Crop Ops Privacy Policy

1. Information We Collect

Crop Ops collects the following categories of information when you use the app:

1.1 Account & Profile Information

Name, email address, username, and password (used for authentication).
User role (e.g., Drone Operator, Field Officer, Super Admin).
Phone number (if provided).
Profile photograph (if you choose to upload one).

1.2 Operational & Work Data

Job, field, and task information that you create, view, or update.
Farmer details (name, phone number, village) entered as part of job records.
Crop type, scheduled dates, drone assignments, and task completion details.
Payment and settlement records.
Reward points and transaction history.

1.3 Location Data

Precise GPS coordinates (latitude, longitude, altitude, heading, speed, and accuracy) captured from your device when you grant location permission.
Location data is collected only while the app is in active use (foreground). Crop Ops does not collect location data continuously in the background.

1.4 Camera & Photo Library

Photographs captured using your device camera or selected from your photo library when you attach images to jobs, tasks, payment records, or your profile.
Images are uploaded to our cloud storage and the resulting URL is saved in the associated record. We do not access your camera or photo library without your explicit action.

1.5 Device & Technical Data

Device type, operating system version, and app version.
Push notification tokens generated by Firebase Cloud Messaging (FCM).
Locally stored session data (authentication token and user profile) via on-device storage (AsyncStorage) to keep you signed in between sessions.

2. How We Use Location Data

Crop Ops uses precise location data to support field operations. Location access is requested only when it is needed for specific app features.

To capture GPS coordinates for fields, jobs, and task updates.
To map polygon areas for field boundaries and calculate acreage.
To show the user’s current position while working in the app.
To confirm where field activity or task processing took place.
To share a live location snapshot with the connected Crop Ops web system when a work-related location request is triggered via real-time channels (Pusher).
To fetch weather data for the current field location via OpenWeatherMap.
To look up place names, addresses, and driving route analysis via Google Maps and Google Places services.

Crop Ops does not collect location data continuously in the background, and location data is never used for advertising or unrelated tracking purposes.

3. When Permissions Are Requested

The app may request the following device permissions. Each permission is requested only when needed for a specific feature:

Permission	When Requested
Location (precise, foreground only)	Adding or updating a field/job location; processing a task that requires GPS confirmation; viewing your position on the map; responding to a live location request from the web application.
Camera	Capturing a photograph for a job, task, payment record, or profile picture.
Photo Library / Storage	Selecting an existing image from your device gallery to attach to a job, task, payment record, or profile.
Push Notifications	Receiving task assignments, job updates, and operational alerts via Firebase Cloud Messaging.
Internet	All core functionality, including API communication, image uploads, map rendering, and weather data.

If you deny any permission, the features that depend on it may not work correctly or may be unavailable. You can change your permission settings at any time in your device’s system settings.

4. How We Use Your Information

We use collected information to:

Authenticate your identity and manage your user session.
Provide core app functionality and support agricultural field operations.
Save and manage jobs, tasks, field records, payment settlements, and related updates.
Send push notifications about task assignments, job updates, and operational alerts.
Display maps, routing information, and location-based search results.
Fetch weather conditions relevant to your current field location.
Track and display reward points and transaction history.
Upload and store images associated with operational records.
Improve reliability, accuracy, and operational reporting.
Maintain security, troubleshoot issues, and keep service records.

5. Third-Party Services

Crop Ops integrates the following third-party services to provide app functionality. Each service may collect or process certain data in accordance with its own privacy policy:

Service	Purpose	Data Shared
Firebase Cloud Messaging (Google)	Push notifications	Device token, topic subscriptions (user email hash, role)
Google Maps & Google Places	Map display, place search, route analysis	GPS coordinates, search queries
OpenWeatherMap	Weather data for field locations	GPS coordinates
Pusher	Real-time communication (live location requests)	Channel subscriptions, event data

We encourage you to review the privacy policies of these third-party services:

Google Privacy Policy (covers Firebase and Google Maps)
OpenWeatherMap Privacy Policy
Pusher Privacy Policy

6. Data Sharing

Your information may be shared with the following parties, and only as necessary to operate the service:

Crop Ops backend services: Job, task, user, and location data is transmitted to our backend servers to provide app functionality.
Authorized users within your organization: Depending on user roles, supervisors and administrators may view operational data such as task completion, field locations, and job records.
Cloud storage providers: Uploaded images are stored on cloud infrastructure (Google Cloud Storage).
Third-party services: As described in Section 5 above, limited data is shared with third-party APIs to provide maps, weather, notifications, and real-time communication.

We do not sell, rent, or trade your personal information to any third party. We do not use your data for advertising purposes.

7. Data Storage & Retention

7.1 On-Device Storage

Crop Ops stores your authentication token and user profile locally on your device using AsyncStorage to keep you signed in between sessions. This data is removed when you sign out of the app.

7.2 Server-Side Storage

Operational data (jobs, tasks, fields, payment records, reward transactions, and uploaded images) is stored on our backend servers and cloud storage infrastructure.

7.3 Retention Period

We retain your data for as long as needed to provide the service, maintain business records, fulfill legal obligations, resolve disputes, and support agricultural and operational workflows. When data is no longer needed, it is securely deleted or anonymized.

8. Data Security

We implement reasonable technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encrypted data transmission over HTTPS/TLS.
Token-based authentication (Bearer tokens) for all API requests.
Role-based access controls within the app and backend systems.

However, no method of electronic transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Rights & Choices

You have the following rights regarding your data:

Permission controls: You can grant or revoke location, camera, photo library, and notification permissions at any time through your device settings.
Access your data: You may request a copy of the personal data we hold about you by contacting us.
Correct your data: You can update your profile information directly within the app, or request corrections by contacting us.
Delete your data / Delete your account: You may request deletion of your account and associated personal data by contacting us at the email address provided below. We will process your request in accordance with applicable laws and within a reasonable timeframe.
Withdraw consent: Where processing is based on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before the withdrawal.
Sign out: Signing out of the app clears your locally stored session data and unsubscribes you from push notification topics.

10. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, including countries where our backend servers and third-party service providers are located. By using the app, you consent to the transfer of your information to these countries, which may have different data protection laws than your jurisdiction.

11. Children’s Privacy

Crop Ops is designed for business and operational use in agricultural settings. The app is not intended for, directed at, or designed to attract children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or app features. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Your continued use of the app after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

App Name: Crop Ops
Developer: Cloudborne (Pvt) Ltd
Email: info.gsentry@gmail.com
Website: cloudborne.lk