Privacy Policy

1. Who we are

This Privacy Policy explains how Knoodlepot Studio (sole trader) collects, uses, and protects your personal data when you use Greenman.

Data controller: Knoodlepot Studio (sole trader)
Email: knoodlepot@knoodlepotstudio.com
ICO registration: ZC143302 — verify here

2. Your rights under UK GDPR

You have the following rights regarding your personal data. Email us at knoodlepot@knoodlepotstudio.com to exercise any of them. We will respond within one calendar month.

• Access — ask for a copy of any personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data.
• Restriction — ask us to stop processing your data in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Complaint to the ICO — if you are not satisfied with our response: ico.org.uk/make-a-complaint or 0303 123 1113.

3. The plain-English summary

Greenman does not require an account. The app stores your settings and preferences locally on your device only. When you use the Cunning tier AI features, your question is sent to our backend proxy service (Google Cloud Run), which calls the Anthropic Claude AI — your question reaches the proxy but Anthropic only sees the proxy's server IP, not your device. Purchases are managed by RevenueCat.

4. What information we collect directly

We collect very little information:

• Local preferences — your disclaimer acceptance, tier status, and any in-app settings are saved using local on-device storage (AsyncStorage). This data never leaves your device and we cannot access it.
• AI queries (Cunning tier) — questions you send to the Ask the Hedgewitch and other Cunning AI features are transmitted to our backend proxy service. See section 6.
• Support correspondence — if you email us, we keep the message so we can respond and follow up.

We do not collect your name, email address, location, phone number, contacts, or any other personal information. No account is required to use the app.

5. Hosting — Vercel

This privacy policy page is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you visit it, Vercel records your IP address, browser type, page requested, and a timestamp in standard server logs (retained approximately 30 days). Legal basis: legitimate interests (Article 6(1)(f) UK GDPR). Vercel Privacy Policy

6. AI features — backend proxy and Anthropic (Claude)

The Cunning tier includes AI features (Ask the Hedgewitch, Ritual Builder, Plant Recognition, and others). When you use these features, your question and any relevant context are sent from your device to our backend proxy service, hosted on Google Cloud Run (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Our backend proxy receives:

• The text of your question
• Any context selected by the app to help answer it (reference content from the app)
• Your device's IP address (as part of the standard HTTP request)

The proxy then forwards the question and context to Anthropic, PBC (548 Market Street, PMB 90375, San Francisco, CA 94104, USA) for processing by the Claude AI model. Anthropic receives the question content only — it does not receive your IP address or any personal information. The call to Anthropic originates from our server, not from your device.

Under Anthropic's Commercial Terms, API inputs and outputs are retained for a maximum of 7 days for trust and safety purposes, then automatically deleted. Anthropic does not use API content to train their models.

Legal basis: performance of a contract (Article 6(1)(b)) — you have purchased Cunning tier access to use these features.

Anthropic Privacy Policy · Google Cloud Privacy Notice

7. Subscriptions and payments — RevenueCat

We use RevenueCat, Inc. (1032 E Brandon Blvd #3003, Brandon, FL 33511, USA) to manage subscriptions and one-off purchases, and to verify entitlements. RevenueCat receives an anonymous App User ID (a random identifier generated on your device, not linked to your name or email), your purchase and subscription history, your locale and currency code, and standard HTTP metadata.

Greenman offers two paid tiers: a one-off Hedgewalker unlock and a monthly Cunning subscription. Both are processed by Google Play and verified by RevenueCat. Legal basis: performance of a contract (Article 6(1)(b)) and legitimate interests (Article 6(1)(f)) for fraud prevention. RevenueCat Privacy Policy

8. Distribution — Google Play

This app is distributed through Google Play (Google LLC). When you download, install, or purchase the app, Google processes information about that transaction under its own privacy policy. Google Privacy Policy

9. The Trail — map links

The Trail section provides GPS coordinates for publicly documented sacred sites across Britain. Tapping the "Get directions" button opens your device's native maps application with those coordinates. No location data is collected or stored by Greenman; the handoff is handled entirely by your device's operating system.

10. Data we never collect or use

We do not sell, rent, or trade your personal data. We do not require an account. We do not use your data for advertising or profiling. We do not use any advertising SDKs. We do not track you across other apps or websites.

11. International transfers

Several services above process data in the United States. For each transfer we rely on Standard Contractual Clauses and/or the UK-US Data Privacy Framework where applicable. You can request details by emailing knoodlepot@knoodlepotstudio.com.

12. How long we keep your data

• Local preferences — stored on your device; cleared when you uninstall the app.
• Purchase records (RevenueCat) — lifetime of your RevenueCat account plus 6 years for legal and tax purposes.
• AI query logs (Anthropic) — up to 7 days.
• Backend proxy logs (Google Cloud Run) — standard Google Cloud logging retention, typically up to 30 days.
• Vercel logs — approximately 30 days.
• Support correspondence — 2 years from last contact.

Knoodlepot Studio holds no personal data about you on its own servers beyond support emails. For purchase data held by RevenueCat or Google, contact them directly.

13. Security

We use industry-standard measures including encryption in transit (TLS). The app requires no account, and the only personal data that reaches our backend is your IP address, which is not stored beyond standard server log retention. In the unlikely event of a breach, we will notify the ICO within 72 hours as required by UK GDPR.

14. Age restriction

This app is for users aged 18 and over. The app displays an age gate on first launch. If you indicate you are under 18, the app will not operate. We do not knowingly collect any data from anyone under 18.

15. Changes to this policy

We may update this policy from time to time. If a change materially expands what data leaves your device or who it is shared with, we will notify you in the app before it takes effect. The "Last updated" date at the top shows when it last changed.

16. Contact and complaints

For any privacy question or request:

Knoodlepot Studio
knoodlepot@knoodlepotstudio.com

If you are not satisfied with our response, you may complain to the ICO:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
ico.org.uk/make-a-complaint · 0303 123 1113

ICO registration: ZC143302