Last updated: June 15, 2025
Coyote Moon Apothecary (“the app,” “we,” “us”) is an herbal reference and daily practice companion. This policy explains what information we collect, how we use it, and your rights regarding your data.
Email address. When you create an account, we collect your email address. It is used solely to send you a magic sign-in link and to identify your account. We do not use it for marketing.
Session data. We store a session token server-side (in a PostgreSQL database) to keep you signed in across visits. This token expires after 30 days of inactivity.
On-device data. Your journal entries, daily check-ins, herb collection progress, brew log, and app preferences are stored locally on your device using your browser’s localStorage. This data never leaves your device unless you explicitly choose to share it.
We do not use your information for advertising, profiling, or any purpose beyond operating the app.
The “Ask the Apothecary” feature sends your questions to an AI language model to generate responses. Your messages are processed in real time and are not stored on our servers after your session ends. Do not share sensitive personal health information through the chat.
Your email address and session data are retained for as long as you have an active account. On-device data (journal, collection, brew log) is retained on your device until you clear it or delete the app.
You can permanently delete your account and all associated server-side data at any time from within the app. Go to your profile menu and select “Delete account.” This action is irreversible and will remove your email address and session records from our database immediately. On-device data (localStorage) is cleared from your browser or app installation separately when you uninstall the app or clear site data.
Coyote Moon Apothecary is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their email address, please contact us and we will delete it promptly.
We use industry-standard practices to protect your data: HTTPS for all connections, HTTP-only session cookies, and server-side session storage. No method of transmission or storage is 100% secure, but we take reasonable precautions to protect your information.
If we make material changes to this policy, we will update the date at the top of this page. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.
Questions about this policy or your data? Reach us at briandwiley@gmail.com.