Last updated: 31 July 2026
The short version: your garden is stored with us, in Europe, so it is still there when you open it on another device — or when this browser is wiped. We do not require your name, you can export or erase your account with a button, and nothing you write is sold or used to advertise to you. An optional Pro tool sends only the Inner Movie scene you deliberately submit to an image provider, as explained below.
The Garden of Mind is operated by Toshi Labs, Rue Musin 1, Brussels, Belgium. Company number 1026272272, VAT BE 1026272272, www.toshilabs.be. You can reach us at hello@toshilabs.be for anything on this page.
| Your intentions and their watering history | Stored in our database in the EU, tied to your account, and kept in your browser as well so the garden still works offline. That copy with us is what makes the same garden appear when you sign in on another device — and what survives a browser that clears itself. Delete everything under Your data erases it. |
|---|---|
| Your account | A random identifier, created the moment you first open the garden — initially no name or e-mail is required. Your garden and any purchase hang on it. Attaching a Google account or an e-mail address is optional and is what lets you reach the same garden from another device. An identity provider may also place basic profile metadata in the authentication record; the app uses the e-mail and provider. |
| Your e-mail address | Only if you sign in with one, buy Pro, send feedback, or submit a withdrawal request. Used for authentication, payment support, transactional confirmations and restoring paid access. The MVP does not send newsletters or marketing mail. |
| Payment details | Handled by Stripe. We never see or store your card number. We do keep the checkout, customer and payment references, amount, currency, purchase e-mail, country, consent version and refund/dispute status needed to deliver access and handle accounting, support and refunds. |
| Feedback and withdrawal requests | Feedback contains the text you submit, language, account identifier and time. Withdrawal requests contain your name, e-mail, optional purchase reference, status and time. They are used only to respond and administer the request. |
| Optional Inner Movie images | Your written Inner Movie scene is part of your private garden. If you are a Pro user and press Create my scene, the moment, surroundings, feeling and grounded action shown on that screen are sent directly to OpenAI's image model to create the visual you requested. Your intention title, watering history, e-mail and name are not included in that request. The resulting image is stored in a private Supabase bucket and opened with a short-lived signed link. It is removed when you delete that intention or your account, and replaced when you create a new version. |
| Usage statistics | Aggregated, cookieless page and event counts via Vercel Analytics — how many people planted a seed, not who. This is why the site has no cookie banner: we set no tracking cookies. |
Intentions are personal, but the service is not designed to collect medical details, diagnoses, political or religious beliefs, information about sex life or orientation, or identifying information about another person. Please do not put those details in an intention. What we do with ordinary intention text is nothing beyond storing and returning it to you: it is never used for advertising, never sold and never analysed for marketing. The only generative processing is the optional Inner Movie image request described above, initiated by you; do not put sensitive details or information about another person in that scene. Usage statistics count events, never words.
Account-scoped database rules prevent other gardeners from reading your garden. The service is not end-to-end encrypted: a limited number of authorised Toshi Labs and infrastructure administrators can technically access stored data when strictly needed to operate, secure or support the service. We do not browse intentions as part of the product or use them to train our own models. Generated-image requests are processed by the providers named below only to return the requested image under their applicable data terms.
Keeping them is the service itself: a garden that existed only in one browser would disappear with it, and it could not be waiting for you on your phone. So this is no longer a switch to turn on — it is what the app does. What you keep instead is the exit: Export garden gives you the whole thing as a file, and Delete everything erases it here, both in the menu, both without asking anyone. If you entered something sensitive by mistake, edit or delete that intention or erase the account.
Delete everything under Your data immediately deletes the Auth account, garden, entitlement and user-linked feedback from the active database and clears this browser. Required billing records survive without the Auth user id. Residual copies may remain in provider backups or security logs until their normal protected rotation.
You can access, correct, export, restrict or erase your data, and object to its processing. Two of these you can exercise immediately without asking anyone: Export garden in the menu gives you a full copy as a file, and Delete everything deletes your account and user-owned data. The online withdrawal form handles purchase withdrawal. For anything else, mail hello@toshilabs.be and we will act within 30 days. If you are unhappy with how we respond, you may lodge a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).