Privacy Policy

Effective 25 October 2026 · Chequebutt Pty Ltd (ABN 36 644 861 647), Tasmania, Australia

The short version. My Allotment is a gardening game. To play, you make an account with an email address, choose a username and tell the game which town your garden is in. We keep your garden on servers in Sydney. There are no ads, no analytics and no tracking, and we never sell your information. You can delete your account, and everything in it, from inside the app.

1. Who we are

My Allotment is made by Chequebutt Pty Ltd (ABN 36 644 861 647), a company based in Tasmania, Australia. We are responsible for the personal information described here, and we handle it in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Questions go to privacy@chequebutt.com.

2. What we collect

Your account

Email address, used to sign you in and to send password-reset messages. Other gardeners never see it.
Password. Our sign-in service keeps only a one-way scrambled form of it. Nobody, including us, can read it.
An account number the system generates, and when you signed up and last signed in.

What you choose to share

Your username. Other gardeners on your site see it.
Your town. You type in the town your garden is in. We store its name, state or region, country, the map position of the town, its time zone and its climate region, so your garden follows your real seasons and weather. The app never reads your device's location and never asks permission to.
Your garden: plots, beds, what you sow and harvest, seed, coins, stamps, show entries, ribbons, and the varieties you breed and name.
Things you send to other gardeners: notes (up to 280 characters), gifts, seed swaps, variety names and your allotment friend code.
Reports and blocks. If you report a gardener, we keep the report, the reason you chose and any detail you add. If you block a gardener, we keep a record that you did, so the block works.

Technical records

Our hosting provider logs requests to our servers, including the IP address, the time and the type of device or browser. Those logs are used for security and to find faults, and are kept only for a short period.

What we don't collect

No device location, contacts, photos, camera, microphone or advertising identifier. No analytics or tracking tools and no advertising. The app makes no purchases, so we hold no payment details.

3. How we use it

To run the game: keep your garden growing, apply your local season and weather, and run shows and swaps.
To show your username, plot, notes and swaps to the gardeners on your site.
To sign you in and help you back in if you forget your password.
To look into reports and keep the community safe.
To keep the service secure and working.

We do not use your information for advertising. We do not build profiles of you, sell your information, or track you across other apps and websites.

4. Who can see what

Gardeners on your site can see your username, your plot, the notes you leave and the swaps you post. People outside your site can't see any of it, and nobody who isn't signed in can see anything.
A gardener you send a gift or swap to sees what you sent and your username.
A variety you breed carries your username as its breeder. If you give or swap it, the other gardener's copy still shows that credit.
Your email address is never shown to anyone.
Blocking a gardener means their notes are hidden from you, and they can no longer send you notes, gifts or swaps.

5. Service providers we use

Supabase runs our database, sign-in and server code. Your information is stored in its Sydney region, on Amazon Web Services in Australia. Supabase Inc. is a US company, and its staff may access systems to support and secure them, under their contract with us.
Open-Meteo (Switzerland) provides town search and weather.
- When you search for your town, the app sends the words you typed from your device to Open-Meteo's town search. As with any website, Open-Meteo sees your device's IP address.
- Weather is fetched by our server, not your device. It sends only your town's map position, rounded to about a kilometre, with no name, email or account detail.
Email delivery. Sign-in and password-reset messages are sent through our email delivery provider.
Apple and Google handle downloading and updating the app under their own privacy policies.

We share information with no one else, unless the law requires us to.

6. Information that leaves Australia

Your game is stored in Australia. Supabase support staff may reach it from the United States, and town searches go to Open-Meteo in Switzerland. We use providers that protect information to a standard comparable to the Australian Privacy Principles.

7. Keeping it safe

Everything between the app and our servers is encrypted.
Database rules let each account reach only its own garden and what its site shares.
Passwords are stored only in one-way scrambled form.
Only a small number of people at Chequebutt can reach the systems behind the game.

No system is perfectly secure. If a breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

8. How long we keep it, and deleting your account

We keep your information for as long as you have an account. You can delete your account at any time in the app: tap ❓ Help at the top of your garden, then Your account, then Delete my account.

Deleting your account straight away removes your email address, username, town, garden, seed, notes, gifts, swaps, blocks and any reports you made. It cannot be undone.

A few things are kept after that:

Varieties you gave or swapped to other gardeners belong to them now and stay in their gardens, still showing the username you had when you bred them. If you want that credit removed, email us.
Seed on its way to you (unclaimed gifts and posted swaps) goes back to the gardeners who sent it.
Reports other gardeners made about you stay in our moderation records, without the link to your account.
Backups and logs. Our hosting provider's routine backups and request logs drop deleted information as they expire, usually within seven days.

If you can't get into the app, email privacy@chequebutt.com from your account's email address and we will delete your account for you.

9. Your rights

Access. Ask us for a copy of the information we hold about you.
Correction. Change your username in the app (tap your name at the top of your garden). For anything else, ask us.
Deletion. Delete your account in the app, as described above.
Complaints. Email us first and we will reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

10. Children

My Allotment is not directed at children under 13, and we do not knowingly collect their information. If you think a child under 13 has made an account, contact us and we will delete it.

11. Changes to this policy

If we change this policy, we will update the date at the top. For significant changes, we will also tell you in the app.

12. Contact

Chequebutt Pty Ltd · ABN 36 644 861 647 · Tasmania, Australia
Privacy: privacy@chequebutt.com · Everything else: contact@chequebutt.com