Privacy Policy

Beta version · Last updated October 12, 2026

Bucketsfull is in beta. This policy is written in plain language and will be reviewed by a lawyer before Bucketsfull opens to the public. We will tell farmers by email before any change that matters.

Who we are

Bucketsfull is run by Vera Cubero. Questions or requests: .

Two kinds of people use Bucketsfull

• Farmers who create a farm and use the dashboard.
• Customers who visit a farm's website and send an order or subscription sign-up. If you're a customer, the farm you ordered from decides how to use your information for your order. We store it for them and send the emails described below.

What we collect

• From farmers: your name, email, and profile picture from your Google sign-in; your farm details (name, zip code and growing zone, contact details, social media links); everything you enter in the app, such as plants, prices, orders, subscribers, income and expense entries, receipt photos, and website photos; and anything you send with the Feedback button, including screenshots plus the tab you were on and your device and browser type.
• From customers: what you type into a farm's order or subscription form: name, email, phone, delivery address, delivery date, notes, and what you ordered.
• Automatically: basic technical information needed to run and protect the service, such as your browser type and a security check from Google reCAPTCHA that helps block fake orders and abuse.

We don't use advertising trackers, and we don't sell or rent anyone's information.

How we use it

• To run Bucketsfull: show your dashboard, publish your farm website, and save orders and sign-ups.
• To send emails: new-order and sign-up alerts to the farmer, and receipts and order updates to customers in the farm's name. Farmers can turn customer emails off.
• To answer questions about finances with AI Insights, but only when a farmer asks. The farmer's finance totals and entries are sent to Google's Gemini model to write the answer.
• To keep the service secure, fix problems, and improve it.

Who else handles the data

We use a few service providers to run Bucketsfull. They handle data only to provide their service to us:

• Google Firebase and Google Cloud: hosting, sign-in, the database, backups, and the code that sends emails.
• Google reCAPTCHA Enterprise: the security check on our pages. Google's own privacy policy applies to it.
• Google Gemini (through Firebase AI Logic): AI Insights answers.
• Gmail: delivers Bucketsfull's emails.

We may also share information if the law requires it, or to protect people from fraud or harm.

Who can see what

• Your farm's website, plant list, prices, and photos are public, because that's what a website is for.
• Orders, subscribers, money records, and receipts are private to the farm's members.
• The Bucketsfull admin can view (not change) a farm's dashboard to help fix problems.

How long we keep it

We keep farm data while the farm uses Bucketsfull. When a farmer asks us to delete their farm, we delete it within 30 days. Backups expire on their own within about two months. Feedback is kept until it's no longer useful for fixing the problem.

Your choices

• Farmers can edit or delete most information in the dashboard, download a backup anytime, and email us to delete the whole farm.
• Customers can ask the farm to correct or delete their information. You can also email us and we'll pass it along or help.

Security

Data travels over encrypted connections and is stored with Google Cloud. Database rules keep each farm's private data limited to that farm's members. No system is perfect, so please tell us right away if you think something is wrong.

Children

Bucketsfull is for adults running a farm business. It isn't meant for children under 13, and we don't knowingly collect their information.

Changes

If we change this policy in a way that matters, we'll email farmers before it takes effect and update the date at the top.