Privacy Policy
Effective September 16, 2026
This Privacy Policy explains what information LawnSync collects, how we use it, and the choices you have.
1. Information we collect
- Account info: email address, name, and password (stored as a one-way hash — we never store or can retrieve your actual password). If you use Google Sign-In, we receive your name and email from Google.
- Lawn profile: postal/zip code, grass type, lawn size, and condition, used to generate your care calendar.
- Photos: lawn photos you submit for AI diagnosis, and any photos you post to Community.
- Community content: posts, comments, and reports you submit.
- Job requests, quotes and messages: if you use the job marketplace, the photos, suburb, street address and notes you add to a quote request, quotes from providers, and the messages and photos you send in chats about a job. Providers only see your street address after you accept their quote. Phone numbers and email addresses are not shared between users.
- Provider interest: if you register your interest in becoming a lawn care provider, your suburb, postcode, the services you could offer, an optional note, and your consent to be contacted. You can remove this at any time in Settings.
- Push notification token: if you allow notifications, a token that identifies your device so we can alert you to new quotes and messages.
- Notification preferences: your chosen reminder frequency, day, and time.
2. How we use your information
We use your information to generate and personalize your lawn-care plan, run the AI photo diagnosis feature, operate Community, send the reminders you've opted into, and keep the service secure (e.g. rate-limiting abuse).
3. Sharing with service providers
We share information with the following categories of service providers, only as needed to run the app:
- OpenAI — lawn photos and relevant profile context (grass type, season, region) are sent to OpenAI to generate your diagnosis; community post/comment text and chat messages are sent to OpenAI's moderation system before publishing or sending.
- Expo — if you allow notifications, your device's push token and the notification text are sent through Expo's push notification service, and on to Apple, to deliver alerts.
- Cloud hosting and storage — our backend and community photos are hosted with third-party infrastructure providers (Fly.io and Tigris) who process data on our behalf.
- Google — if you use Google Sign-In, Google shares your basic profile info with us as part of that sign-in flow.
We don't sell your personal information.
4. Cross-border data transfer (Australian users)
If you're in Australia: the service providers above are located overseas, primarily in the United States. This means your information may be processed and stored outside Australia. By using LawnSync, you consent to this cross-border disclosure as permitted under Australian Privacy Principle 8.
5. Data retention and deletion
We keep your information for as long as your account is active. You can permanently delete your account at any time from Settings → Delete Account — this immediately and permanently removes your profile, lawn plan, community posts, comments, and associated photos from our systems. It also removes your open quote requests and quotes, your notification history and push token, and erases the text and photos of messages you sent.
Two things are kept after you delete your account. First, if you took part in a booking, we keep an anonymised record of that booking and its payment (without your name or contact details) for as long as the law requires us to keep financial records. Second, to stop free AI analyses being claimed repeatedly by recreating accounts, we keep a one-way hash of your sign-in identity (an Apple or Google account identifier, or your email address) together with a count and the dates of your AI analyses. The hash can't be turned back into your identity, and we use it for nothing else.
6. Your rights
You can access and correct your account information within the app. Australian users have rights under the Australian Privacy Principles (including access and correction rights under APPs 12 and 13); users elsewhere have equivalent rights under applicable local law. To exercise these rights beyond what's available in-app, contact us at the email below.
7. Children's privacy
LawnSync isn't directed at children, and we don't knowingly collect information from anyone under 16.
8. Changes to this policy
We may update this policy from time to time; material changes will be reflected by updating the effective date above.
9. Contact
Questions about this policy, or a privacy complaint? Email support@lawnsync.net.
This document reflects what LawnSync actually does today (including real third-party data sharing with OpenAI and cross-border hosting) — it should be reviewed by a lawyer familiar with the Privacy Act 1988 / Australian Privacy Principles before a public launch in Australia.