What this is
SowAndSpoon is a web app that helps parents who grow their own food plan their garden around their baby's feeding milestones. This service is available to users in the United States. This policy explains what information we collect, why we collect it, and how we handle it.
What we collect and why
- Email address: used to create and access your account. We do not send marketing email unless you opt in.
- Baby name and date of birth: used to calculate age-appropriate food guidance. Name is optional. You can add multiple children.
- Zip code and growing zone: used to contextualize planting timing. Optional.
- Garden crops: the crops you add, planting dates, and harvest dates you log.
- Food log and allergen log: foods your baby has tried, reactions, and allergen introduction dates. This data is stored per-baby and is only visible to you and any linked partner.
- Health context (optional): if you choose to provide it, we store your baby's eczema status and whether your immediate family has a diagnosed food allergy. This information is used only to make your doctor's report more clinically useful and is never used for marketing or shared beyond the data processors listed below.
- Reaction details (optional): if a food log is marked as a reaction, you may optionally record symptoms, timing, severity, and resolution. This health-adjacent information is stored privately and appears only on your doctor's report. It is included in your data export and deleted when you delete your account.
- Photos: you may optionally upload photos when logging a taste. Photos are stored securely and are only visible to you and any linked partner. Photos are deleted when you delete the associated food log or your account.
- Payment information: if you upgrade to Pro, payment is processed by our payment provider. We never see or store your card number.
- Cookies: we use a session cookie for authentication and a preference cookie to remember which baby you have selected. We do not use advertising or tracking cookies.
- Analytics: we measure page views and general usage patterns using a privacy-preserving analytics service. No personally identifiable information is collected and individual users are not tracked across sessions.
Who we share data with
We use the following services to operate the app. Each acts as a data processor under our instructions:
- Supabase: our database and authentication provider. Data is stored in the United States.
- Stripe: payment processing. Subject to Stripe's own privacy policy.
- Resend: transactional email (harvest reminders, account notifications). We share only your email address for this purpose.
- Vercel: hosting and infrastructure.
We do not sell your data to anyone. We do not share your data with third parties for advertising purposes.
Data about children (COPPA)
SowAndSpoon is a tool for parents and caregivers. It is not directed at children and we do not knowingly collect personal information directly from anyone under 13.
- Information about children (name, date of birth, food reactions, allergen introductions, eczema status, family allergy history) is provided solely by the parent or legal guardian who creates the account.
- Only account holders aged 18 or older may create accounts and enter child data.
- By creating an account and entering your child's information, you consent to our collection and use of that information as described in this policy.
- Child data is never used for marketing, advertising, or shared with third parties beyond the data processors listed above.
- You may review, edit, or delete your child's data at any time from within the app, or delete all data by deleting your account.
If you believe we have inadvertently collected personal information from a child under 13 without parental consent, please contact us and we will promptly delete it.
Your rights
- Access: you can view all your data within the app at any time.
- Deletion: you can delete individual babies, garden crops, and food logs within the app. To delete your entire account and all associated data, use the delete button on your account page.
- Correction: you can edit your data within the app.
- California residents (CCPA): you have the right to know what personal information we collect, to delete it, and to opt out of sale. We do not sell personal information.
Data retention
We keep your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes (such as payment history).
Security
We use access controls to ensure that users can only access their own data. Connections to the app and API are encrypted in transit. We do not have access to your authentication credentials.
Changes to this policy
If we make material changes, we will update the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.