1. Information We Collect
When you use First Flush, we collect:
- Account information: Email address, display name, and experience level provided during registration.
- Cultivation data: Grow logs, culture records, spore inventory, harvest data, photos, and environmental readings you enter into the platform.
- Forum content: Posts, replies, and other content you create in the community forum.
- Usage data: Basic analytics about how you interact with the Service to help us improve the experience.
2. How We Use Your Information
We use your information to:
- Provide and maintain the Service.
- Send you notifications you've opted into (forum replies, grow reminders, etc.).
- Improve the Service based on usage patterns.
- Enforce our Terms of Service and community guidelines.
3. Data Storage & Security
Your data is stored securely using Supabase (hosted on AWS) with row-level security policies ensuring you can only access your own data. Photos are stored in Supabase Storage (AWS-backed) with TLS encryption in transit.
4. Data Sharing
We do not sell your personal data. Your cultivation data is private by default. Forum posts and any content you explicitly mark as public may be visible to other users and search engines. We may share data with:
- Infrastructure providers (Supabase, Vercel, Cloudflare) as needed to operate the Service.
- Payment processor (Stripe) — payment method data when you upgrade to Pro.
- Email delivery (Resend) — transactional emails (password reset, contact form replies, forum reply notifications).
- Error tracking (Sentry) — only when explicitly enabled by us via configuration; disabled by default. Sentry receives anonymized error metadata, never personal data or photos.
5. Your Rights
You can:
- Export your data at any time from the Settings page (JSON format).
- Delete your account and all associated data from the Settings page. Deletion is permanent and cascading — all grows, cultures, logs, and forum posts will be removed.
- Update your information including display name, email, and notification preferences via Settings.
6. Cookies & Local Storage
We use essential cookies for authentication and session management. The PWA uses IndexedDB for offline data caching. We do not use third-party tracking cookies. If error tracking is enabled, Sentry sets a session-replay cookie on errors only; otherwise no third-party tracking cookies are set.
7. Changes to This Policy
We may update this policy from time to time. We will notify registered users of significant changes via email or in-app notification.