Garden 1. Who we are
Garden of Dates (“Garden of Dates”, “we”, “us”) is a small, independent app made and run by Horia Tuvic Persoana Fizica Autorizata, a sole trader (PFA) registered in Romania. We are the data controller for the personal data described in this policy, which covers the Garden of Dates apps for iPhone and Android, and the web app and website at https://gardenofdates.com.
Questions, requests and complaints: horia.tuvic@gmail.com.
2. What we collect
| What | For example | Comes from |
|---|---|---|
| Account details | Your name, email address and, if you sign in with Google, the address of your Google profile picture. With Sign in with Apple you can hide your email: we then get a private relay address from Apple. | Google or Apple, when you sign in |
| Profile picture | A picture you choose to show the people in your gardens. | You |
| What you put in a garden | Garden names, lists, ideas and their notes, planned dates (day, time, place, notes), dice rolls (what was rolled and by whom), photos and when they were taken, and who added what. | You and the people in your gardens |
| Garden membership | Which gardens you're in, when you joined or left, when you last opened a garden, the colour you're shown in, and invite links (who sent them, for which garden, an optional note, and when they were used). | Created as you use Garden of Dates |
| Calendar details | When you put a date in Google Calendar: the event's ID and link, who created it, the email addresses invited to it, and whose reminders Garden of Dates has set. | Created as you use Garden of Dates |
| Purchases | Whether you have Garden of Dates Plus, which product it is, and when we last checked. We never see your card or payment details. | Apple or Google, through RevenueCat |
| Messages to us | Your email address and what you write. | You |
| Technical data | Like every online service, our servers receive your IP address and basic device and browser information when the app talks to them, and keep it briefly in security logs. | Your device |
We don't collect your contacts, your location, your other calendar events or advertising IDs.
About photos: before a photo is uploaded, your phone shrinks it, which also removes hidden metadata such as where it was taken. If your device can't shrink a particular photo (some HEIC images in some browsers), it's uploaded as it is, with whatever metadata it contains.
3. Why we use it, and on what legal basis
| Why | Legal basis (GDPR) |
|---|---|
| Running Garden of Dates for you: your account, your gardens, lists, plans, dice and photos, and sharing them with the people in your gardens. | Performing our contract with you (Art. 6(1)(b)) |
| Putting dates in Google Calendar, changing and removing them, when you ask Garden of Dates to. | Performing our contract with you: it's a feature you choose to use, and you can stop at any time |
| Garden of Dates Plus: checking and restoring your purchase, and sharing Plus with your gardens. | Performing our contract with you |
| Keeping Garden of Dates safe and working: preventing abuse, investigating errors, security logs. | Our legitimate interest in a secure, reliable service (Art. 6(1)(f)) |
| Answering your messages. | Performing our contract with you, or our legitimate interest in helping you |
| Meeting legal obligations, for example answering a lawful request from an authority. | Legal obligation (Art. 6(1)(c)) |
We don't use your data for advertising, profiling or automated decisions, and we don't use it to train AI models.
4. Google user data
If you choose to put a date in your Google Calendar, Garden of Dates asks Google for permission to manage the events it
creates (https://www.googleapis.com/auth/calendar.events). Garden of Dates uses this permission only to
create an event for a date you planned, invite the other people in your garden to it, update that event if you
change the plans, remove it if you cancel the date, and, when you ask, set your own reminders on the event for a date
in your garden that you were invited to. Garden of Dates does not read, list, analyse or change any other events in
your calendar.
The access token Google gives the app stays on your device for up to an hour and is never stored on our servers or shared with anyone. Garden of Dates saves the event's ID and link with the date, so the event can be updated or removed later.
When you sign in with Google, Garden of Dates receives your name, email address and profile picture address, and uses them only to identify you in the app and to show the people in your gardens who added what.
Garden of Dates’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Garden of Dates’ access at any time at myaccount.google.com/permissions.
5. Who can see your data
Everything in a garden (its lists, ideas, plans and photos, and the name, email address, profile picture and colour of each person in it) is visible to the people in that garden: you, and whoever you or they invited with an invite link. Security rules on our servers enforce this. Anyone in a garden can change or delete what's in it, so invite people you trust.
- When you put a date in Google Calendar and invite your garden, Google emails them a calendar invitation.
- If you buy Garden of Dates Plus, the people in your gardens can see that the garden has Plus thanks to you.
- We can technically access the database to keep Garden of Dates running, for example to fix a problem or to handle a request you sent us. We don't look at your content otherwise.
We don't sell, rent or share your personal data with anyone else, unless the law requires it (for example, a valid court order).
6. Service providers
Garden of Dates runs on a few trusted services that process data on our behalf, under data processing terms:
- Google Firebase and Google Cloud (Google): sign-in, database, photo storage, server functions and website hosting.
- RevenueCat (RevenueCat, Inc., USA): checks Garden of Dates Plus purchases with the App Store and Google Play. It receives your Garden of Dates account ID and purchase details, never your name, email or content.
These services act on their own terms and privacy policies when you use them:
- Google (Sign in with Google, Google Calendar) and Apple (Sign in with Apple).
- Apple App Store and Google Play, which sell Garden of Dates Plus and handle the payment.
7. Where your data is stored
Data in Garden of Dates is stored with Google Cloud, and our server functions run in Belgium (EU). Depending on the service, Google, RevenueCat, Apple and Google Play may also process data in other countries, including the United States. Whenever data leaves the EU/EEA, it's protected by the European Commission's Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework.
8. How long we keep it
- Your account and what you add: until you delete it, or delete your account.
- When you leave a garden, or are taken out of it: what you added stays for the people still in it, and they keep seeing your name next to it. Deleting your account removes your name and picture from every garden.
- Deleted things disappear from our database straight away. Copies kept for offline use on the devices of the people in your garden are cleared the next time they open Garden of Dates.
- Security logs: up to 30 days.
- Purchases: your record at RevenueCat is deleted with your account. Apple and Google keep their own records of what you bought, under their policies.
- Emails to us: as long as we need them to help you, then deleted.
9. Your choices and rights
You can see, change and delete most of your data yourself in the app. Under data protection law, including the GDPR, you also have the right to:
- get a copy of your data (we'll send it in a common format, such as JSON);
- have it corrected or deleted;
- restrict or object to how we use it;
- receive it in a portable format, or have it sent to someone else;
- withdraw any consent you gave, at any time.
To use any of these rights, email horia.tuvic@gmail.com from the address you use with Garden of Dates. We'll answer within one month. You also have the right to complain to a data protection authority, in particular the one where you live or work. In Romania, that's the ANSPDCP (dataprotection.ro).
10. Deleting your account
In the app: Home → Settings & account → You → Delete account (it works in the web app too). This deletes your account, takes you out of every garden, and permanently deletes gardens where you were the only person, with all their lists, plans and photos, and your profile picture. In gardens you share with others, the ideas, plans and photos you added stay for them, without your name. Your purchase record at RevenueCat is deleted too. Can't sign in any more? See how to ask us to delete it.
11. Cookies and storage on your device
Garden of Dates doesn't use advertising or analytics cookies and doesn't track you across apps or websites. To work, it keeps a few things on your device:
- your sign-in session;
- an offline copy of your gardens, so they open instantly and work with a bad connection;
- a few preferences, like the last garden you opened and the lists you leave out of the dice;
- in the web app, the app's own files and recently viewed photos, so it loads quickly.
These are strictly necessary for the service you asked for, so they don't need a consent banner. Signing out ends your session; you can clear the rest in your browser or phone settings. Our fonts are served from our own website, so loading a page doesn't send your IP address to a font service.
12. Security
Data is encrypted in transit (HTTPS) and at rest by Google Cloud, and who can open each garden is checked by security rules on our servers. No system is perfect: if something ever goes wrong that affects your data, we'll tell you, and the authorities, as the law requires.
13. Children
Garden of Dates isn't meant for children: you must be at least 16 to create an account. If you think a child has given us personal data, tell us and we'll delete it.
14. Changes to this policy
If we change this policy, we'll post the new version here with a new date. If the changes matter, we'll also let you know before they take effect, for example in the app.
15. Contact
Horia Tuvic Persoana Fizica Autorizata, Garden of Dates · horia.tuvic@gmail.com