Privacy Policy

This Privacy Policy explains what information the Permaculture Garden Planner (the “Service”) collects, how it is used, and the choices you have. We built the Service to need as little personal information as possible: there are no user accounts, and we do not sell or share your personal information.

1. Who we are

The Service is operated by Pranarei n.e.V., a non-profit association based in Germany, which acts as the controller of your personal information.

Pranarei n.e.V.
Email: simon@pranarei.de

2. Information we collect

We collect only what the Service needs to function. We do not require you to create an account, and we do not sell, rent, or share your personal information with third parties for cross-context behavioral advertising.

Garden plan inputs

When you build a plan, the information you enter — such as your approximate location or address, garden geometry you draw on the map, climate zone, household size, dietary preferences, infrastructure, and any free-text notes — is processed to generate your plan. Saved plans are stored on our hosting provider’s storage under a random plan identifier; they are not tied to a login.

Email address (only at purchase or reminder sign-up)

We collect your email address only when you make a purchase or sign up for the optional monthly task reminders — so we can send you the link to your unlocked plan and the reminders that are part of your plan. Self-service reminder sign-ups use a double-opt-in process: reminders only start once you click the confirmation link in the email we send you. Payment is processed by our payment provider (see “Service providers” below) — we never receive or store your full card details. You can unsubscribe from the reminders at any time via the link in every email.

Email address (forecast waitlist)

If you use the “Join the waitlist” form, we store your email address, plan ID, market and language to notify you once the planned weather/climate forecast feature launches. The feature is not available yet — this is purely a list of interested users, stored separately from the reminders. Sign-up uses a double-opt-in process: we only add you once you click the confirmation link in the email we send. The address is used solely to inform you about this feature; we never sell or share it, and you can unsubscribe at any time via the link in every email.

Email address (climate region waitlist)

If your location is in a climate region the planner does not support yet (e.g. Southern Hemisphere or tropics), we deliberately do not create a plan and instead offer to notify you once your region is supported. If you sign up, we store your email address, the detected climate region class (no address, no coordinates), market and language — separately from the reminders and the forecast waitlist. Sign-up uses a double-opt-in process with its own, purpose-bound consent: we only add you once you click the confirmation link in the email we send, and the address is used solely for this notification. We never sell or share it, and you can unsubscribe at any time via the link in every email.

Tester feedback (testing phase)

On the feedback page (/feedback), and via the tester-access application in the homepage call-to-action, you can voluntarily share feedback about the planner during our testing phase, or apply for free tester access. We store only what you enter yourself: the form fields you fill in (ratings and free text) — anonymously by default, without an account and without storing your IP address (exception: if you arrive via a personal invitation link carrying a reference tag, e.g. /feedback?ref=…, your submission is linked to that tag so we can attribute invited testers' feedback) — and your email address only if you provide it (for follow-up) or when you apply for an access code (then it is required so we can send you the code). Storage is at our hosting provider (Vercel), kept separate from plan data. We use this data solely to improve the product and, for applications, to send the code; we never sell or share it, and we delete it once the testing-phase evaluation is complete. Please do not enter other people's sensitive personal data in the free-text fields.

Approximate (country-level) location

Our hosting provider passes us a country-level signal derived from your IP address (the x-vercel-ip-country edge header) so we can default the Service to the right region. We do not store precise geolocation derived from your device.

Analytics (only with your consent)

If — and only if — you consent, we collect aggregate, privacy-friendly usage and performance metrics (see “Cookies and analytics”). No analytics are collected before you opt in.

3. How we use information

• To generate, store, and let you retrieve your garden plan.
• To optionally enhance your plan with AI-generated, personalized guidance. AI-generated content is marked with ◈ in your plan and exports; it is created with AI support (Claude by Anthropic) and not individually editorially reviewed.
• To process your purchase and email you the link to your unlocked plan.
• To send the monthly task reminders that are part of your purchased plan (you can unsubscribe at any time via the link in every email).
• To understand and improve performance and usage of the Service — only with your consent.
• To protect the Service against abuse and to comply with our legal obligations.

4. Service providers and third parties

We share information with the following service providers only as needed to run the Service. None of these are authorized to use your information for their own marketing, and none of this constitutes a sale of personal information.

The interactive map itself runs on self-hosted map software; tiles are loaded from the providers above when you view the map.

5. Cookies and analytics

We do not use advertising cookies or third-party tracking cookies. Storage that is strictly necessary for a feature you actively requested — such as keeping your draft plan in your browser’s local storage, or rendering the map you chose to open — is used without a separate prompt, because it is required to deliver what you asked for.

Anything beyond that is consent-based. On your first visit you can choose what to allow:

• Statistics — aggregate, privacy-friendly usage and performance metrics (Vercel Analytics and Speed Insights). Off until you opt in.
• Marketing — promo-code and affiliate-referral handling. Off until you opt in.

“Accept all” and “Essential only” are presented as equal choices. You can change or withdraw your consent at any time via the privacy-settings link in the footer.

6. Data retention and deletion

We keep your plan and related records for as long as needed to provide the Service to you, and then delete them. You can delete your plan and the data tied to it at any time — see “Your privacy rights” below for the self-service tool.

Service providers may retain limited records under their own retention policies (for example, hosting logs and payment/tax records). Email and tax records related to a purchase may be retained where required by law.

7. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the following rights regarding your personal information, subject to legal limits:

• Right to know — request the categories and specific pieces of personal information we have collected about you.
• Right to delete — request deletion of personal information we hold about you.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell or share personal information as those terms are defined under the CCPA/CPRA, so there is nothing to opt out of.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights.

We do not knowingly use personal information for cross-context behavioral advertising, and we do not sell or share personal information for monetary or other valuable consideration.

8. How to exercise your rights

You can delete your plan and its associated data yourself, immediately, using the self-service deletion tool on our German privacy page (it works the same for all users): you provide your plan ID and the token from your confirmation email, and we permanently delete the plan data, detail layout, reminder subscription, and order tokens tied to that plan.

For any other request — to know, delete, or correct your information — email us at simon@pranarei.de. We may need to verify your request before acting on it (for example, by confirming control of the email address or the plan token associated with a purchase). You may also use an authorized agent where permitted by law. We aim to acknowledge requests promptly and to respond within the timeframe required by applicable law (generally within 45 days under the CCPA/CPRA).

9. Children

The Service is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the date below and, where appropriate, provide additional notice.

11. Contact

Questions about this policy or your data? Email simon@pranarei.de.

Last updated June 2026.