Garden — Privacy Policy
Last updated: 30 August 2026
Garden helps you track and sustain recovery from a habit you are trying to change. Because that is sensitive by nature, the app is built so that almost everything you record stays on your own device. This policy explains the exceptions plainly.
Garden has no accounts. You never create a login, and we never ask for your email address, phone number, or date of birth.
1. What stays on your device
Everything you record in Garden is stored locally, in the app's own storage on your phone. It is not uploaded to us, and we cannot read it:
- Your check-ins, streak, start date, and garden
- The habit you are working on and your reasons for stopping
- Your first name, as entered during onboarding
- Money-saved settings and daily-spend estimate
- Mood entries and milestones
- Your chat history with Hope
- App preferences (theme, language, notification times)
Deleting the app removes all of it. Settings → Reset data erases it without uninstalling. Neither action is reversible, because we hold no backup copy.
2. Talking to Hope sends data off your device
Hope, the in-app chat companion, is the one feature that transmits your information. It cannot work otherwise — the reply has to be generated somewhere.
When you send a message, the following is sent to our server and then to OpenAI, which generates the response:
- The message you typed and recent messages in the conversation
- Your first name
- The habit you are working on
- Your sobriety day count and current streak
- The reasons for stopping that you entered
- Your most recent mood entry
- Your language, and a random identifier (see below)
OpenAI processes this to produce a reply. Under our agreement with OpenAI, your content is not used to train their models. We do not store your conversations on our servers; messages are used to produce the reply and are not retained afterwards.
If you never open the chat tab, none of this is ever sent. Every other feature in Garden works entirely offline.
3. The random identifier
The first time you use the chat, Garden generates a random identifier (a UUID) and keeps it on your device. It is used only to enforce rate limits so one device cannot overload the service.
It is not your name, your email, your device's serial number, or your advertising ID. It is not linked to your identity, and we cannot use it to find out who you are. Resetting your data generates a new one.
4. Analytics
Garden uses PostHog to understand how the app is used in aggregate — for example, how many people finish onboarding, and where they get stuck.
We send product events (screens reached, features used) and technical properties such as app version, device model, operating system version, and language, tied to a random analytics identifier. PostHog also derives an approximate location (country and city) from the network address of the request; we do not store the address itself. The type of habit you chose is included as a category (for example "alcohol") so we can learn which habits Garden actually helps with.
Session recordings. To see where the app is confusing, PostHog records how the screen is used during a session — which screens appear, where you tap, how you scroll. Recordings are masked on your device before anything is sent: everything you type, every image, and the entire Hope chat screen are replaced by solid boxes. We do not send your name, your check-ins, your chat messages, or your reasons for stopping as readable content, and no recording can be traced back to you.
5. Subscriptions
Garden Plus is handled by RevenueCat working with the App Store or Google Play. Purchases are processed entirely by Apple or Google — we never see your card details, billing address, or payment information.
RevenueCat receives an anonymous app user ID and your subscription status so the app knows whether your subscription is active.
6. Notifications
Reminders are scheduled and delivered locally by your device. Garden sends no push notifications, and registers no push token. Nothing about your reminders leaves your phone.
7. Who your data is shared with
Only the three processors named above, each for the single purpose described:
| Who | What they receive | Why |
|---|---|---|
| OpenAI | Chat messages and the context in section 2 | To generate Hope's replies |
| PostHog | Anonymous usage events, device properties, approximate location, and masked session recordings | Product analytics |
| RevenueCat | Anonymous ID and subscription status | Subscription management |
We do not sell your data. We do not share it with advertisers, data brokers, or insurers. There is no advertising in Garden and no ad tracking.
8. Your rights
Because your data lives on your device and we hold no account for you:
- Access and export — everything Garden knows about you is visible inside the app.
- Deletion — Settings → Reset data, or delete the app. Both are immediate and
complete.
- Withdrawing consent for chat — simply stop using the chat tab. No other feature
transmits your information.
If you are in the EEA or UK, our legal basis is your consent for analytics, and performance of the service for chat and subscriptions. You may contact us to exercise any right under the GDPR.
9. Children
Garden is not directed at children and is rated for adults. We do not knowingly collect information from anyone under 16.
10. Changes
If this policy changes materially, we will update the date above and note the change in the app's release notes.
11. Contact
Questions, requests, or complaints: lucasvribeiro14@gmail.com