VeggieJournal – Privacy Policy

Version 1
Effective Date: 1st June 2026

This Privacy Policy explains how Mind’s Eye Design Ltd (“we”, “us”, “our”) collects, uses, shares, and protects your personal data when you use the VeggieJournal web application (“VeggieJournal”, “app”, “App”) and the website at https://veggiejournal.app (“the Website”).

We are committed to treating your information fairly, lawfully, and transparently, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you do not agree with this Privacy Policy, you should not use VeggieJournal.

1. Who we are and how to contact us

Data controller:
Mind’s Eye Design Ltd
Company number: 04587959
Registered office: 4 Further Field, Staplehurst, Tonbridge, Kent, TN12 0SX

Contact for privacy matters:
Email: support@veggiejournal.app

When we say “personal data” in this Policy, we mean any information that can identify you directly or indirectly.

2. Scope – when this Policy applies

This Privacy Policy applies when you:

• visit or browse https://veggiejournal.app;
• create and use a VeggieJournal account;
• use the VeggieJournal web app through a browser;
• contact us by email or via support channels;
• receive emails or updates from us (including marketing, if you opt in).

It does not cover:

• third-party websites or services you access via links from VeggieJournal; or
• third-party platforms such as Stripe, which have their own privacy policies.

3. Minimum age

VeggieJournal is intended only for users who are 16 years of age or older.

• You must not use VeggieJournal if you are under 16.
• You must not allow children under 16 to use your account.

If we become aware that we have collected personal data from someone under 16, we will delete it.

If you believe a child under 16 has used VeggieJournal, please contact us at support@veggiejournal.app.

4. What data we collect

We collect and process different types of data, depending on how you use VeggieJournal.

4.1 Account and contact data

When you create an account or contact us, we may collect:

• Name or display name;
• Email address;
• Password (stored in encrypted form; we never see your plain-text password);
• Account tier (Free, Seedling, Harvest, Abundance, or similar);
• Communication preferences (e.g. marketing opt-in / opt-out);
• Any information you choose to include in messages sent to us.

4.2 Subscription and billing data

We use Stripe to process subscription payments. Through Stripe, we may receive:

• Your name and email address;
• Billing address (if required by Stripe);
• The last 4 digits and card type (for reference only);
• Payment status and history (e.g. successful or failed payments, refunds);
• Subscription plan details and renewal dates. 

We do not store or process full card numbers or security codes. This information is handled by Stripe as your payment provider.

4.3 Your Content

VeggieJournal is a journaling platform for people who grow their own vegetables, fruit, herbs and flowers. When you use the app, you may create or upload content such as:

• notes, journal entries and comments;
• images and photos (e.g. your garden, plants, layouts);
• seed lists, planting plans and harvest records;
• reminders, tags, categories, or other metadata you create.

We refer to this as “Your Content” in the Terms of Use.

By its nature, Your Content may occasionally include personal data (for example, if you mention someone’s name in a note, or upload photos with identifiable people). You are responsible for what you choose to include.

By default, Your Content is private to you inside your account. It is not published publicly, not indexed by search engines through VeggieJournal, and not visible to other users unless you choose to share or export it (for example, using any future sharing features described in our Terms of Use).

We do not use the content of your journal entries for advertising, and we do not sell your journal data to third parties.

We will only access Your Content if you ask us for support, if we need to investigate a legal issue, or if we are required to do so by law.

4.4 Technical and usage data

When you use VeggieJournal, we may automatically collect:

• IP address;
• Browser type and version (e.g. Chrome, Safari);
• Device type (desktop, tablet, mobile);
• Operating system;
• Time zone, language and approximate region;
• Pages or screens viewed, actions taken in the app (e.g. login, create entry);
• Date and time of access;
• Error logs and diagnostic information.

We use this information to:

• keep the Service secure and reliable;
• troubleshoot issues;
• understand how VeggieJournal is used and improve it;
• protect against fraud, abuse and misuse.

4.5 Cookies and similar technologies

We use cookies and similar technologies on the Website and within the App to:

• keep you logged in;
• remember your preferences;
• understand usage patterns and improve the Service;
• (if enabled) support analytics or marketing.

Details of the cookies we use and how you can manage them will be set out in our Cookie Policy or within this Privacy Policy when updated.

4.6 Marketing and communication preferences

If you opt in to receive marketing or updates, we store:

• your marketing preferences; and
• records of emails sent, opened, and click-throughs (where supported by our email provider).

You can change your preferences or unsubscribe at any time.

5. How we use your personal data (purposes and lawful bases)

We must have a lawful basis under UK GDPR for each way in which we use your personal data. Below is a summary of how and why we process it.

5.1 To provide and operate VeggieJournal

• Creating and managing your account;
• Authenticating you when you log in;
• Storing and displaying Your Content;
• Offering features according to your subscription tier;
• Maintaining and improving the Service.

Lawful basis:

• Performance of a contract (providing the Service you signed up for);
• Legitimate interests (for improving and securing VeggieJournal).

5.2 To process payments and manage subscriptions

• Handling subscription sign-ups, renewals and cancellations via Stripe;
• Keeping records of payment status, plan changes and billing history;
• Sending payment-related emails (e.g. receipts, expiry, failed payments).

Lawful basis:

• Performance of a contract (charging you for a paid plan you subscribed to);
• Legal obligation (keeping certain financial and tax records).

5.3 To communicate with you

• Responding to your queries and support requests;
• Sending service messages (e.g. changes to Terms, maintenance notifications);
• Sending security alerts (e.g. password reset, suspicious activity notifications).

Lawful basis:

• Performance of a contract;
• Legitimate interests (for effective communication and security).

5.4 To send you marketing (only if you consent)

• Sending news, tips, feature updates, or offers related to VeggieJournal;
• Tailoring marketing based on your interests (e.g. account tier, usage).

We will only send you marketing emails if you have opted in. You can withdraw your consent at any time, for example by clicking “unsubscribe” in an email or updating your settings.

Lawful basis:

• Consent

5.5 To maintain security and prevent abuse

• Monitoring for suspicious logins or unusual behaviour;
• Investigating possible breaches of our Terms of Use;
• Protecting VeggieJournal, our users and our infrastructure.

Lawful basis:

• Legitimate interests (ensuring the security and proper functioning of the Service);
• Legal obligation (complying with applicable laws and assisting law enforcement where required).

5.6 To analyse and improve VeggieJournal

• Understanding how users interact with the app;
• Identifying popular features and areas for improvement;
• Testing new features or layouts (for example, A/B testing).

Where possible, we use aggregated or anonymised data that does not identify you.

Lawful basis:

• Legitimate interests (to develop and improve VeggieJournal).

5.7 To comply with legal obligations

We may process your personal data to:

• meet tax, accounting or reporting requirements;
• respond to lawful requests from authorities;
• enforce our legal rights or defend legal claims.

Lawful basis:

• Legal obligation;
• Legitimate interests (defending and enforcing our rights).

6. AI-generated content and automated processing

VeggieJournal may use automated systems, including AI-powered components, to provide:

• gardening suggestions or prompts;
• descriptions, summaries or helpful text;
• content or layout suggestions within the app.

6.1 Not professional advice

As set out in the Terms of Use:

• AI-generated content is for general information only;
• it is not tailored to your specific circumstances;
• it is not a substitute for professional horticultural, medical, financial, or legal advice.

You remain responsible for any decisions you make based on information in the app.

6.2 Use of Your Content with AI systems

We may use Your Content in limited ways to:

• provide features you request (e.g. generating summaries of Your Content);
• display it within your account or exports you choose to create.

We do not use Your Content to train our own internal AI models.

However, if we use third-party AI tools as processors, Your Content may pass through those tools for the purpose of providing features, under our instructions and contracts.

6.3 Automated decision-making

We do not carry out automated decision-making that produces legal or similarly significant effects about you (such as automated credit decisions).

7. How we share your personal data

We do not sell your personal data to third parties, and we do not share your personal data with third parties for their own independent marketing purposes.

Any third-party service providers we use (for example, hosting, analytics or email services) may only use your personal data to provide services to us and must not use it for their own unrelated purposes.

We may share your data with:

7.1 Service providers (processors)

We use trusted third-party providers to help deliver VeggieJournal, for example:

• Hosting and infrastructure providers – for running the web app and storing data;
• Platform / backend providers – for operating the app on a managed platform;
• Payment processor (Stripe) – for processing payments and managing subscriptions;
• Email delivery services – for sending system and support emails;
• Analytics / logging tools – for monitoring performance and errors;
• Customer support tools – if we later introduce support ticketing.

Legal requirements and law enforcement

We may need to access, preserve and disclose your personal data if we believe it is reasonably necessary to:

• comply with applicable laws, regulations, court orders or other valid legal processes;
• respond to lawful requests from law enforcement or other public authorities;
• enforce our Terms of Use and other agreements;
• protect the rights, property or safety of Mind’s Eye Design Ltd, our users or the public.

Where we receive a request for information, we will only disclose what we reasonably believe is necessary and will challenge requests that we consider to be unclear, overly broad or unlawful, where we are legally able to do so.

These providers are only allowed to use your data to provide services to us, under our instructions and subject to appropriate safeguards.

7.2 Professional advisers

We may share limited personal data with:

• accountants, auditors, or lawyers;
• insurers or other professional advisers;

…but only where necessary for advice, compliance, or legal claims.

7.3 Legal and regulatory authorities

We may disclose your personal data if we believe it is reasonably necessary to:

• comply with a law, regulation or court order;
• respond to a lawful request from a public authority;
• enforce our agreements or protect our rights;
• protect the safety of VeggieJournal users or the public.

7.4 Business transfers

If we sell, merge, or reorganise our business, your personal data may be transferred to a new owner as part of that process. We will ensure that any new owner respects this Privacy Policy (or an equivalent standard) in relation to your data.

7.5 CMS and Server Logging

The VeggieJournal Website is built using a Content Management System (“CMS”) , which we manage via a web-hosting company in the UK. When you visit the Website, our web server and CMS software may automatically process certain technical data, including:

• IP address;
• browser type and version;
• device type and operating system;
• referring URLs;
• pages visited and time spent on the Website;
• error logs and diagnostic information.

This information is used for security, performance, diagnostics, and to ensure the proper functioning of the Website. Server logs are managed by our hosting provider and may be stored temporarily for troubleshooting and security purposes.

We also use various CMS plugins and addons that may process personal data as part of delivering the Website. These may include:

• security plugins (e.g., firewalls or malware scanners);
• form plugins (e.g., contact forms);
• backup plugins (e.g., automated site backups);
• analytics or SEO plugins;
• performance or caching plugins;
• anti-spam or bot-protection plugins;
• email/newsletter integration plugins;
• cookie consent or privacy-related plugins.

These plugins act as data processors under our instruction, and each provider has its own privacy policy. Where plugins store or process personal data outside the UK (for example, in the USA), appropriate safeguards will be applied as required by UK GDPR.

7.6 Analytics services

We may use analytics services to help us understand how visitors use the Website. These tools may collect information such as:

• IP address (with anonymisation enabled where possible);
• browser type and device characteristics;
• pages visited and time spent on them;
• links clicked and actions taken on the Website;
• approximate geographic region (not precise location).

Analytics tools may use cookies or similar technologies. Where required by law, we will only activate analytics cookies if you have given consent through our cookie banner or settings.

These services may process data on servers outside the UK, including in the USA. Where this occurs, appropriate safeguards will be used, such as Standard Contractual Clauses (SCCs) or the UK IDTA.

7.7 Email newsletter services

If you subscribe to marketing or newsletter updates, we may use a third-party email provider to:

• store your email address and name;
• send newsletters, updates, or announcements;
• track whether emails were opened and links were clicked;
• manage subscriptions and preferences.

These providers act as data processors and only use your data to send communications on our behalf. They may process your data outside the UK, including in the USA. Where required, appropriate safeguards (such as SCCs or the UK IDTA) will be applied.

You can unsubscribe at any time by clicking the link in any marketing email or contacting us at support@veggiejournal.app.

8. International data transfers

VeggieJournal is operated from the United Kingdom. However, some of the third-party services we use to run the app (including hosting and infrastructure providers) may store or process personal data outside the UK, including in the United States.

For example, certain application data may be processed through platforms based in the United States, while some data (such as uploaded images) may be stored on infrastructure located in the UK or other regions.

Where personal data is transferred outside the UK, we take steps required by UK data protection law to ensure that appropriate safeguards are in place. These safeguards may include the use of approved contractual protections such as Standard Contractual Clauses (SCCs), or reliance on service providers that operate under recognised data protection frameworks.

These measures are designed to ensure that your personal data is handled securely and in line with UK data protection standards.

9. How long we keep your data (retention)

We keep your personal data only for as long as reasonably necessary for the purposes described in this Policy, including:

• Account data and Your Content: kept while your account is active. If you delete your account, we will delete or anonymise Your Content from our live systems within a reasonable period, subject to technical constraints and backup cycles.
• Backups: may retain copies of data for a limited period (for security and continuity) before being overwritten.
• Payment and billing records: typically kept for 6 years after the end of the relevant financial year, to comply with tax and accounting rules.
• Support communications: kept while your account is active and for a reasonable period afterwards, in case of follow-up or dispute.
• Marketing preferences: kept until you unsubscribe or we no longer need to send marketing.

We may keep some anonymised or aggregated information (which no longer identifies you) for analytics and service improvement.

10. How we protect your data (security)

We take reasonable technical and organisational measures to protect your personal data, including:

• using reputable hosting and infrastructure providers;
• encrypting data in transit (HTTPS);
• restricting access to personal data to authorised staff or contractors;
• enforcing secure password practices and account controls;
• monitoring for unusual or suspicious activity;
• regularly reviewing our systems and processes.

However, no online service can guarantee absolute security. You play an important role too by:

• keeping your password confidential;
• using unique passwords;
• logging out of shared devices;
• telling us promptly if you suspect unauthorised access.

11. Your data protection rights

Under UK data protection law, you have several rights in relation to your personal data. These include:

11.1 Right of access

You can ask us to confirm whether we process your personal data and request a copy of that data.

11.2 Right to rectification

You can request that we correct inaccurate or incomplete personal data. Most basic account information can be updated directly in your VeggieJournal account.

11.3 Right to erasure (“right to be forgotten”)

In certain circumstances, you can request that we delete your personal data. For example, where it is no longer needed for the purpose it was collected, or where you withdraw consent (where consent was the basis for processing).

11.4 Right to restrict processing

You can ask us to limit the use of your data in certain situations, for example while a complaint or accuracy check is being resolved.

11.5 Right to data portability

Where processing is based on consent or contract and carried out by automated means, you can request your personal data in a structured, commonly used and machine-readable format, and ask for it to be transferred to another provider where technically feasible.

11.6 Right to object

You can object to certain types of processing, including:

• direct marketing (you can always opt out);
• processing based on our legitimate interests, in some circumstances.

11.7 Right to withdraw consent

Where we rely on your consent (for example, for marketing emails or certain cookies), you can withdraw that consent at any time. This will not affect the lawfulness of any processing before you withdrew consent.

11.8 How to exercise your rights

To exercise any of your rights, please contact us at:

support@veggiejournal.app

We may need to ask for proof of identity before acting on your request.

12. Complaints and your right to contact the ICO

If you have concerns about how we handle your personal data, we would encourage you to contact us first so we can try to resolve the issue:

Email: support@veggiejournal.app

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK data protection regulator:

Website: https://ico.org.uk/
Telephone: 0303 123 1113 (within the UK)

13. Cookies and similar technologies

The Website and App use cookies and similar technologies (such as local storage or pixels) to:

• keep you logged in to your account;
• remember preferences (e.g. theme, language);
• understand how VeggieJournal is used;
• (where applicable) support analytics or marketing.

Where required by law, we will ask for your consent before setting non-essential cookies (for example, analytics or marketing cookies). You can manage your cookie preferences through your browser settings or any cookie banner/control we provide.

Further details of the specific cookies we use will be set out in our Cookie Policy or an updated section of this Privacy Policy.

14. Children’s privacy

VeggieJournal is intended for use by individuals aged 16 and over. We do not knowingly collect personal data from anyone under 16 years old.

If we become aware that a user is under 16, we will take reasonable steps to:

• close the account; and
• delete or anonymise any personal data that we hold about that user, unless we are required by law to keep it.

If you believe that a child under 16 has provided us with personal data, please contact us at support@veggiejournal.app.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect:

• changes to VeggieJournal;
• updates to legal or regulatory requirements;
• improvements in how we describe our practices.

When we do, we will update the “Effective Date” at the top of this page. If we make significant changes, we will try to notify you via the Website, the App, or by email.

Continuing to use VeggieJournal after an updated Privacy Policy is posted means you accept the revised Policy.

15. How to contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Postal address:
VeggieJournal App
c/o Mind’s Eye Design Ltd
Liskeard Enterprise Centre
1 Holman Road
Liskeard
Cornwall
PL14 3UT
United Kingdom

Email: support@veggiejournal.app