Privacy Policy
Last updated: October 31, 2026
1. The short version
- You can use Heirloom without an account. Then your garden stays in your own browser and is not saved to our servers.
- If you create an account, we store your garden data (seeds, notes, plantings, journal, bed plan, settings) so it can sync across your devices. Journal photos are stored privately.
- We do not sell your data. We do not run ads, and we do not use advertising trackers or cross-site tracking in Heirloom. We may use Cloudflare's cookieless, aggregated visitor statistics (section 4).
- We use a handful of outside services to run Heirloom: Cloudflare (hosting and storage), Clerk (sign-in), Stripe (payments), Resend (email), and public weather and ZIP code lookup services. Section 5 explains what each one sees.
- You can delete things in the app, and you can delete your whole account yourself from the account menu. Section 8 explains how.
2. Who we are
Heirloom Growers Almanac is operated by Kruger Holdings, LLC, based in Fish Creek, Wisconsin, USA. In this policy, "we" and "us" mean the operator. For privacy questions, write to collin@kruger.farm.
3. What we collect and why
3.1 If you do not sign in
Heirloom saves your garden in your browser's local storage on your device: your seed list and notes, planting dates, zone and ZIP code, custom frost dates, journal entries (text only, no photos), your own saved varieties, your bed plan, and small preferences such as whether you have seen the tour. We do not receive this information. Clearing your browser data erases it.
3.2 Account information (Clerk)
When you create an account, our sign-in provider Clerk collects what it needs to run sign-in: your email address and, if you use Google sign-in, your name and profile picture from Google, plus sign-in and session details such as device and IP address. Clerk stores this on its systems. In our own database we store only your Clerk user ID and the times you first and last used Heirloom while signed in.
3.3 Your garden data (when signed in, on plans that include cloud sync)
We store the following in our database on Cloudflare (D1), tied to your user ID, so Heirloom can show it back to you on any device:
- your seed list, notes, planted dates and methods, zone, ZIP code, and settings (including custom frost dates);
- your bed plan and your saved varieties;
- your planting journal entries (date, type, notes, quantities, and which seed they relate to).
Journal photos you upload are stored in a private Cloudflare R2 storage bucket, under your account. They are served only back to you when you are signed in. Before saving a photo, we strip embedded metadata, including GPS location and camera details. Photos you take of your garden may still show things that are visible in the picture itself.
On the free plan, garden data is kept in your browser, as in 3.1. Free accounts do not sync garden data to our servers. A signed-in free account has an account record on our servers and may have one planting-journal entry (without photos); bed plans, saved varieties, photos, and email reminders are part of the paid plans (Annual and Perennial).
3.4 Email reminders and frost alerts
If you turn on email reminders, we store the email address you choose for them, your preferences (how many days ahead, whether frost alerts are on), a copy ("snapshot") of the parts of your garden needed to work out what is coming up (your seeds and planting dates, frost dates, and ZIP code), and a log of which reminders we already sent you so you do not get the same one twice. Each morning (at 13:00 UTC, which is 8:00 am Central Daylight Time or 7:00 am Central Standard Time) a scheduled job builds your reminders and sends them. Emails are plain text and are sent through Resend. We do not add tracking pixels to them.
3.5 Billing information (Stripe)
When you buy a plan, Stripe collects your payment details. We never receive your full card number. We pass Stripe your email address and your user ID so it can create your customer record, and Stripe sends us back the result. We store: your plan, status, trial end date, the date your paid access runs through, your Stripe customer and subscription IDs, and a record of each one-time purchase (Stripe checkout ID, plan, amount, and whether it was refunded). We also keep a list of Stripe event IDs we have processed, to avoid applying the same payment twice.
3.6 Messages you send us
If you use "Suggest a feature", we receive your message and the email address you chose to include (it is optional). It is emailed to us through Resend. If you write to us by email, we receive what you send.
3.7 Weather and ZIP code lookups
To work out your growing zone and frost alerts, Heirloom looks up your ZIP code. Your browser may ask a public ZIP code lookup service (api.zippopotam.us) about the ZIP code you typed, which means that service can see the ZIP code and your IP address. Our servers also use that service to convert a ZIP code to coordinates, and then request the forecast for those coordinates from the U.S. National Weather Service (api.weather.gov), which publishes forecasts as public data. Those server-side requests contain a ZIP code or coordinates and an identifying label for Heirloom, not your name or email. We cache the results by ZIP code for a few hours; that cache is not tied to your account.
3.8 Technical logs
Our hosting provider, Cloudflare, handles every request to Heirloom and, as with any website, sees technical information such as your IP address, browser type, and the pages and API paths requested. We have Cloudflare's Worker logging turned on, which we use to find and fix errors and abuse. These logs record requests to our servers (such as the time, path, and status of each request, along with technical details Cloudflare attaches, which can include your IP address and approximate location) and error messages from our code. We do not deliberately log the contents of your garden data, your email address, or payment details.
4. Cookies and local storage
- Our own cookies: Heirloom itself does not set advertising, analytics, or tracking cookies, and we do not use advertising scripts.
- Visitor statistics: Cloudflare Web Analytics may be enabled for our krugerapps.com domains. It is Cloudflare's privacy-focused service: it does not use cookies or local storage, does not fingerprint you or track you across sites, and gives us only aggregated statistics such as page views, referring sites, browser and device types, country, and page load times. When it is enabled, your browser may load a small Cloudflare script that sends these measurements to Cloudflare.
- Sign-in cookies: Clerk loads on every visit to Heirloom, including when you are signed out, and sets the cookies it needs to keep you signed in and protect sign-in against abuse. These are needed for sign-in to work. Clerk sets them for our krugerapps.com domains. Clerk's own privacy policy describes them.
- Payment cookies: Stripe's checkout and billing pages (hosted by Stripe, not us) may set their own cookies to process payments and prevent fraud.
- Local storage: Heirloom uses your browser's local storage to save your garden on your device, as described in 3.1, and to remember small preferences. Clearing site data removes it.
Because the only cookies and storage we use are needed to provide the service, and our visitor statistics are cookieless, we do not show a cookie banner. Heirloom is offered to users in the United States.
5. Who we share data with
We share data only with the service providers that help us run Heirloom, and only as needed for the purposes below. They are bound by their own terms and privacy policies.
| Provider | What it does | What it sees |
|---|---|---|
| Cloudflare | Hosts the app and API; stores your garden data (database) and journal photos (private storage); runs the daily reminder job | Everything you save in Heirloom, plus technical request data |
| Clerk | Sign-in and accounts (Google or email sign-in) | Your sign-in details, email, name and photo from Google if you use it, session and device data |
| Stripe | Payments, receipts, and the billing portal | Your payment details, email, billing info, and what you bought |
| Resend | Sends reminder, frost-alert, and feedback emails | Recipient email address, subject, and message text |
| U.S. National Weather Service (weather.gov) | Public weather forecasts | Coordinates for a ZIP code and an identifying label for Heirloom |
| ZIP code lookup service (zippopotam.us) | Turns ZIP codes into places | A ZIP code, and for browser lookups your IP address |
| Only if you choose Google sign-in (through Clerk) | What you approve on Google's sign-in screen |
We may also disclose information if the law requires it, to protect people or the Service from harm or abuse, or as part of a sale or reorganization of the Service (in which case we will make sure this policy continues to protect your information, or tell you first). We do not sell your personal information and do not share it for advertising.
6. How long we keep data
- Garden data, journal entries, and reminder settings: until you delete them or your account.
- Photos: until you remove the photo or delete the journal entry it belongs to (deleting an entry deletes its photos), or until your account is deleted.
- Account and billing records: while your account is open. When you delete your account we keep only a minimal record of any purchase, with your name, email, and user ID removed, for tax and accounting and to count Perennial (lifetime) plan sales. We keep it for 7 years for tax purposes. Stripe keeps its own payment records under its own policy.
- Weather cache: a few hours, then replaced. It is not tied to you.
- Logs: kept by Cloudflare for a limited period under its retention settings, then deleted automatically. We do not export or archive them.
- Data held by Clerk, Stripe, and Resend: according to their own policies. Stripe in particular keeps payment records as required by financial regulation.
7. Security
Heirloom is served over HTTPS. Sign-in tokens are checked on our servers on every request to your data, and your photos can be read only through a request made by your own signed-in account. No online service can be perfectly secure, and we cannot guarantee that your data will never be accessed without permission. Please keep your sign-in secure.
8. Your choices and rights
- See and change your data: it is in the app. Edit or delete seeds, notes, journal entries, photos, and plans at any time.
- Reminders: turn them off in the Reminders tab, or change the email address.
- Billing: manage or cancel a subscription from your plan badge, then "Manage billing."
- Stay signed out: you can use Heirloom without an account, and then we do not hold your garden data.
- Clear data on this device: the account menu has a "Clear data on this device" button that removes the garden saved in your browser. Nothing is sent to us. If you never signed in, that browser copy is the only copy.
- Delete your account: when you are signed in, open the account menu, choose "Delete account," and type DELETE to confirm. We then permanently delete your garden data, journal entries and photos, bed plans, saved varieties, reminder settings, reminder history, and subscription record from our systems. If you have a Season Pass, we cancel it right away; it is not refunded, as described in the Terms. We also delete your Stripe customer record where we can. Records Stripe must keep for its own legal and fraud-prevention reasons may remain with Stripe. We keep a minimal, anonymized purchase record as described in section 6. If you also use other Kruger apps with the same sign-in, we delete only your Heirloom data and keep your sign-in account so those apps keep working; otherwise we delete your sign-in account (your email and name) at Clerk too. If deletion does not finish (the app will tell you), or you cannot sign in, email collin@kruger.farm from the address on your account, or send us a note with "Suggest a feature" in the app menu, and we will delete it for you. We respond to deletion requests within 30 days.
- Get a copy of your data: Heirloom does not have a download tool yet; ask us at collin@kruger.farm and we will send you a copy of the data we hold under your account.
Depending on where you live, you may have additional legal rights over your personal information, such as rights to access, correct, delete, or port it, or to object to some uses. We will honor valid requests sent to collin@kruger.farm. Heirloom is intended for users in the United States.
9. Where data is processed
Heirloom is operated from the United States, and our providers process data on their own infrastructure, which may be in the United States or other countries. By using Heirloom you understand your information may be transferred to and processed in the United States.
10. Children
Heirloom is not directed at children under 13, and we do not knowingly collect personal information from them. If you think a child has given us personal information, contact us at collin@kruger.farm and we will delete it.
11. Changes to this policy
We may update this policy. We will post the new version here with a new "Last updated" date, and tell you by email or in the app at least 30 days before a significant change takes effect.
12. Contact
Questions or requests about privacy: collin@kruger.farm. Kruger Holdings, LLC, Fish Creek, Wisconsin, USA.