What this is
SowAndSpoon is a web app that helps parents who grow their own food plan their garden around their baby's feeding milestones. This policy explains what information we collect, why we collect it, and how we handle it.
What we collect and why
- Email address -- used to create and access your account via magic link or OAuth (Google, Apple). We do not send marketing email unless you opt in.
- Baby name and date of birth -- used to calculate age-appropriate food guidance. Name is optional. You can add multiple children.
- Zip code and growing zone -- used to contextualize planting timing. Optional.
- Garden crops -- the crops you add, planting dates, and harvest dates you log.
- Food log and allergen log -- foods your baby has tried, reactions, and allergen introduction dates. This data is stored per-baby and is only visible to you.
- Payment information -- if you upgrade to Pro, payment is processed by Stripe. We never see or store your card number.
- Cookies -- we use a session cookie for authentication (managed by Supabase Auth) and a preference cookie to remember which baby you have selected. We do not use advertising or tracking cookies.
Who we share data with
We use the following services to operate the app. Each acts as a data processor under our instructions:
- Supabase -- our database and authentication provider. Data is stored in the United States.
- Stripe -- payment processing. Subject to Stripe's own privacy policy.
- Resend -- transactional email (harvest reminders, magic links). We share only your email address for this purpose.
- Vercel -- hosting and infrastructure.
We do not sell your data to anyone. We do not share your data with third parties for advertising purposes.
Data about children
SowAndSpoon is a tool for parents and caregivers. We collect information about children (name, date of birth) from the parent or guardian who creates the account. We do not knowingly collect information directly from children, and this service is not directed at children. If you are under 18, do not create an account.
Your rights
- Access -- you can view all your data within the app at any time.
- Deletion -- you can delete individual babies, garden crops, and food logs within the app. To delete your entire account and all associated data, use our contact form.
- Correction -- you can edit your data within the app.
- California residents (CCPA) -- you have the right to know what personal information we collect, to delete it, and to opt out of sale. We do not sell personal information.
Data retention
We keep your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes (such as payment history).
Security
We use Supabase's Row Level Security to ensure that users can only access their own data. Connections to the app and API are encrypted via HTTPS. We do not have access to your authentication credentials.
Changes to this policy
If we make material changes, we will update the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.