App Privacy Policy

Last updated October 13, 2026

Farm::Local is a product of Project Almanac Inc. ("we", "us"). This policy covers the Farm::Local iOS app, Android app and web app (together, "the app"). It explains what we collect, why, who we share it with, and the choices you have. Our website, farmlocal.life, has its own website privacy policy.

What we collect from everyone

Account details: your name, email, phone number and address.
Sign-in: your email and password, or your Google or Facebook account if you sign in with one of them. We get your name, email and profile photo from Google or Facebook, but never your password.
Location: your device location, if you allow it, and the address you save. We use these to show farms and markets near you. You can turn device location off at any time.
Orders: the items you buy, your pickup location and time, your order history, and any cancellations and refunds.
CSA subscriptions: the package you choose, how often it comes, and your delivery address if the farm delivers.
Messages you send to other users in the app.
Reviews and ratings you leave.
Device information: device type, operating system, app version, and a push notification token.
Usage and crash data: see Analytics and crash reports below.

What we collect from sellers

Farm or business name, contact details, farm profile, photos and tags.
Listings, stock, prices, pickup locations and pickup schedules.
Farm updates and posts.
Payout setup: sellers are paid through Stripe Connect. Your identity documents and bank details go directly to Stripe, not to us. We receive only your payout status and limited account information from Stripe.

What we collect from market managers

Market profile, market days and schedule, and booth maps.
Vendor applications, member lists, vendor fees and invoices.

Payments

Card payments are processed by Stripe. We never see or store your full card number. If you save a card, Stripe stores it. Stripe's handling of your information is described in the Stripe Privacy Policy.

How we use it

To run your account, process orders and arrange pickup.
To show farms and markets near you.
To send order updates, pickup reminders and messages by push notification, email or text message. Text messages are sent only if you opt in. Message and data rates may apply, and you can reply STOP at any time to stop them.
To pay sellers.
To prevent fraud and abuse, and to enforce bans.
To fix bugs and improve the app.
To send product emails, which you can unsubscribe from at any time.

We do not sell your personal information.

Who can see what

When you place an order, the seller sees your name and the order details, including pickup location and time, and your delivery address if the farm delivers.
Seller and market profiles, listings, posts and reviews are public.
Reviews show the reviewer's name as it appears on their profile.
Messages are visible only to the people in the conversation.

Service providers we share data with

We share information only with providers that help us run the app, and only as they need it:

Firebase and Google Cloud: accounts, database, file storage, push notifications, crash reporting (Crashlytics) and app integrity checks (App Check).
Stripe: payments and seller payouts.
Mapbox: maps.
Typesense: search.
PostHog: usage analytics.
Sentry: error reporting.
Google and Facebook: only if you sign in with them. We use what they give us only to sign you in and fill in your profile, and we never sell it or use it for advertising.
Our email provider: order and account emails.

We may also share information if the law requires it, or to protect our rights and the safety of others. If Project Almanac is ever involved in a merger or sale, your information may transfer as part of that.

Device permissions

Location: to show nearby farms and markets.
Notifications: for order and pickup updates and messages.
Photos and camera: for listing and profile photos.

Each permission is optional. You can change it at any time in your device settings. The app still works without them, although some features will be limited.

Analytics and crash reports

PostHog records how the app is used, such as screens viewed and buttons tapped, along with device and app version. We do not record your screen or sessions.
Crashlytics and Sentry receive crash and error reports, which include device details, app version and what the app was doing when the problem happened.
On the web app, we use browser storage to keep you signed in and to remember your preferences and cart.

How long we keep it

Account data: until you delete your account.
Order and payment records: kept for 4 years after the order, for taxes, accounting and disputes, even if you delete your account.
Messages and reviews: when you delete your account, your reviews are removed. Messages you sent stay visible to the other people in the conversation, but your name is removed.

Deleting your account

You can delete your account in the app under Settings → Delete account. Without the app, email support@farmlocal.life from the address on your account and ask us to delete it. We delete your profile, saved addresses, saved location, push tokens and reviews. We keep order and payment records for the period above, because the law and our payment processors require it. Sellers with pending payouts or open orders may need to resolve those first.

If you signed in with Google or Facebook, deleting your Farm::Local account also deletes the name, email and profile photo we received from them. You can also remove Farm::Local's access from your Facebook settings under Settings & privacy → Apps and websites, or from your Google account under Security → Third-party connections. That stops them sharing anything new with us, but it does not delete your Farm::Local account, so use one of the options above as well.

Your choices and rights

You can ask to see, correct, export or delete the personal information we hold about you.
You can turn off product emails with the unsubscribe link, and turn off push notifications and location in your device settings.

To make a request, email support@farmlocal.life. We may need to confirm your identity first. We will respond within 30 days. We will not treat you differently for using any of your rights.

State privacy rights

If you live in California, Virginia, Colorado, Connecticut, Texas, Oregon or another state with a consumer privacy law, you have the right to:

Know what personal information we collect, use and disclose, and get a copy of it.
Correct inaccurate information.
Delete your information, subject to the exceptions in How long we keep it.
Opt out of the sale of your information, of sharing it for targeted advertising, and of profiling. We do none of these.
Appeal if we turn down your request. Reply to our decision with the word "Appeal" and we will respond within 45 days. If you are not satisfied, you can contact your state attorney general.

You can make a request yourself or through an authorized agent. We will ask an agent for proof that you gave them permission.

Opt-out signals. Because we do not sell your information or share it for advertising, there is nothing for an opt-out signal to stop. We still treat a Global Privacy Control signal from your browser as a request to opt out.

California notice

In the past 12 months we have collected these categories of personal information:

Identifiers: name, email, phone number, address, account ID and device identifiers. From you and your device.
Commercial information: orders, CSA subscriptions, refunds and payout status. From you, sellers and Stripe.
Internet and device activity: app usage, crash reports and device details. From your device.
Precise geolocation: device location, if you allow it. From your device.
Audio, visual and similar: photos you upload. From you.
Professional information: farm, business or market details, for sellers and market managers. From you.
Account login: your email and password, which we store encrypted.

We use these for the purposes in How we use it, share them only with the providers listed above, and keep them for the periods in How long we keep it. We have not sold or shared any of them for targeted advertising.

Precise geolocation and account login are "sensitive personal information" under California law. We use them only to provide the app, for example to show nearby farms and to sign you in, and not to infer anything about you. Because of that, California law does not require a "limit the use of my sensitive personal information" option, but you can turn off location at any time in your device settings.

Where your data is stored

Farm::Local is run from the United States, and your information is stored and processed in the United States.

Links to other sites

The app links to other services, such as Stripe and seller websites. Their own privacy policies apply to what you share with them, and we are not responsible for their practices.

Security

We use reasonable technical and organizational measures to protect your information. No system is perfectly secure, so we cannot guarantee absolute security.

Children

The app is not for children under 13, and we do not knowingly collect information from them. You must be at least 18 to buy or sell through the app. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top. If the changes are significant, we will tell you in the app or by email before they take effect.

Contact us

Project Almanac Inc.
support@farmlocal.life
(518) 285-0608