Privacy

This is the privacy policy for the True to Farm application at truetofarm.com. True to Farm is a directory of farmers markets, farm stands, and CSA pickups, run by Tyler Spaulding. It says what we access, how we use it, who else handles it, how we protect it, and how long we keep it.

Google user data we access

If you choose Sign in with Google, True to Farm accesses this Google user data, and nothing else from your Google account:

• Your Google account email address
• Your name, if the Google account has one
• A Google account identifier

The scopes are openid, email, and profile. We do not access Gmail, Google Drive, Calendar, contacts, photos, or any other Google product. We do not receive or store your Google password.

How we use Google user data

We use that Google user data only to provide the sign-in you asked for: to create or match your True to Farm account and to keep you signed in. The same email is the same account. Profile shows that email so you can see which account is signed in.

We do not use Google user data for advertising, including targeted, personalized, interest-based, or retargeted ads. We do not sell it. We do not use it to determine credit-worthiness or for lending. We do not use it to build a database for anyone else. We do not use Google user data to develop, improve, or train artificial intelligence or machine learning models.

True to Farm's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. True to Farm does not use Google APIs for AI-generated non-consensual intimate imagery (AI NCII), or to generate images at all.

We do not publish a photo from the Google account. A review does not use the Google name on its own. Before the first review, we ask you for a first and last name. The public review shows the first name and the last initial only.

How we share Google user data

We do not sell, rent, or trade Google user data. We do not transfer or disclose it to third parties except to the providers that run the feature you asked for:

• Supabase stores the account, including the Google email, name, and account identifier, so you can stay signed in.
• Stripe receives the email on the account only if you start a membership, so Stripe can charge the subscription you requested. We do not send Stripe your Google account identifier.

We do not transfer Google user data to advertisers, data brokers, or information resellers. We do not transfer it so anyone can train a general machine-learning or artificial intelligence model.

How we protect Google user data

Sign-in and the account are sent over encrypted HTTPS. Supabase stores the account. Access to private records is limited by row-level security, so one signed-in person cannot read another person's journal, photos, or saved markets. We do not store your Google password.

How long we keep Google user data

We keep the Google email, name, and account identifier for as long as your True to Farm account exists, because that is what signs you in. We do not keep them for a separate marketing list. When you ask us to delete the account, we delete that Google user data with it. We do not retain Google user data after the account is deleted, unless the law requires a record, such as a payment record Stripe already holds.

There is no delete button in the app. Email tyler@truetofarm.com and ask. We delete the account, the Google user data stored with it, the journal notes and photos, and the saved markets. A public review is tied to the account. Say in that email if the review should come down too, and we will remove it.

Apple and email

Sign in with Apple works the same way. We receive the email Apple provides, including a private relay address if you chose one, and the name Apple provides. We use those only to run the account.

You can also sign in with a 6-digit code sent to your email. We keep that email address for the account. The code is sent by our email provider.

What the account is for

The account keeps your saved markets, journal, reviews, "Was it open?" answers, and reports with one person, so the same person can't file the same report twice. Profile shows the email so you can see which account is signed in.

Location

If you allow location, the phone sends that point to our server to list markets near you. A city or ZIP search is the same kind of lookup. We do not save that point on your account, and we do not keep a location history. Drawing the map sends the area on the screen to the map-tile service. That request is not tied to your account.

What other people can see

A market review is public. It shows your first name and last initial, the visit date, and what you wrote. There is no star average.

"Was it open?" is a yes or no for a market day. The public stamp does not show your name.

A market you add is public, and the listing can credit who added it first. A report about hours, a move, or a closure goes to the founder desk. It is not posted on the market.

The journal, its photos, and your saved list are private to the account. Journal photos are shown only to you, through a short-lived link. Location data is removed from the photo before it is stored.

A note you send from Profile is for the founder. It is not published.

Membership

Membership is optional. Stripe processes the payment. We store Stripe's customer id and whether the subscription is active, past due, or canceled. We do not store your card number. Canceling does not delete the saved list or the journal.

Members can keep saved markets, the journal, and nearby listings on the phone for use without a signal. That copy stays on the device.

Counts

We may count that the app was opened, and a few steps such as a first save or a membership checkout. Those counts do not use cookies, do not record the screen, and do not include journal text, your name, or a precise location. When a membership becomes active, we record that against the account id, not the email. The count service is PostHog, and only when that count is turned on.

True to Farm is not directed at children under 13.

Who handles this

Supabase stores the account, the directory, and the journal.

Stripe handles membership checkout.

Our email provider sends the sign-in code.

PostHog receives the counts above, when that count is turned on.

Google or Apple, if you use them to sign in.

The map-tile service, for the map on screen.

Changes

If this page changes, the date at the top changes with it.

Questions: tyler@truetofarm.com. The terms cover use of the site and membership.