Privacy Policy

Who this policy is for

This policy explains how Grove Ledger, a pocket guide to fruit seasonality, handles information. It applies to everyone who uses the app. In plain terms: the app runs entirely on your device, so there is very little to explain — but we want to be precise about it.

Information the app works with

Everything below is created by you and kept only on your device. None of it is sent anywhere.

• Your region and name. The climate region you choose and an optional name used to personalise the app.
• Your grove. The fruits you save as favourites and any tasting notes you write about them.
• Your price ledger. The amounts you record for what a fruit cost you, used to chart your own seasonal spending and highlight your best buying windows.
• App preferences. Simple settings that remember how you like the app set up.

How your information is used

Your entries are used only to run the features you see: showing what is in season for your region and month, drawing season ribbons, keeping your grove and its notes, and charting the prices you have logged. All of this is calculated on your device. Nothing is used for advertising, profiling, or any purpose beyond making the app work for you.

On-device only — no network

Grove Ledger does not connect to the internet to run. The seasonality calendar, the 33-fruit catalogue, and the ripeness signal guide are built into the app and computed locally and deterministically. Because nothing is transmitted:

• There is no account to create and no sign-in.
• There are no servers that receive or store your data.
• There is no analytics, telemetry, or usage tracking.
• There is no advertising and no advertising identifiers.
• The Ripeness Scanner uses on-device intelligence only — the colour read and Apple Intelligence both run on iOS, on your own device, so nothing is sent to any third party.

Camera, photos, and the Ripeness Scanner

Grove Ledger may access your camera and photo library only when you use the Ripeness Scanner, and only for the single photo you choose to scan. Access is optional — the rest of the app works without it — and iOS asks for your permission the first time.

That photo is processed entirely on your device: an on-device reading of the fruit's colour, paired with Apple Intelligence, which also runs on iOS on your device, to write the ripeness verdict. The image is never uploaded, never saved by the app, never shared, and never sent anywhere. It is used only for that one scan and discarded immediately afterwards.

Grove Ledger does not request or access your device location. The climate region is a simple choice you make inside the app, not a reading of where you physically are.

Data retention and deletion

Because your data lives only on your device, you are fully in control of it. Anything you save stays until you remove it. Deleting an entry removes it, and deleting the app removes all of its data from your device. There is no copy held anywhere else for us to keep or delete.

Children's privacy

Grove Ledger is suitable for a general audience and does not collect personal information from anyone, including children. Since no data leaves the device and there is no account, no personal information about a child is ever gathered, transmitted, or shared.

Changes to this policy

If the app's data practices ever change, this policy will be updated and the effective date above will change with it. Since the current app collects and transmits nothing, any future change would only ever add clarity, and would be reflected here first.

Contact