Privacy Policy
Effective September 16, 2026
This Privacy Policy explains what information LawnSync collects, how we use it, and the choices you have.
1. Information we collect
- Account info: email address, name, and password (stored as a one-way hash — we never store or can retrieve your actual password). If you use Google Sign-In, we receive your name and email from Google.
- Lawn profile: postal/zip code, grass type, lawn size, and condition, used to generate your care calendar.
- Ratings: after a completed and paid job, the customer can rate the provider from 1 to 5 stars with an optional comment. The rating, comment, the customer's first name and the date are shown to other users on the provider's profile. Genuine reviews are kept if the customer deletes their account (shown as "Deleted user") and removed only if they break our content rules.
- Lawn plan backup: your care calendar progress (tasks done or skipped), reminder preferences, and the text of your AI diagnosis results are saved to your account so you can get them back on a new phone or after reinstalling. Photos stay on your phone and are not included.
- Photos: lawn photos you submit for AI diagnosis, and any photos you post to Community.
- Community content: posts, comments, and reports you submit.
- Job requests, quotes and messages: if you use the job marketplace, the photos, suburb, street address and notes you add to a quote request, quotes from providers, and the messages and photos you send in chats about a job. Providers only see your street address after you accept their quote. Phone numbers and email addresses are not shared between users.
- Provider interest: if you register your interest in becoming a lawn care provider, your suburb, postcode, the services you could offer, an optional note, and your consent to be contacted. You can remove this at any time in Settings.
- Push notification token: if you allow notifications, a token that identifies your device so we can alert you to new quotes and messages.
- Payments: when you pay for a job, your card details are collected and processed by Stripe, not by us. We never see or store your card number. We keep a record of each payment (the job, amount, date and status). Providers who want to be paid give their identity, business and bank details directly to Stripe (Stripe Connect); we only receive whether their payment setup is complete.
- Subscriptions: if you buy a Basic or Pro plan, Apple handles the payment, and RevenueCat tells us which plan is active for your account.
- App diagnostics: if the app crashes or runs slowly, technical details (the device model, app version and what went wrong) are sent to Sentry. These reports are not linked to your name or email.
- Promotions and vouchers: if you use a promo code or buy a gift voucher, we record the code, when it was used and, for a voucher, the buyer's and recipient's email addresses so we can deliver and support it.
- Notification preferences: your chosen reminder frequency, day, and time.
- Email sign-up: if you sign up for emails on our website, your email address, when you agreed and when you confirmed. We only email you after you confirm, every email has an unsubscribe link, and unsubscribing stops all further emails.
- Website analytics: on our website's home and support pages (not in the app), Google Analytics uses cookies to record how the site is used: pages visited, approximate location (city or region), device and browser type, and how you arrived. We use this to see which pages are useful. It isn't used to identify you. You can block it with your browser's cookie settings or Google's opt-out add-on (tools.google.com/dlpage/gaoptout).
2. How we use your information
We use your information to generate and personalize your lawn-care plan, run the AI photo diagnosis feature, operate Community, send the reminders you've opted into, and keep the service secure (e.g. rate-limiting abuse).
3. Sharing with service providers
We share information with the following categories of service providers, only as needed to run the app:
- OpenAI — lawn photos and relevant profile context (grass type, season, region) are sent to OpenAI to generate your diagnosis; community post/comment text and chat messages are sent to OpenAI's moderation system before publishing or sending.
- Expo — if you allow notifications, your device's push token and the notification text are sent through Expo's push notification service, and on to Apple, to deliver alerts.
- Cloud hosting and storage — our backend and community photos are hosted with third-party infrastructure providers (Fly.io and Tigris) who process data on our behalf.
- Google — if you use Google Sign-In, Google shares your basic profile info with us as part of that sign-in flow.
- Apple — if you use Sign in with Apple, Apple shares your name and email (or a private relay address) with us as part of that sign-in flow.
- Stripe — processes payments and pays providers, and verifies providers' identity and bank details. Stripe is responsible for the information you give it and has its own privacy policy.
- RevenueCat — records which subscription plan is active for your account (your account ID and your Apple purchase status).
- Sentry — receives crash and performance reports that are not linked to your name or email.
- Google Analytics — receives website usage information from our home and support pages, as described above.
- Email delivery — our email provider sends account, voucher and sign-up emails on our behalf.
We don't sell your personal information.
4. Cross-border data transfer (Australian users)
If you're in Australia: LawnSync's own servers and database are in Sydney, Australia, but most of the service providers above are located overseas, primarily in the United States. This means your information may be processed and stored outside Australia. By using LawnSync, you consent to this cross-border disclosure as permitted under Australian Privacy Principle 8.
5. Data retention and deletion
We keep your information for as long as your account is active. You can permanently delete your account at any time from Settings → Delete Account — this immediately and permanently removes your profile, lawn plan, community posts, comments, and associated photos from our systems. It also removes your open quote requests and quotes, your notification history and push token, and erases the text and photos of messages you sent.
Two things are kept after you delete your account. First, if you took part in a booking, we keep an anonymised record of that booking and its payment (without your name or contact details) for as long as the law requires us to keep financial records. Second, to stop free AI analyses being claimed repeatedly by recreating accounts, we keep a one-way hash of your sign-in identity (an Apple or Google account identifier, or your email address) together with a count and the dates of your AI analyses. The hash can't be turned back into your identity, and we use it for nothing else.
6. Your rights
You can access and correct your account information within the app. Australian users have rights under the Australian Privacy Principles (including access and correction rights under APPs 12 and 13); users elsewhere have equivalent rights under applicable local law. To exercise these rights beyond what's available in-app, contact us at the email below.
7. Children's privacy
LawnSync isn't directed at children, and we don't knowingly collect information from anyone under 16.
8. Changes to this policy
We may update this policy from time to time; material changes will be reflected by updating the effective date above.
9. Contact
Questions about this policy, or a privacy complaint? Email support@lawnsync.net.
This document reflects what LawnSync actually does today (including real third-party data sharing with OpenAI and cross-border hosting) — it should be reviewed by a lawyer familiar with the Privacy Act 1988 / Australian Privacy Principles before a public launch in Australia.