Peltolohkot Pro – Privacy Policy

1. Introduction

This Privacy Policy explains how Koskenkorvan Trahteeri / 11latoa Oy (“we”, “us”) collects, uses, stores and protects your personal data when you use Peltolohkot Pro (the “App”).

We comply with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection laws.

2. Data We Collect

2.1 Personal Data

When you create an optional account or use the App, we may collect the following personal data:

• Email address (if you create an account)
• Device information (such as IP address, operating system version and device model)

2.2 User-Generated Content

The App allows you to create and store content related to your agricultural fields, including:

• Notes and text entries
• Photos uploaded by you
• Field-related data (such as boundaries, measurements and related metadata)

2.3 Location Data

When you grant permission, the App may collect precise or approximate GPS location data in order to support field mapping and related features.

You can control location permissions through your device settings at any time.

2.4 Analytics and Diagnostics

We use Firebase and related services to collect:

• App usage statistics
• Crash logs
• Performance and diagnostic data

This data helps us understand how the App is used and improve its stability and performance.

3. How We Use Your Data

We use the data described above for the following purposes:

• To provide and operate the App and its features;
• To create and manage user accounts and authentication;
• To store and sync your notes, photos and field-related data;
• To monitor and improve the App’s performance and reliability;
• To analyze aggregated usage data in order to improve the user experience.

We do not use your data for advertising, personalized ads or AI-based profiling. We do not show ads in the App.

4. Legal Basis for Processing

Under GDPR, we rely on the following legal bases to process your personal data:

• Performance of a contract: when processing is necessary to provide the App and its core functionality to you.
• Legitimate interests: when processing is necessary for our legitimate interest in improving and securing the App, provided that such interests are not overridden by your rights and interests.
• Consent: for specific processing activities, such as location data collection, where you grant permissions through your device settings.

5. Data Sharing and Third-Party Services

We do not sell or rent your personal data. We share data only with trusted service providers necessary for operating the App:

5.1 Firebase and Google Services

We use Firebase and Google Cloud services for:

• Authentication (Firebase Auth)
• Database and storage
• Analytics (Firebase Analytics)
• Crash and performance reporting (Firebase Crashlytics and related tools)

These services may process data such as device information, IP address, usage data and crash reports.

5.2 Google Maps SDK

The App uses Google Maps SDK to display maps and support location-based features. Google may process location and usage data in accordance with its own terms and privacy policy.

5.3 RevenueCat

We use RevenueCat to manage subscriptions and validate purchases. RevenueCat receives transaction-related data and anonymized identifiers necessary to manage your subscription status.

These third-party providers act as data processors or independent controllers, depending on the circumstances. Their use of your data is governed by their own privacy policies.

6. Data Retention

We retain your data for as long as your account is active and as long as necessary to provide the App and its services. When you delete your account or request deletion, we will delete or anonymize your personal data within a reasonable period, unless we are required to retain certain data for legal or regulatory reasons.

If you delete specific content (such as notes, photos or field data), that content will be removed from our active systems within a reasonable processing time.

7. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights regarding your personal data:

• Right of access: to request information about the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data, subject to legal obligations.
• Right to restriction of processing: to request that we limit the processing of your data in certain circumstances.
• Right to data portability: to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller where technically feasible.
• Right to object: to object to processing based on legitimate interests in certain circumstances.
• Right to withdraw consent: where processing is based on consent (for example, location data), you may withdraw your consent at any time.

To exercise any of these rights, please contact us at support@11latoa.com.

You also have the right to lodge a complaint with your local data protection authority. In Finland, this is the Office of the Data Protection Ombudsman.

8. Security

We take reasonable technical and organizational measures to protect your personal data, including:

• Encrypted network communication (HTTPS);
• Secure storage of passwords (hashed and salted);
• Encrypted data at rest managed by Firebase/Google Cloud;
• Access controls and authentication to limit access to data to authorized personnel and systems.

However, no security system is completely infallible. We cannot guarantee absolute security of your data.

9. Children’s Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe that a child under 13 has provided us with personal data, please contact us and we will take steps to delete such data.

10. International Data Transfers

Your data may be processed and stored on servers located in the EU or in other countries where Google Cloud and our service providers operate. When data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place, such as the use of Standard Contractual Clauses or other GDPR-compliant transfer mechanisms.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to inform you, for example by displaying a notice in the App or on our website.

Your continued use of the App after any changes to this Privacy Policy have become effective will constitute your acceptance of those changes.

12. Contact

If you have any questions about this Privacy Policy or our data processing practices, please contact us:

Koskenkorvan Trahteeri / 11latoa Oy
Email: support@11latoa.com
Website: https://peltolohkot.fi/pro