SeedPrivacy Policy
- Effective
- September 6, 2026
- Last updated
- September 6, 2026
English is the sole authoritative version of this policy. Any translation is provided for convenience only; if a translation conflicts with this text, this text prevails.
Seed (“the Service”) is built to keep your records yours. This policy explains what we collect, why, and what you can do about it.
1. Who we are
| Service | Seed |
| Operator | AshStart Inc., a corporation incorporated in Ontario, Canada |
| Registered address | #201 – 20 Bruyeres Mews, Toronto, Ontario M5V 0G8, Canada |
| Privacy Officer | Daegil Pyo |
| Contact | daegil@ashstart.com |
AshStart Inc. is accountable for the personal information under its control. The Privacy Officer named above is the individual designated as accountable for our compliance with this policy and with Canadian privacy law.
2. What we collect
2.1 Account data
You can use Seed without signing in. In that case we create only an anonymous account identifier (a Firebase UID). No name, email, or other identifying information is collected.
The following is collected only if you choose to link an account.
| Sign-in method | Data collected |
|---|---|
| Anonymous (no sign-in) | Account identifier (UID) |
| Email address, name, profile photo, account identifier | |
| Apple | Email address or Apple’s private email relay address, name (once, at first sign-in), account identifier |
If you choose Hide My Email with Sign in with Apple, we never receive your real email address — only the relay address Apple forwards through.
Email addresses are held in your Firebase Authentication account record and are not stored separately in the Service’s database.
2.2 Data you enter
| Area | Fields |
|---|---|
| Profile | Name (given, family), profile photo |
| Settings | Day start hour, language, theme |
| Categories | Category names you create (or the key of a preset you selected) |
| Habits | Habit name, floor, target, unit, cue (time/place or preceding habit), schedule, replacement action |
| Logs | Local date, time logged, the time zone name at the moment of logging, value, whether the floor was met, whether it was backfilled, and for journal habits: title, note, place, photos |
2.3 About time zone data
We store the time zone name (for example America/Toronto) alongside each log.
We do not collect GPS or cell-tower location, but a time zone name can suggest the
approximate region you are in.
It is collected for exactly one purpose. Seed treats a day as starting at an hour you choose (4 AM by default) rather than at midnight. To decide which day a past record belongs to — correctly, even after you travel or move — we need the time zone that was in effect when the record was made. Time zone data is not used for anything else and is never shared.
2.4 About photos
Seed cannot control what you photograph. A photo may contain faces, health-related details, or other sensitive information, so attaching one is always your choice. Photos are shown only to you. We do not analyse them and do not share them.
2.5 What we do not collect
Seed uses no advertising identifiers, no analytics SDKs, and no third-party advertising. There is no push notification server; reminders are local to your device.
3. Why we process it, and your consent
We process your personal information for these purposes only:
- To store and display your habit records
- To restore your records on a new device or after reinstalling (when an account is linked)
- To decide which day a record belongs to, using the day boundary you set
- To respond to your enquiries
We do not use your data for marketing, profiling, or automated decision-making, and we do not sell it.
You consent to this processing by using the Service. You may withdraw your consent at any time, subject to legal and contractual restrictions and reasonable notice, by deleting your account in the app or by contacting us. Withdrawing consent means we can no longer provide the Service to you.
4. Service providers
| Provider | Purpose |
|---|---|
| Google LLC (Firebase) | Authentication, Cloud Firestore (data), Cloud Storage (files) |
| Google LLC (Places API) | Looking up a place name when you attach a place to a journal entry |
These providers process personal information on our behalf and on our instructions only. We do not share your data with any other third party. We may disclose personal information where required by law, and we will not disclose more than the law requires.
5. Storage outside Canada
Your data is stored and processed in Google Cloud Platform data centres located in the United States, and enquiries you send us may be handled from Canada.
While your personal information is outside Canada, it is subject to the laws of that country, and courts, law enforcement, and national security authorities there may be entitled to obtain access to it. We use providers that offer comparable protection by contract, but we cannot exclude this.
6. Retention and deletion
- We keep your data until you delete your account.
- When you use Delete account and data in the app, your account details, habits, logs, and photos are deleted without undue delay.
- Where law requires a longer retention period, that data is stored separately for that period and then destroyed.
- If you use Seed without linking an account, deleting the app makes the account identifier unrecoverable, and that data can no longer be reached. Link an account if you want your records to survive.
7. Your rights
| Right | How |
|---|---|
| Access — a copy of what we hold and how it has been used | View all your records in the app, or contact us |
| Correction | Edit your profile, habits, and logs in the app |
| Deletion | Undo a check, or Me → Delete account and data to erase everything |
| Withdraw consent | Delete your account, or contact us |
On undoing a check: undoing marks that log as removed and it stops counting toward your records, but any journal text and photos attached to it remain in storage until you delete your account. Use Delete account and data to erase everything.
We answer access requests within 30 days, as Canadian law requires. There is no charge.
If you are not satisfied with how we handled your personal information, contact our Privacy Officer first. If we do not resolve it, you may file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).
8. Children
Seed is not directed at children under 13, and we do not knowingly collect personal information from them. If we learn that we hold data from a child under 13, we delete it without undue delay.
9. Security
- Encryption in transit (HTTPS/TLS)
- Per-user access control — database rules permit access only to your own data
- Encryption at rest (provided by Google Cloud)
No method of storage or transmission is completely secure. If a breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires.
10. Changes
We post changes and their effective date on this page. Changes that materially affect you are announced at least 7 days before they take effect, in the app or on this page.
History
| Effective | Change |
|---|---|
| 2026-09-06 | First issued |