Privacy Policy

About This Policy

This Privacy Policy explains what information Creative's Garden (the "app") and the website creativesgarden.app, operated by Roses as Humans, collect, how it is used, who it is shared with, and the choices you have. Creative's Garden is a project management and publishing app for writers, musicians, poets and other creatives. If you connect a Google account, see section 7 for exactly how we access, use, store and protect Google user data.

1. Information We Collect

We collect information you provide directly, such as account details (email, name), and content you create within the app. When you are signed in, the app sends the following to our servers so the service can work:

• Account information — your email address, name or username, profile details, and a unique account ID.
• Content in shared projects — the text, tasks, goals, habits, comments, and other content of projects you share or collaborate on or publish to your portfolio, and any photos or audio you attach to them.
• Device push token — an identifier Apple provides so we can deliver push notifications (for example, a comment on your project) to your device.
• Notification inbox — a record of notifications for your account, including comments on your projects and copies of your task, habit, journal and creative-nudge reminders (their text includes the task or habit title you wrote).
• Subscription status — which plan you have. Purchases are made and billed by Apple; we do not receive your payment details.

Projects you do not share or publish, and your journal, are kept on your device and in your own iCloud account (see section 3), and are not sent to our servers.

We do not use your information to track you across other companies' apps or websites, and we do not show advertising.

We also collect basic usage data such as app interactions and performance data.

On our website (creativesgarden.app) we measure traffic with Cloudflare Web Analytics, a privacy-focused service that does not use cookies or local storage and does not track you across other websites. It records aggregate information such as the pages visited, referring site, browser, operating system, device type, and approximate country, along with page performance metrics. We no longer use Google Analytics.

If you invite someone to collaborate on a project, you can pick a single contact's email address or phone number using your device's built-in contact picker. That picker runs separately from the app and only shares the one piece of contact information you tap on — the app never receives or stores your full contact list.

2. How We Use Information

We use data to: improve the service, enable core features (like saving projects), and maintain account security.

3. Data Storage

Your data is stored using Supabase and associated cloud infrastructure. We take reasonable measures to protect stored data, but no system is 100% secure.

iCloud. Your projects, tasks, goals, habits, journal and settings are stored on your device and synced between your devices through your own iCloud account (CloudKit). That data is held by Apple under your Apple ID, and we cannot read it.

Notifications. Reminders you turn on in Settings → Notifications (calendar event reminders, task and habit reminders, a morning brief, lapsed-habit nudges, a weekly goal check-in, and reflection reminders) are scheduled on your device. Calendar event titles and locations used for event reminders and the morning brief stay on your device and are not sent to our servers; a short copy of the upcoming events is kept in the app's local storage so reminders can be scheduled. Your choices are saved with your other settings in iCloud. You can switch any notification off in the app or in your device's Settings app.

On-device processing. Features that use the microphone, such as chord and lyric recognition, process audio on your device and do not upload or save it unless you attach a recording to a project you share.

4. Sharing of Information

We do not sell your personal data. We may use third-party services to operate the app: Supabase (account sign-in, database and file storage), Apple (iCloud sync, push notifications, and App Store purchases), and Google (only if you connect a Google account, see section 7). Website analytics are provided by Cloudflare, which also hosts our website. See Cloudflare's privacy policy. Accounts you connect yourself, such as Google, are covered in section 7.

We use Cloudflare Turnstile for spam and abuse protection. As a condition of enabling invisible mode, you must reference Cloudflare's Turnstile Privacy Addendum in your own privacy policy.

5. Your Content

You own the content you create. We store it only to provide the service and do not claim ownership.

6. Collaboration & Shared Content

Creative's Garden lets you turn a project into a collaborative one and invite other people to it. Once invited, a collaborator can see — and, depending on the role you give them (viewer, reviewer, editor, or owner) — edit that project's content, comments, and files for as long as they remain on the project.

If you (or a collaborator with permission) generate a public share link for a project, that project's content becomes accessible to anyone who has the link, whether or not they have an account — optionally behind a password you set. Comments left on a publicly shared project, including by visitors without an account, are visible to anyone with access to that link.

If you set your profile to public, your name, bio, tags, work samples, and any social links you've added are visible to anyone who visits your portfolio page.

7. Connected Accounts & Google User Data

Creative's Garden can connect to other services you choose, such as your Google account or Apple Reminders, so that your tasks and calendar events appear alongside your projects. Connecting is always optional, and you can disconnect at any time.

Google account

If you connect a Google account, we ask for permission to access:

• Your Google account email address — to show you which account is connected.
• Google Tasks (read and write) — your task lists and their tasks, including titles, notes, due dates, and completion status, so you can see, complete, create, edit, and delete tasks from Creative's Garden.
• Google Calendar events (read and write) — events on the calendars you choose to show, including titles, dates and times, locations, descriptions, guest lists and responses, video-call links, colors, and alert settings, so you can see them on your Creative's Garden calendar, create, edit, and delete events (including repeating ones), invite guests, and answer invitations. Guests you add are sent to Google, which delivers invitations if you choose to notify them; we don't send email ourselves.
• Your list of Google calendars (read only) — the names, colors, and your access level for each calendar on your account, so you can choose which calendars to show and where new events are created.
• Free and busy times (read only, requested only when you check your guests' availability) — whether the people you are inviting are busy or free during a time range on calendars your account can already see, so you can pick a time that works. This never includes the titles or details of their events.
• Google Drive files created by the app (requested only when you attach a file to a calendar event) — lets the app upload the file you chose to your Google Drive and open the files it uploaded, so it can be attached to the event. The app cannot see or access any other file in your Drive.

How your Google data is used. We use this information only to provide these features to you inside the app. Changes to Google Tasks or Google Calendar are made only when you take an action, such as completing a task or saving an event.

Optional: copying your Garden tasks to Google Tasks. If you turn on "Send Garden Tasks to Google Tasks," the app creates a "Creative's Garden" list in your Google Tasks and copies the title, due date, and completion status of your Creative's Garden tasks into it. This is off by default, goes directly from your device to Google, and can be turned off at any time; turning it off leaves the copied list in your Google account for you to keep or delete.

Where your Google data is stored. Your Google Tasks, Calendar, free/busy and Drive data goes directly between your device and Google. It is not sent to or stored on our servers or in our database. A copy of your recent calendar events is kept on your device so the calendar loads quickly and works offline for viewing. Google sign-in tokens are stored in your device's Keychain; if you use iCloud Keychain, Apple syncs them to your other devices so you don't have to connect on each one. We cannot read your Keychain.

Sharing. We do not sell Google user data, use it for advertising, or share it with third parties. We do not use it to train artificial intelligence or machine learning models. No one on our team can see it, except where you send us a specific item for support and give us permission to look at it.

Security and retention. Google access tokens are kept only in your device's Keychain and sent only to Google over encrypted (HTTPS) connections. We keep Google data on your device only while the account is connected; disconnecting, or deleting the app, removes it. We retain no copy of your Google data.

Disconnecting and deleting. You can disconnect Google at any time in the app under Settings → Connections → Google. This revokes the app's access, removes the sign-in tokens from your device, and deletes the cached Google data stored on it. You can also remove access from your Google account at myaccount.google.com/permissions. Tasks, events and files you created or changed in Google, including files uploaded to your Drive as event attachments, remain in your Google account until you delete them there.

Creative's Garden's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Apple Reminders & Apple Calendar

If you turn on Apple Reminders or Apple Calendar sync, the app reads and updates the reminder lists and calendars you select using your device's Reminders and Calendar access, which you grant through the standard iOS permission prompts. This information (including event titles, times, locations, and notes) stays on your device and in your Apple account; it is not sent to our servers. If you choose to send Garden tasks to Reminders, the app creates a "Creative's Garden" list there. You can revoke access at any time in your device's Settings app.

8. Data Retention

We keep your data as long as your account is active. You can permanently delete your account and its data at any time from your profile settings on either creativesgarden.app or in the app itself. If you own a collaborative project that other people are still on, you'll need to transfer ownership or remove those collaborators first — deleting your account won't take a shared project down with it.

9. Your Rights

You may request access, correction, or deletion of your personal data. Account and data deletion is also available directly, without needing to contact us, from your profile settings.

10. Children's Privacy

This app is not intended for children under 13.

11. Changes

We may update this Privacy Policy periodically.

12. Contact

[email protected]