This policy explains what personal data the GrowTracker app processes, why, for how long, and what rights you have under Regulation (EU) 2016/679 (“GDPR”) and Italian law. It also covers this website, growtracker.it.
1. Data controller
The data controller is Habitat Seeds, Via Scandellara 3/6, 40138 Bologna (BO), Italy, VAT no. 04381361205. You can contact us about any privacy matter at info@growtracker.it.
2. What data we process
- Account data: your email address and, if you sign in with Google, the name and profile picture linked to your Google account. We never see your password: it is handled in encrypted form by Firebase Authentication (Google).
- Content you enter: projects, rooms, batches, crop operations, tasks, operators, notes and any photos. If you enter your operators' names, that is personal data whose use you decide.
- Sharing data: if you invite someone to a project, their email address, the role assigned and the log of activity in the project (who did what and when).
- Subscription data: your active plan, start and expiry dates and the technical purchase identifiers received from Google Play. We do not receive or store your card or payment method details, which stay with Google.
- Diagnostic data: if the app crashes or detects a technical error, Firebase Crashlytics (Google) collects the device model, Android and app version, the point in the code where the problem occurred and a technical identifier of your account (not your email).
- Usage data: through Google Analytics for Firebase we collect statistics on how the app is used (for example which screens are opened), linked to technical identifiers and not to your name or email.
- Communications: if you write to us, your email address and the content of your message.
3. Why we process it and on what basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, providing the app, syncing data across devices, sending the reminders you set up | Performance of a contract (Art. 6(1)(b) GDPR) |
| Enabling project sharing with the people you invite | Performance of a contract |
| Managing subscriptions and free trials and verifying purchases with Google Play | Performance of a contract |
| Tax and accounting obligations on purchases | Legal obligation (Art. 6(1)(c) GDPR) |
| Finding and fixing technical errors and protecting the service from abuse | Legitimate interest (Art. 6(1)(f) GDPR) in a secure, working app |
| Usage statistics to improve the app | Legitimate interest, or consent where required by law |
| Answering your support requests | Performance of a contract or pre-contractual steps |
We do not use your data for advertising, we do not build marketing profiles and we do not sell data to third parties.
4. Who can access the data
- Google (Google Ireland Ltd. and Google LLC), which provides the Firebase and Google Cloud infrastructure that runs the app and its data, Crashlytics, Analytics and Google Play billing. Google acts as our processor, except for payments, which it handles as an independent controller under its own privacy policy.
- Register.it S.p.A., which provides the growtracker.it domain and the info@growtracker.it mailbox.
- The people you invite to your shared projects, limited to those projects and according to the role you assign.
- Advisers and authorities, only where necessary to meet legal obligations or protect our rights.
5. Transfers outside the European Union
Google may process some data outside the European Economic Area, in particular in the United States. In those cases the transfer relies on the EU–US adequacy decision (EU-U.S. Data Privacy Framework), to which Google is certified, and on the standard contractual clauses approved by the European Commission.
6. How long we keep it
- Account data and content: for as long as your account is active. When you delete your account they are erased; technical backups are overwritten within 30 days.
- Items in the app's trash: 30 days, then permanently deleted.
- Crashlytics diagnostic data: about 90 days.
- Analytics statistics: at most 14 months.
- Purchase data needed for tax purposes: for the period required by law (normally 10 years).
- Support emails: as long as needed to handle the request and at most 24 months.
7. Security
Data travels encrypted (HTTPS/TLS) and is stored on Google infrastructure with encryption at rest. Access to projects is controlled by server-side security rules: each user can only read and change their own projects and those they have been invited to, according to their role.
8. Your rights
At any time you can ask to access, correct or erase your data, restrict its processing, receive it in a portable format and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it whenever you like. You can export your data directly from the app (Settings › Export project) and delete your account in Settings › Account; for anything else write to info@growtracker.it. We reply within 30 days.
If you believe the processing breaks the law, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of the EU country where you live or work.
9. Children
GrowTracker is meant for an adult, professional audience and is not intended for people under 16. If we learn that we have collected data from a child under 16 without parental consent, we will delete it.
10. This website
growtracker.it does not use profiling cookies or any analytics or tracking tools, and does not load resources from third parties. For technical and security reasons, the hosting provider logs data such as IP address and time of visit, kept for a limited period. If you write to us through the email links on the site, we process your data as described above.
11. Changes
We may update this policy when the app or the law changes. The date of the last update is shown at the top of the page; if the changes are significant, we will also let you know in the app.
This English version is provided for convenience. In case of any discrepancy, the Italian version prevails, to the extent permitted by law.