You can manage or disable push notifications through your device settings or within the App.
• Analytics: PostHog analytics can be managed through the App's privacy settings.

If you are a resident of California, the European Economic Area, or another jurisdiction with applicable data protection laws, you may have additional rights including the right to access, correct, delete, or port your data. Contact us at the address below to exercise these rights.

8. Children's privacy

Turf is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other reasonable means. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

10. Contact

If you have questions about this Privacy Policy or your data, contact us at: privacy@onturf.co.