Overview
OneMoreBonsai (“we”, “us”, “our”) is operated by Max Yodgee, an individual based in Australia. We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy explains what information we collect, how we use it, and what rights you have over it.
What we collect
- Account information - your email address, display name, and username when you sign up.
- Profile information - country, state/region, and currency preference if you choose to provide them.
- Bonsai collection data - tree records, care logs, notes, and any other content you enter into the app. This is your data and you control it entirely.
- Photos - images you upload of your trees, stored via Cloudinary (see Third-party services below).
- Payment information - if you subscribe, payment is handled entirely by Stripe. We never see or store your card details.
- Usage data - basic analytics on how the site is used, collected via Vercel Speed Insights (see Analytics below).
- Technical data - browser type, device type, and IP address may be logged by our hosting and infrastructure providers as part of normal operations.
How we use your information
- To provide and maintain the OneMoreBonsai service.
- To manage your account and subscription.
- To send you transactional emails (account confirmation, password reset). We do not send marketing emails without your consent.
- To understand how the site is being used so we can improve it.
- To comply with legal obligations if required.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Analytics
We use Vercel Speed Insights to understand page performance and usage patterns. This tool collects anonymised data about page views, load times, and device types. It does not use cookies and does not identify individual users. No personally identifiable information is shared with Vercel for analytics purposes beyond what is inherent in a standard web request (such as IP address, which Vercel may process in accordance with their own privacy policy).
We may in future add additional analytics tools. This policy will be updated if that occurs.
Third-party services
We use the following third-party services to operate OneMoreBonsai. Each has its own privacy policy and data handling practices.
- Supabase (database and authentication) - hosted in Sydney, Australia (ap-southeast-2). Your account data and bonsai records are stored here. supabase.com/privacy
- Cloudinary (image storage and delivery) - based in the United States. Photos you upload are stored on Cloudinary servers and delivered via their CDN. By uploading images you consent to this transfer. cloudinary.com/privacy
- Stripe (payments) - based in the United States. Stripe processes all subscription payments and stores your billing information. We do not have access to your full card details. stripe.com/privacy
- Vercel (hosting) - based in the United States. The OneMoreBonsai application is hosted on Vercel's infrastructure. vercel.com/legal/privacy-policy
- Resend (transactional email) - used to send account and system emails. resend.com/privacy
Some of these providers are located outside Australia. By using OneMoreBonsai you consent to your information being transferred to and processed in countries outside Australia, including the United States, where privacy laws may differ from those in Australia.
Cookies and local storage
OneMoreBonsai uses browser local storage (not cookies) for minor preferences such as remembering dismissed banners and UI state. This data is stored only in your browser and is never sent to our servers. We do not use advertising cookies or third-party tracking cookies.
Supabase uses a session cookie to keep you logged in. This is strictly necessary for the service to function.
Your data, your rights
Under the Australian Privacy Principles you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your account and associated data.
- Export your collection data at any time via the Export section in Reports.
To exercise any of these rights, get in touch. We will respond within 30 days.
Data retention
We retain your data for as long as your account is active. If you delete a tree it is soft-deleted and permanently purged after 90 days. If you close your account, your personal data and bonsai records will be deleted within 30 days of your request, except where we are required to retain certain information by law (for example, billing records).
Children
OneMoreBonsai is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Changes to this policy
We may update this policy from time to time. When we do, we will update the “last updated” date at the top. Continued use of OneMoreBonsai after changes constitutes acceptance of the updated policy. For significant changes we will attempt to notify you by email.
Contact and complaints
If you have a question or concern about how we handle your personal information, please get in touch.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.