Privacy Policy

Lawn Order is a mowing tracker: it records where you mowed, using your phone’s GPS, and shows you what you covered. This policy explains what that means for your data. It is written to be read, not to be survived.

Who we are. Lawn Order is operated by El-Haggan & Javeed, LLC, doing business as Whittled Widgets. 6030 Daybreak Circle, A150-142, Clarksville, MD 21029. Contact: info@lawnorder.app

What we collect, and why

Your yard and your mows — the heart of it.

• Precise location, including while the app is in the background. During a mowing session the app records your GPS position every few seconds, along with how accurate each fix was and when it was taken. Background recording is what lets you put the phone in your pocket and keep mowing; without it the trace stops when the screen turns off. Recording starts when you start a mow and ends when you stop it. iOS labels this permission “Always” because recording has to survive the screen turning off — not because the app watches you between mows.
• Property boundaries and no-mow zones that you walk, draw, or import.
• Session details you set, such as your mower’s deck width.

This is the app’s function. A mowing tracker that does not record where you mowed is not a mowing tracker. Be aware of what it amounts to: a precise map of your property, and a timestamped history of every mow you recorded — when you started, the path you drove, and when you finished. It is not a record of everywhere you go: the app records your location while a mow is running, and stops when you stop it.

Your account.

• A user identifier from Apple or Google when you sign in.
• Your email address, if the sign-in provider gives us one. Apple returns an email only on your very first authorization, so for many accounts we never receive one.

Your phone and the app’s version.

• A random identifier for this phone. The app makes it up the first time it runs; it is not an advertising identifier and not a hardware identifier, and it means nothing outside Lawn Order. It tells us which phone recorded each mow. It stays the same if you reinstall the app — it is kept in the phone’s secure storage (the iOS Keychain), which outlives the app.
• The app’s version, including its build. It tells us when an old version is no longer in use, so we can safely retire what it relied on.

Both also help us diagnose problems, whether one phone has them or everyone on a particular version does. The app sends both with its requests to our server, and we store them only for requests made while you are signed in: each mow records the phone and version that recorded it, and we keep a record of each of your phones and the version it was last seen running.

Whether the app worked. Some problems happen only on your phone — data that couldn’t be converted when the app updated, storage that wouldn’t open, a mow or a boundary walk started without precise location — and we would otherwise never hear about them. The app counts these and sends the counts with its next sync. Each one is the name of the event from a short fixed list, how many times it happened, when, and the app’s version, stored against the phone that sent it. Never your locations, your yards, your mows or anything you typed: the list is of things that went wrong in the app, not of what you did in it.

Server logs. When the app talks to our server, the request is written to a log — the internet address it came from, what was asked for, and when. It is how a fault gets diagnosed, and it is the only way we can tell you afterwards what happened to something.

Property addresses, only if you enter one. An address is optional everywhere except the property-lines lookup, which needs one by definition.

Using the app without an account

You can use Lawn Order signed out. Everything you record is stored on your device first, always, and the app works with no connection at all. Data created while signed out stays on your device until you sign in, and then becomes part of that account. If a different account was used on this device before, the app asks you first — that is the one case where the answer is yours to give.

What we do not do

• No advertising, no ad networks, no cross-app or cross-site tracking. The app’s privacy manifest declares no tracking, and there is no App Tracking Transparency prompt because there is nothing to ask about.
• We do not sell your data, and we do not share it for advertising.
• The session log stays on the device. The app writes a technical log of session recording to its own storage for debugging. Unlike the counts above, it is never uploaded. It reaches us only if you deliberately hand it over, and today that requires a cable and a command.

Who else touches your data

The parcel lookup is the one to read twice. If you use it, the address you enter is sent to the parcel service for the state it is in, and to no other, to find the matching parcel. Our server makes the request, so the service sees the address and our server: not your phone, your name or your account. The lookup works in these places, and an address anywhere else is sent nowhere:

• Published by the state’s government: Connecticut, the District of Columbia, Indiana, Maryland (iMAP), Massachusetts (MassGIS), Montana, Nebraska, New Jersey, North Carolina, Utah and Washington.
• Published by a state university for the state: New Hampshire (GRANIT, at the University of New Hampshire), West Virginia (the WVGIS Technical Center, at West Virginia University) and Wisconsin (the State Cartographer’s Office, at the University of Wisconsin–Madison).
• Hosted by Esri, a private company, on its ArcGIS Online service, for six of those: Connecticut, Massachusetts, New Jersey, Utah, Washington and Wisconsin. For those states Esri receives the address too.

Using a different boundary method — walking the perimeter, or drawing on the map — sends no address anywhere.

Where it is stored, and for how long

Data you sync is stored in the United States (AWS us-east-1).

Mows are records, not entries. The path the app measured is never rewritten — a coverage history is worth something only if it cannot be quietly changed — and there is no way to delete a single mow, or to change the deck width it was recorded with. What removes mows is removing what they belong to: a property, or your account. Both are below.

• Deleting a property removes it from your app immediately. On our server it is kept for 30 days, then permanently deleted — along with the mows recorded on it and the no-mow zones you drew for it. The app has no undo for this yet; if you deleted something by mistake, write to us within those 30 days and we can still send you a copy of it.
• Deleting your account removes your sign-in identities, your email address, and everything you recorded — the yards you added and the mows you took on them — immediately, not on a schedule. Your sign-in credentials stop working at once. Signing in again afterwards creates a new, empty account rather than restoring the old one. What remains is a record carrying no personal information, held for up to 30 days and then removed by the same daily sweep that clears deleted properties.
• Your phones’ identifiers and app versions are kept for as long as your account is: deleting your account deletes them, along with everything else above. Nothing removes them sooner — a phone that comes back after a long gap still needs to be recognized.
• Counts of whether the app worked are kept for 90 days. After that they are added into daily totals per event and app version, which record no phone and no account, and the counts themselves are deleted. Deleting your account deletes the counts at once, with your phones’ identifiers.
• Server logs are kept for 90 days, then deleted automatically. These are not a copy of your data. A log line records that a request happened — what was asked for, from which internet address, and when — not what your yard looks like or where you drove. When something of yours is deleted, the log keeps the internal id of the thing that was removed, so for up to 90 days we can still answer “what happened to my yard?” after the yard itself is gone. Nothing you recorded can be rebuilt from a log, by us or by anyone.

Security

Everything travels over HTTPS. Sign-in tokens are held in the iOS Keychain. Access tokens expire after three days and refresh silently in the background. Signing out removes your credentials from the device and, when you are online, revokes them on our servers as well. Deleting your account revokes them outright, and does not depend on being online — the deletion itself cannot happen offline.

Your choices

• Location. iOS asks before the app uses location, and you can change or revoke it any time in Settings. Revoking it stops mow recording from working — that is the feature, not a penalty.
• Map analytics. The maps come from Mapbox, which can collect usage data of its own. We turn that off: Lawn Order applies Mapbox’s opt-out the first time you open the app, so it is off unless you choose otherwise — you can change it from any map by tapping the ⓘ button. Two things no setting changes. Loading map tiles tells Mapbox which patch of ground is on screen. And once a day, Mapbox counts your device so it can bill us for the maps; that count carries a per-install identifier — not your name and not your account — and reinstalling the app produces a new one.
• Your data. Write to us and we will send you a copy of what we hold, or delete your account for you if you cannot reach the button. You can delete your account yourself at any time in Settings.
• Correcting a mow. What the app measured — where you drove, when, and how accurate the GPS was — is never edited, by you or by us, because a coverage history is only worth something if it cannot be quietly rewritten. The deck width recorded with a mow is the one you set when you started it, and there is no way to change it afterwards. If you want a mow gone, deleting the property it belongs to removes it, and deleting your account removes all of them.

Children

Lawn Order is not directed to children. We do not knowingly collect personal information from anyone under 16, or under 13 in the United States. If you believe a child has provided us with personal information, contact us and we will delete it.

Beta testing

While Lawn Order is in TestFlight, feedback you send through TestFlight reaches us with your device model, iOS version and app build attached. If you report a problem with a specific mow, we may look at that session’s recorded data to understand it.

Changes

We will update this page when what we collect changes, and change the date at the top. When a change is material — a new kind of data collected, a new company receiving it, a new purpose, or keeping something longer — the app will tell you the next time you open it, with a short note on what changed. We will not interrupt you to collect an acceptance; you can read it and carry on.