Privacy

Who's responsible for your data

Props To You is run by Justin Bogdanski, London, United Kingdom. Under UK data protection law that makes me the “data controller” for everything described on this page.

Questions, requests or complaints: hello@propstoyou.org. I aim to reply within a few days, and within one month at the outside.

What we collect, and why

Your email address — so you can sign in, and so we can send you the sign-in link and code. There’s no account without it.

A display name and username, if you want them — so other members see a person rather than an ID. Both optional.

Photos of your plants — the whole point of the app. When you upload a photo we strip out the hidden metadata cameras attach to images, including GPS coordinates, before storing it. Photos are private by default: a photo is only visible to other members if you mark it public.

What you write — plant nicknames, species, care notes, watering history, the story behind a cutting, and the text of any pitch you send or receive.

How you’d like to be contacted — a short note you write yourself, for example “WhatsApp me on…” or an email address. It stays hidden until you agree a swap with someone (see below).

Basic technical data — our host records page performance and error information so we can tell when something is broken. It isn’t tied to your profile, and we don’t use it to follow you around other websites.

Under UK GDPR we handle all of this because you’ve asked us to run the service for you, and because we have a legitimate interest in keeping the app secure and working.

What other members can see

• Your display name and username, if you set them, and your public photos — you control both with the visibility toggles on your profile.
• Photos you have marked public, and the plant details attached to them.
• Offerings you post, and pitches you send.

You have to be signed in to browse Props To You. Nothing here is visible to the open internet.

Your contact details

Your contact note is meant to stay private until you decide to swap with someone. When you accept a pitch, that person sees your note and you see theirs. Before that, nobody does — the app doesn’t show it, and our database refuses to hand it over.

Please only put in that field what you’re comfortable giving to a neighbour you haven’t met yet.

Where you live

We don’t collect your address and we never show anyone where you live. If we add distance-based matching later, we’ll ask only for something coarse like a postcode, other members will only ever see roughly how far away you are, and we’ll update this page before we switch it on.

Who else touches your data

We use two service providers, both only for running the app:

• Supabase — stores your account, your plant data and your photos, and sends your sign-in emails.
• Vercel — hosts the app and collects the performance data described above.

That’s the whole list. No ad networks, no data brokers, no marketing tools. We don’t sell or rent your data, and we won’t start.

Both providers may process data outside the UK. Where that happens, it’s covered by the safeguards UK law requires for international transfers.

Cookies

We set the cookies needed to keep you signed in, and we remember your light or dark theme choice in your browser. No advertising or tracking cookies, so there’s no consent banner to click through.

How long we keep things

Your data stays while your account is open. Ask us to delete your account and we’ll remove your profile, plants, photos and messages. A few traces linger briefly in backups and server logs before they roll off, and where a swap has already happened, the other person’s record of it stays with them.

Your rights

Under UK GDPR you can ask us to:

• show you a copy of what we hold about you
• correct anything that’s wrong
• delete your account and your data
• send you your data in a portable format
• restrict or object to how we use it

Email hello@propstoyou.org and we’ll sort it. No charge, and you don’t need to give a reason to delete.

If you think we’ve handled your data badly you can complain to the Information Commissioner’s Office at ico.org.uk. We’d rather you told us first so we can fix it.

Security

Your data sits behind per-user database rules, so one member’s private plants and notes aren’t reachable by another. Everything travels over HTTPS, and we strip location metadata out of photos as they’re uploaded. No system is perfect — if you spot something that looks wrong, email hello@propstoyou.org and we’ll take it seriously.

Age

Props To You is for people aged 18 and over, because swaps happen in person between people who haven’t met. If you think a child has created an account, tell us and we’ll remove it.

Changes to this page

If we start collecting something new, we’ll update this page and change the date at the top. If it’s a significant change, we’ll tell you in the app.

Contact

hello@propstoyou.org— for anything on this page.