Last updated: October 25, 2026
PatchLab (patchlab.app and the PatchLab iPhone and Android apps) is a community tool for growers of giant vegetables, run by Jason Bragg in West Virginia, USA. This policy explains what we collect and why.
Account data: username, e-mail address and a scrambled (hashed) password. Content you add: grows, seeds, photos, notes, patches, sensor and camera settings, seed lists and listings, and your private messages. Optional profile details such as city, state and country. Technical data: when you were last active on PatchLab (to show an "Active now" status you can switch off), and a push-notification token if you use the iPhone app.
To run your account and the features you use, to show your public grows to other members, to deliver messages and notifications, to process seed-store orders, and to keep the community safe. We do not sell your data, we do not show ads, and we do not track you across other apps or websites.
Your username, the grows and photos you choose to share, and (unless you turn Active Status off in Chat settings) whether you are online. Your messages are visible only to the people in the conversation.
We use Vercel (hosting), Neon (database), Stripe (card payments for the seed store; we never see your card number), Apple (iPhone push notifications and the App Store), Google (Android push notifications through Firebase Cloud Messaging, and Google Play) and an e-mail provider to send account and message e-mails. They process data only to provide their service.
The iPhone and Android apps can send push notifications for new chat messages. You can turn them off at any time in your phone settings. If you are offline for a few minutes we may also e-mail you about a new message; you can mute a chat to stop this.
You can edit or remove your content at any time. You can permanently delete your account and your personal data inside PatchLab at Settings → Delete my account (also in the iPhone and Android apps), or follow the steps at patchlab.app/account-deletion. Seed-database records that are part of the shared public database may be kept without your account link. Backups are overwritten within 30 days.
PatchLab is not directed to children under 13 and we do not knowingly collect their data. If you believe a child has an account, contact us and we will delete it.
Data is sent over encrypted connections and passwords are stored hashed. No system is perfectly secure, so please use a strong password.
We may update this policy and will change the date above. Questions or requests: use the Support page.