Privacy Policy

Effective September 4, 2026. Last updated September 22, 2026.

Meadow is made by Wildcard Wellness, LLC ("Wildcard Wellness", "we", "us", or "our"). This policy explains what happens to your information when you use the Meadow app for iPhone (the "App"), visit growyourmeadow.com (the "Site"), or write to us. It covers the App and the Site together, because the honest answer is the same for both: we collect very little, and we don't sell any of it.

If anything here is unclear, email us at support@growyourmeadow.com and a real person will reply. This policy is part of our Terms of Service; by using Meadow you agree to both.

The short version

• There is no password and no login. When you set up Meadow we ask for an email address, so we can help if something goes wrong and write to you now and then. That is the only thing about you we hold.
• Your meadow lives on your phone. Your moods, movement, flowers, little things, wins, and seeds are stored on your device. We don't have a server that holds them, and we can't see them.
• iCloud sync is optional and yours. If you turn it on, your meadow is kept in your own iCloud account by Apple, not by us.
• Apple handles your payment. Subscriptions are billed through the App Store. We never see your card details.
• We use a small amount of anonymous analytics, including anonymous session replays with your words and photos blacked out, to understand which parts of the App are used, never what you wrote.
• We don't sell your data, we don't show ads in Meadow, we don't track you across other apps or websites, and we don't use your data to train AI.
• Deleting the App deletes your meadow from that device. You can remove the iCloud copy from your iCloud settings.

Who we are

Wildcard Wellness, LLC is a small company based in the United States. For the purposes of data protection law we are the "controller" (or "business") responsible for the limited personal data described here. Apple is a separate, independent controller for anything you do with the App Store or iCloud. You can reach us at support@growyourmeadow.com.

A few words we use

• Meadow data means everything you add to the App: the words you choose to describe a mood or your energy, the movement you log, your flowers, little things, wins, seeds, the good thing you save when you close the day, and your in-app settings.
• Personal data means information that identifies you or could reasonably be linked to you, such as an email address or a device identifier.
• Usage data means information generated automatically by using the App or the Site, such as which screen was opened or how long a page was viewed.
• Service providers (or "processors") are the companies that help us run Meadow. They're listed in Third-party services.

Information the App keeps on your device

Meadow is built "local-first". When you open the App, your Meadow data is read from and written to storage on your iPhone. It is not sent to us. We don't run a backend that receives it, there is no login, and we don't ask for your phone number, location, contacts, or microphone. If you attach a photo to a win, it stays on your device like the rest of your meadow.

Because your Meadow data never reaches us, we cannot read it, restore it, share it, or hand it over, including to law enforcement. That's by design. It also means it's protected by your device's own security: your passcode, Face ID or Touch ID, and the encryption iOS applies to app data at rest (Apple's Data Protection).

Some of what you write in Meadow may feel personal, such as how you're feeling today. We want to be clear that we never receive those words, so we never process, categorize, or make inferences from them. The gentle observations the App shows you about your own days (for example, that your mood tends to be brighter on days you move) are worked out on your device from your own Meadow data. Nothing about them is sent to us.

If you back up your iPhone to iCloud or to a computer, your Meadow data is included in that backup like any other app's data. Those backups are yours, handled by Apple or by your computer, and we have no access to them.

iCloud sync (optional)

You can choose to keep your meadow in sync across your own Apple devices using iCloud. When iCloud sync is on, the App stores a copy of your Meadow data in the private area of your iCloud account using Apple's CloudKit service. That copy is held by Apple under Apple's iCloud terms and privacy policy, is tied to your Apple Account, and is encrypted in transit and at rest by Apple. We do not have access to your private iCloud database and cannot see, copy, or recover what's in it.

You control this in iOS, not in the App: open your iPhone's Settings, tap your name, then iCloud, and turn Meadow off. To remove the iCloud copy entirely, go to Settings, tap your name, then iCloud, then Manage Account Storage (or Manage Storage), choose Meadow, and delete the data. Apple explains this in its iCloud storage help.

Subscriptions and payments

Meadow is an auto-renewing subscription. All purchases are made through Apple's App Store using Apple's in-app purchase system. Apple is the merchant of record: Apple collects your payment, holds your billing details, issues refunds, and lets you manage or cancel the subscription in your App Store settings. We never see your card number, bank details, billing address, or Apple Account email.

To check whether your subscription is active, the App uses RevenueCat, a subscription management service. RevenueCat receives a randomly generated, anonymous app user ID created on your device, your App Store transaction and subscription status (which plan, when it started or renews, price and currency, whether it was refunded), and basic technical information such as iOS version, device model, App version, language, and the IP address of the request. RevenueCat uses this only to validate purchases, unlock the features you've paid for, and give us aggregate subscription reporting. Once you have given us your email address (see below), RevenueCat also holds it next to that ID, so we can find your subscription when you write to us for help. If you restore purchases on a new iPhone, Apple confirms your existing subscription to the App; nothing new is collected.

The screen that offers you the subscription is part of the App itself; no separate service delivers it. RevenueCat never receives your mood, movement, notes, wins or anything else from your meadow, and does not use your information for its own purposes.

Apple also shares limited information with us through App Store Connect: aggregate sales and subscription figures, and, only if you've chosen to share analytics with app developers in your iPhone's Settings (Privacy & Security, then Analytics & Improvements), crash logs and anonymized app-usage statistics. We use these to fix bugs and understand how Meadow is doing overall. You can turn that sharing off at any time in the same place.

Analytics in the App

We use PostHog, a product analytics service, to understand how Meadow is used in general: which screens are opened, which features are used, where people get stuck, and whether the App crashes. This helps us make Meadow better and keep it working. It does this in two ways: analytics events, and anonymous session replays.

What analytics receives: the same randomly generated anonymous identifier RevenueCat uses (shown as the support ID in the App's settings), whether you have a subscription and which plan, the names of screens and actions (for example, "check-in recorded" or "movement logged"), the App version, iOS version, device model, language and region, and approximate country derived from the IP address of the request. What analytics never receives: your Meadow data, including how you said you feel, your energy, what movement you did, notes, wins, flower names, or anything else you type or choose. We deliberately keep event names generic so that no analytics event describes your mood, health, or body.

Session replays: the App also records anonymous session replays through PostHog: a series of masked screenshots of the App as you use it, with your taps, so we can see where a screen was confusing or something didn't work. Before a screenshot leaves your phone, the App blacks out everything you typed or chose to show: your name, your email address, the words on your journal pages and wins, any photos you added, and every text field. What remains is the App itself, its screens, flowers, and buttons, keyed to the same anonymous identifier as the analytics events. Replays never include your keyboard, your notifications, or anything outside Meadow. They are kept for up to 30 days, then deleted.

We do not use this data to build a profile of you, and we don't combine it with data from other companies. If you'd rather we held none of it, email us with the support ID shown in the App's settings and we'll delete the records tied to it. Your email address is never sent to analytics.

Ads and attribution in the App

The App doesn't send anything to advertising networks or attribution services. The one exception is Apple's own: the App asks iOS for Apple's Search Ads attribution token and passes it to RevenueCat, so Apple can tell us, in aggregate, whether an Apple Search Ads campaign led to the install. No advertising identifier is involved.

The App does not show Apple's "Allow tracking" prompt and does not read the advertising identifier (IDFA). If we start measuring our ads in any other way, we'll update this policy first, and if that ever needs tracking, the App will ask you.

Your email address, and the notes we send

At the end of setting up Meadow, the App asks for an email address, and you can add your first name. We use it to help you when something goes wrong, to tell you about important changes, and to send the occasional note from the meadow. Apple sends your receipts separately.

The address goes from your phone, through a small relay we run on Cloudflare, to Loops, the email service we use, together with the anonymous identifier described above, your first name if you gave one, whether you have a subscription and which plan, the name you gave your garden, and your day count. As you use Meadow, the relay also tells Loops that certain things happened (a first flower grew, a day count was reached, a subscription started or ended) so a note can follow when it is timely. It never says what you did, wrote, or felt, and it never carries your check-ins, movement, wins, or notes.

Every note we send has an unsubscribe link, and using it stops everything except the messages we're required to send, such as a change to our terms. To have the address removed altogether, email us and we'll delete your contact from Loops and your record from RevenueCat. Erase everything in the App's settings deletes your meadow on your devices only; it keeps your email address and your subscription.

Reminders and notifications

If you allow notifications, Meadow schedules gentle reminders locally on your device. These are "local notifications": they are created and delivered by your iPhone, not by a server of ours, so no information leaves your device to send them. We don't use push notifications from a server, and we never send marketing by notification; the only messages from us arrive by email, as described above. You can change or turn off reminders in the App or in your iPhone's Settings at any time.

Apple Health

The current version of Meadow does not read or write Apple Health (HealthKit) data. If a future version lets you connect Apple Health so that walks and workouts grow your meadow automatically, it will only ever do so with your explicit permission through iOS's Health permission prompt, and you can withdraw that permission at any time in Settings under Health. Any Health data the App reads would be used only on your device to grow your meadow, would never be sent to us, to analytics, to advertisers, or to any other third party, would never be used for advertising or sold, and would not be stored in iCloud. We will update this policy before any such feature ships.

AI and your data

We do not use your Meadow data, your messages to us, or anything else about you to train artificial-intelligence or machine-learning models, ours or anyone else's, and we don't let our service providers do so either. Meadow doesn't send what you write to any AI service. If that ever changes for a feature, we'll ask you first, explain exactly what would be sent and to whom, and update this policy before it ships.

Our website

growyourmeadow.com is a simple, static website. It is hosted and delivered by Cloudflare, which processes visitors' IP addresses and request details for the short time needed to serve pages and defend against abuse, and may set a strictly necessary security cookie for that purpose.

We use Google Analytics 4 to see which pages are read and roughly where visitors come from. Google Analytics sets first-party cookies (named _ga and _ga_…, which last up to two years) and collects pseudonymous usage data such as device type, browser, pages viewed, referring site, and approximate location. It doesn't receive your name or email, and nothing on the Site asks you for either unless you fill in the contact form or one of the email forms below. Google Signals and data sharing with Google's other products are turned off in Google Analytics. You can opt out with Google's browser add-on, by blocking cookies in your browser, or by using a content blocker.

Email forms. The "email me my wheel" form on the wellness wheel tool asks for an email address only and sends it to Loops, our email service, which keeps it on a list for that purpose. We use it to send what the form promised (your wheel) and the occasional note about Meadow; every email has an unsubscribe link. Nothing else on the Site collects an email address.

No advertising tags. The Site doesn't load any advertising pixels or conversion tags, and App Store links on the Site go straight to the App Store. If we start advertising Meadow, we'll update this policy before adding any.

We don't sell personal information, and we don't "share" it for cross-context behavioural advertising as California law defines it. We treat the Global Privacy Control signal and "Do Not Track" as a request to opt out anyway, and you can also email us.

When you write to us

If you email support@growyourmeadow.com, we receive your email address, whatever you choose to tell us, and anything you attach. If you use the contact form on the Site, it asks for a name (optional), an email address, and your message, and is delivered to the same inbox by Web3Forms, a form-relay service that also records the time of the submission and your IP address to prevent spam. The contact form also shows an hCaptcha check, run by Intuition Machines (hCaptcha), which looks at your browser and how you interact with the page to tell people from bots. We don't receive that information.

We use what you send only to reply and to fix whatever you wrote in about. Writing to us doesn't add you to any mailing list. Please don't send us your Meadow data or sensitive health details unless it's necessary to solve a problem; we're a small team, not a healthcare provider, and support email isn't covered by medical-privacy laws such as HIPAA. Support messages are held in our email and help-desk provider's systems and deleted once we're confident the matter is closed, typically within 24 months.

Third-party services

These are the companies that help us run Meadow. Each one receives only what it needs to do its job, is bound by its own privacy policy and a written agreement with us that limits what it may do with the data, and may not use the data for its own purposes.

• Apple (Apple Inc.): the App Store and in-app purchases, iCloud and CloudKit sync, App Store Connect reporting, and iOS itself, including local notifications. See apple.com/legal/privacy.
• RevenueCat (RevenueCat, Inc.): subscription validation and entitlement checks. See revenuecat.com/privacy.
• PostHog (PostHog, Inc.): anonymous product analytics and masked session replays for the App. See posthog.com/privacy.
• Loops (loops.so): the email service that holds the addresses from the App and from the Site's email forms, and sends our notes. See loops.so/privacy.
• Google Analytics 4 (Google LLC): website analytics, as described under Our website. See policies.google.com/privacy.
• Cloudflare (Cloudflare, Inc.): website hosting, DNS, and content delivery, and the small relay that passes the App's email address and events to Loops. See cloudflare.com/privacypolicy.
• Web3Forms: relays messages sent through the Site's contact form to our inbox. See web3forms.com/privacy.
• hCaptcha (Intuition Machines, Inc.): the anti-spam check on the Site's contact form. See hcaptcha.com/privacy.
• Our email and help-desk provider: hosts the support inbox that receives your messages.

The App sends nothing to advertising networks, attribution services, or social-media companies, we don't use data brokers, and no third party receives your Meadow data. If we add or change a provider, we'll update this list.

What we tell the App Store

Apple asks every developer to summarize their data practices in the "App Privacy" section of the App Store listing. Ours says, in Apple's categories, that Meadow collects Contact Info (your email address, and your name if you give it), Purchases (purchase history, via Apple and RevenueCat), Identifiers (the anonymous app user ID described above, and a device identifier), Usage Data (product interaction, meaning which screens and features are used, including the masked session replays described above), and Diagnostics (crash and performance data). All of it is marked as linked to you, because everything the App sends is keyed to the same anonymous app user ID, and that ID sits next to your email address in our subscription and email records. None of it is used to track you across other companies' apps or websites, and all of it is used only for app functionality, analytics, and our own communications. Your Meadow data, including anything Apple would classify as Health & Fitness or Sensitive Info, is not collected by us at all. If you ever spot a difference between that label and this policy, tell us and we'll fix whichever one is wrong.

How we use information

We use the limited information described above to:

• Provide the App and the Site and keep them working
• Confirm your subscription and unlock what you've paid for
• Understand, in aggregate, which parts of Meadow are useful so we can improve them
• Find and fix bugs, crashes, and security problems, and prevent fraud and abuse
• Reply to you when you write to us
• Send you help, important changes, and the occasional note by email, which you can stop at any time
• Comply with the law, enforce our terms, and protect our rights and yours

We don't use your information for advertising; we don't build profiles of you, and we don't make automated decisions about you that have legal or similarly significant effects. We won't use your information for a materially different purpose without telling you first, and asking where the law requires it.

How we share information

We don't sell personal information, and we don't share it for cross-context behavioural advertising. We disclose information only:

• To the service providers listed above, to do the specific jobs described
• If required by law, a court order, or a lawful request from a public authority, or to protect the rights, safety, or property of our users, the public, or Wildcard Wellness. Because we don't hold your Meadow data, there is nothing of that kind we could hand over.
• If Wildcard Wellness is involved in a merger, acquisition, financing, or sale of assets, in which case we'll post notice here (and in the App, if it's significant) before your information becomes subject to a different privacy policy
• With your permission, if you ask us to

Tracking and advertising

Meadow does not track you across other companies' apps or websites, and it doesn't use the advertising identifier (IDFA) or any fingerprinting technique. Because we don't track, the App doesn't need to show Apple's App Tracking Transparency prompt. There are no ads in Meadow and there never will be ones built on your data.

How long we keep information

• Meadow data: stays on your device (and in your iCloud, if enabled) for as long as you keep it. We never hold a copy.
• Email address and contact record: kept in Loops (and next to your subscription in RevenueCat) until you ask us to delete it; then deleted within 30 days.
• Subscription records: kept by Apple under Apple's terms and by RevenueCat for as long as needed to manage your subscription, handle refunds and disputes, and meet tax and accounting rules.
• App analytics: kept in anonymous, aggregated form for up to 24 months, then deleted or further aggregated.
• Session replays: kept for up to 30 days, then deleted.
• Crash and diagnostic reports: kept for up to 24 months or until the bug is fixed, whichever is sooner.
• Website analytics: Google Analytics event data is kept for 14 months.
• Support email and contact-form messages: deleted once the matter is closed, typically within 24 months, unless we need them to resolve a dispute or the law requires longer.

When a retention period ends, we delete the information or anonymize it so it can no longer be linked to you.

Deleting your data

You don't need to ask us to delete your meadow, because we don't have it. To delete it yourself:

• On your device: delete the Meadow app. iOS removes all of the App's local data with it.
• In iCloud: open Settings, tap your name, then iCloud, then Manage Account Storage, choose Meadow, and delete. Do this before deleting the App if you don't want the data to come back on reinstall.
• Analytics, session replays, and support records: email support@growyourmeadow.com and we'll delete what we can identify. For analytics and replays, include the anonymous identifier shown in the App's settings so we can find the records.
• Email and the notes: email us and we'll delete your contact from Loops and your record from RevenueCat. Erase everything in the App's settings doesn't touch either; it only deletes your meadow. The unsubscribe link in any note stops the mail without deleting anything.
• Subscription: canceling doesn't delete anything; it simply stops the next renewal. Manage it in Settings, then your name, then Subscriptions. Apple keeps its own purchase records under Apple's policy.

Your choices at a glance

• Analytics: email us with your support ID and we'll delete it; in iOS Settings under Privacy & Security you can stop the reports Apple shares with developers.
• Email: unsubscribe from any note, or email us to have the address deleted.
• Reminders: change or turn off in the App or in iOS Settings under Notifications.
• iCloud sync: turn Meadow off in iOS Settings under your Apple Account, then iCloud.
• Apple Health (when offered): allow or revoke in iOS Settings under Health, then Data Access & Devices.
• Website cookies: block cookies in your browser, or use Google’s opt-out add-on; the Site works without them.
• Subscription: manage or cancel in iOS Settings under your Apple Account, then Subscriptions.
• Everything else: email us and we'll help.

Security

The best protection in Meadow is structural: your meadow never leaves your device unless you choose iCloud, and even then it goes to your own account, not ours. For the small amount of data that does reach us or our service providers, we use encrypted connections (TLS), access limited to the people who need it, two-factor authentication on the accounts we use to run Meadow, and reputable providers that maintain their own security programs and certifications. No method of storage or transmission is perfectly secure, so we can't promise absolute security, but we've tried to make the amount of data at risk as close to zero as we can.

If we ever learn of a security breach involving personal information we hold, we'll investigate, notify affected people and regulators where the law requires it, and post a notice here or in the App if that's the most practical way to reach you.

International transfers

We're based in the United States, and our service providers process data there and in other countries. If you're in the European Economic Area, the United Kingdom, or Switzerland, that means the limited data described here may be transferred outside your region. Where that happens we rely on safeguards recognized under applicable law, such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or a provider's certification under the EU–US Data Privacy Framework. Data you keep in iCloud is handled by Apple under Apple's own transfer safeguards.

Your rights and choices

Wherever you live, you can email us to ask what information we hold that relates to you, to have it corrected or deleted, to receive a copy of it, or to object to how we use it. You can also withdraw any consent you've given, without affecting what was done before. We won't treat you differently for exercising your rights.

How we handle requests. Because we hold so little, we may ask you for the support ID from the App's settings, or to write from the email address you gave us, so we can find anything at all. That's the only verification we can do, and we'll never ask for more than we need. If we can't link any data to you (which is likely, given how Meadow works), we'll tell you so. We aim to answer within 30 days and will always answer within 45, and we'll tell you if we need longer. You may use an authorized agent to make a request on your behalf; we may ask for proof that you've authorized them. If we decline a request, we'll explain why, and you can appeal by replying to us; if you're still not satisfied, you can contact your state attorney general or data protection authority.

If you're in the EEA, the UK, or Switzerland

Our legal bases under the GDPR and UK GDPR are: performance of a contract (providing the App you've chosen to use and managing your subscription); our legitimate interests in understanding and improving Meadow, keeping it secure, preventing fraud, sending existing customers the occasional note about Meadow (which you can stop with one tap), and answering your messages, balanced against your rights; your consent, where we ask for it (for example notifications, website cookies, or any future Apple Health connection), which you can withdraw at any time; and legal obligations, such as tax rules on subscriptions.

You have the right to access, rectify, erase, and receive a portable copy of your personal data, to restrict or object to processing, and to withdraw consent. You also have the right to lodge a complaint with your data protection authority, such as the UK Information Commissioner's Office, the Swiss Federal Data Protection and Information Commissioner, or the supervisory authority in your EU member state. We'd appreciate the chance to help first.

If you're in California

Under the California Consumer Privacy Act (as amended by the CPRA), this section is our notice at collection. In the last 12 months we have collected these categories of personal information: identifiers (an anonymous app user ID, an IP address, your email address and first name from the App or a Site form, and your name if you write to us); commercial information (subscription status and transaction history, via Apple and RevenueCat); and internet or network activity (app screens used, website pages viewed, device and browser details). We collect this directly from your device, from Apple, or from you, for the purposes described in How we use information, and keep it for the periods in How long we keep information. We disclose it only to the service providers listed above. We do not collect sensitive personal information as defined by the CCPA, we do not sell personal information or share it for cross-context behavioural advertising, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.

You have the right to know what personal information we collect and how we use and disclose it, to delete it, to correct it, to opt out of sale or sharing (we do neither), to limit the use of sensitive personal information (which we don't collect), and not to be discriminated against for exercising these rights. To make a request, email support@growyourmeadow.com; we'll confirm receipt within 10 days and respond within 45. California's "Shine the Light" law also lets you ask whether we've disclosed personal information to third parties for their direct marketing; we haven't.

If you're in another US state

Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, New Jersey, Delaware, Iowa, Nebraska, New Hampshire, Kentucky, Maryland, Minnesota, Rhode Island, Tennessee, Indiana, and others) have similar rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sales, and profiling. We don't sell, profile, or use your data for targeted advertising. Email us to exercise a right or to appeal a decision we've made about a request; if the appeal is denied, you can contact your state attorney general.

Consumer health data (Washington, Nevada, Connecticut, and similar laws)

Some states, including Washington under its My Health My Data Act, Nevada, and Connecticut, give extra protection to "consumer health data": information that could reveal your physical or mental health, including mood and exercise. Meadow is exactly the kind of app those laws are written for, so we want to be direct. Your check-ins, your energy, the movement you log, and everything else in your meadow stay on your device (and in your own iCloud, if you choose). We do not collect, process, share, or sell consumer health data, and we don't use geofencing. The anonymous analytics described above are limited to generic screen and action names and never contain what you recorded. If you believe we hold consumer health data about you anyway, you have the right to confirm whether we do, to access it, to withdraw consent, and to have it deleted, and to appeal our response; email us and we'll act on it.

Children's privacy

Meadow is made for adults, and our Terms of Service require you to be at least 18 to use it. It isn't directed at children, and we don't knowingly collect personal information from anyone under 18, and in particular from anyone under 13, or under 16 where local law sets a higher age of digital consent (including the EEA and UK). If you believe a child has used Meadow and that we've somehow received their personal information, email us and we'll delete it.

Not medical advice

Meadow is a gentle habit companion, not a medical device or a healthcare service, and nothing in it is medical advice. Your Meadow data is not a medical record and isn't governed by health-records laws such as HIPAA. If you're struggling, please reach out to a healthcare professional or a local support line.

Links to other sites

The Site and the App may link to places we don't run, such as the App Store, Apple's help pages, or our social profiles on Instagram, Facebook, and TikTok. Their privacy policies, not this one, apply once you're there, including to anything you post or message us on those platforms. We have no control over, and take no responsibility for, their content or practices.

Changes to this policy

We'll update this policy when Meadow changes in a way that affects your data, for example if we add an Apple Health connection, change a service provider, or begin collecting something new. When we do, we'll post the new version here and update the date at the top. For significant changes we'll also let you know in the App before they take effect, and we'll ask for your consent where the law requires it. Continuing to use Meadow after a change means you accept the updated policy. Earlier versions are available on request.

Contact us

Questions, requests, or worries about any of this? We'd love to hear from you. Email is the only way to reach us; we don't publish a postal address.

• Wildcard Wellness, LLC
• Email: support@growyourmeadow.com