Privacy Policy
Last updated 12 July 2026
This Privacy Policy explains how Lemon Tree ("we", "us", "our") collects, uses, shares and protects your personal information when you use our website and apps (the "Service"). Lemon Tree is available internationally. We aim to handle personal information in accordance with the data protection and privacy laws that apply to you — including, where relevant, the New Zealand Privacy Act 2020 (Lemon Tree is based in New Zealand), the EU and UK GDPR, and other national privacy laws.
By using the Service you agree to this policy. If you do not agree, please do not use the Service.
1. Information we collect
Information you give us
- Launch notifications. If you ask to be notified when Lemon Tree launches, we collect the email address you provide for that purpose.
- Account information. When you sign in with Google, Facebook or Apple, we receive basic profile information from that provider — typically your name, email address and profile photo. We do not receive or store your password.
- Stall listings and content. If you list a stall, we collect what you provide — including the stall name, address, location coordinates, photos, products, prices, grower name and notes.
- Your activity. Stalls you follow or save as favourites, and messages or reports you send us.
Information we collect automatically
- Location. With your permission, we use your device's location to show stalls near you. You can decline, or search by suburb or town instead. Precise location is used to find nearby results and is not published as part of your profile.
- Usage and device data. Pages and features you use, approximate location derived from your IP address, device and browser type, and similar diagnostic information.
- Cookies and local storage. We use essential cookies and local storage to keep you signed in and remember preferences, and privacy-friendly analytics to understand how the Service is used. See section 6.
2. How we use your information
- To provide and operate the Service — signing you in, showing nearby stalls, publishing your listings, and letting you follow stalls;
- to send the one-time launch notification you requested;
- to keep the Service trustworthy and safe — reviewing and moderating listings, preventing fraud, spam and abuse, and enforcing our Terms of Use;
- to send you service messages and, where you have opted in, updates from stalls you follow;
- to understand usage and improve features, performance and reliability; and
- to meet legal obligations and respond to lawful requests.
3. When we share information
We do not sell your personal information. We share it only in these situations:
- Publicly, at your direction. Information in a stall listing you publish — such as the stall name, location, produce and photos — is visible to other users. Please do not include personal details you would rather keep private.
- With service providers. Trusted third parties who process information on our behalf, under agreements that restrict their use of it (see section 4).
- For legal reasons. Where we reasonably believe disclosure is necessary to comply with the law, enforce our Terms, or protect the rights, safety or property of users or the public.
- Business transfers. If Lemon Tree is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this policy.
4. Service providers we use
We rely on the following categories of providers, some of which are based overseas:
| Provider | Purpose |
|---|---|
| Google, Meta (Facebook), Apple | Sign-in and authentication |
| Google Maps Platform | Maps, geocoding and location search |
| Cloudflare | Hosting, content delivery, security (including bot protection) and privacy-friendly web analytics |
| PostHog | Product analytics to understand feature usage |
| Database and storage hosting | Storing your account, listings and uploaded images |
We operate globally, and our providers are based in various countries, so your information may be stored or processed outside the country where you live — including in New Zealand, the United States, the European Union and elsewhere. Where information is transferred across borders, we take reasonable steps to ensure it remains protected by appropriate safeguards (such as standard contractual clauses where required).
5. How long we keep information
We keep personal information only for as long as we need it for the purposes described above, or as required by law. If you delete a listing it is removed from public view, and if you close your account we delete or de-identify your personal information within a reasonable period, except where we must retain some information for backups, security, or legal and accounting obligations. Launch-notification email addresses are removed when they are no longer needed for that notification.
6. Cookies and analytics
We use a small number of cookies and local storage entries that are essential to keep you signed in and remember your preferences. We also use privacy-friendly analytics (Cloudflare Web Analytics and PostHog) to measure how the Service is used so we can improve it. You can control cookies through your browser settings; blocking essential cookies may stop parts of the Service from working.
7. Your privacy rights
Depending on where you live, you may have some or all of the following rights:
- Access the personal information we hold about you;
- Correct information that is inaccurate or out of date;
- Delete your account and ask us to remove your personal information;
- Object to or restrict certain processing, and request a copy of your data in a portable format, where those rights apply to you (for example, under the GDPR); and
- Withdraw consent — for example, turn off location access or notifications.
You can update much of your information directly in the app. To make a request or ask a question, contact us using the details below. We may need to verify your identity first, and we will respond within the timeframes required by law.
8. Keeping information secure
We take reasonable technical and organisational steps to protect personal information against loss, misuse and unauthorised access — including encryption in transit, access controls, and reputable hosting providers. No online service can be completely secure, so we cannot guarantee absolute security.
9. Children
The Service is not intended for children under 16 (or the minimum age required for consent to data processing in your country), and we do not knowingly collect their personal information. If you believe a child has given us personal information, please contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make a material change, we will take reasonable steps to notify you, such as posting a notice in the app or updating the date above.
11. Contact us
If you have any questions, requests or complaints about your privacy, use our contact form. If you are not satisfied with our response, you have the right to complain to your local data protection or privacy authority — for example, in New Zealand, the Office of the Privacy Commissioner, or in the EU, your national supervisory authority.
This page is provided for general information and is not legal advice. Because Lemon Tree operates internationally, a qualified lawyer should review and finalise this Privacy Policy — and confirm the operating legal entity, the specific data processors used, cross-border transfer mechanisms, and any country-specific disclosures (for example, GDPR legal bases or a designated EU representative) — before public launch.