Information we collect

Account information you provide: email address and password (passwords are stored only as salted hashes by our authentication provider). Profile details you optionally add: name, job title, facility/course name, region, avatar and header images, and turf preferences. Agronomic data you enter: check-ins, applications (pesticide, PGR, fertilizer, topdressing), soil and OM246 reports, clipping/growth and playability records, journal notes, and course/green definitions. Photos you upload for AI diagnosis or community reports. Approximate site location (latitude/longitude) that you set, used to fetch local weather. Basic gameplay/usage events (e.g., points) tied to your account.

How we use your information

To provide the service: run weather and pest models, store your records, generate AI diagnoses and document extractions, and operate community and leaderboard features. To enforce plan limits and prevent abuse. To respond to feedback and support requests. We do not sell your personal information, and we do not use it for third-party advertising.

AI processing

When you use AI features, the photo or document you submit and limited context (such as your stated turf type and season) are sent to our AI provider (Anthropic) to generate a result. We do not send your name, email, or precise identity to the AI provider with these requests. See the in-app AI Disclaimer for limitations of AI output.

Service providers

We use Supabase (database, authentication, storage), Anthropic (AI), Open-Meteo (weather), map tile providers, and an email provider for transactional messages. These providers process data on our behalf under their own terms. Hosting is provided by Supabase and Vercel.

Data sharing & visibility

Most of your records are private to your account. Some content is shared by design: community reports and comments, your leaderboard display name and points, and your public profile fields. If you join a team, team members can see shared team content. You control what you post publicly.

Data retention

We keep your data while your account is active. You can delete individual records in the app at any time. When you delete your account, we delete your personal records and account; some content posted publicly (e.g., community reports) may be retained or anonymized.

Your rights (GDPR / CCPA)

Depending on where you live, you may have rights to access, export, correct, or delete your personal data, and to object to certain processing. You can export your data and delete your account from Account settings, or contact us at turfpath@gmail.com. We do not sell personal information.

Security

Data is encrypted in transit. Database access is restricted with row-level security so you can only access your own records. No system is perfectly secure; please use a strong, unique password.

Children

TurfPath is intended for turf-management professionals and is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.

Changes & contact

We may update this policy; material changes will be reflected by the date above. Questions or requests: turfpath@gmail.com.

This document is provided for transparency and may be updated. It is not legal advice.