Privacy policy
At Place we respect your privacy. This policy explains what data we collect, why we use it, how long we keep it and what rights you can exercise. If you have questions, contact us at [EMAIL_LEGAL].
1. Data controller
The data controller for your personal data is [RAZON_SOCIAL], tax ID [NIF_CIF], registered address [DOMICILIO]. Privacy contact: [EMAIL_LEGAL].
If we appoint a Data Protection Officer (DPO), their contact will be [DPO_EMAIL]. Until then, any privacy inquiry may be sent to [EMAIL_LEGAL].
2. Scope
This policy applies to use of the Place iOS mobile app, the place.app website (including the public catalog and informational pages) and associated support channels (email).
By creating an account, downloading the app, browsing the website or contacting us, you acknowledge this policy. Third-party services with their own policies (e.g. Apple App Store) are also governed by their terms.
3. Data we collect
We may process the following categories of data, depending on how you use Place:
- Account and identity data: email, user ID, sign-in method (e.g. Apple or Google), name or display name if provided.
- Garden and activity data: farms, zones, plots, crops, varieties, irrigation logs, observations, harvests, photos and notes you voluntarily enter.
- Technical and usage data: device model, OS version, app version, language, aggregated usage events, error and performance logs.
- Subscription data: plan status (Esencia/Reino), trial period, transaction identifiers provided by Apple; we do not store your full card number.
- Communication data: messages you send to support or commercial contact.
- Approximate location or weather data derived from farm location, only if you configure them for weather or recommendation features.
4. Purposes and legal basis
We process your data for the purposes below, with the legal basis indicated under GDPR Article 6:
- Provide the Place service (account management, sync, catalog, planning): contract performance.
- Manage subscriptions and billing via App Store: contract performance and legal obligation where applicable.
- Improve stability, security and product experience (aggregated analytics, error diagnosis): legitimate interest, balanced with your rights.
- Respond to support inquiries: contract performance or legitimate interest.
- Comply with legal obligations (claims, authorities, record keeping): legal obligation.
- Commercial communications or newsletters, only if you request them or give explicit consent: consent, withdrawable at any time.
5. Retention period
We retain data as long as necessary for the purposes described and to meet legal obligations:
Account and garden data: while your account is active and, after deletion, as needed for claims or backups (typically up to [PLAZO_BAJA_CUENTA], unless a different legal period applies).
Technical and security logs: limited period (e.g. [PLAZO_LOGS_TECNICOS]) unless a security incident requires longer retention.
Billing/subscription data: according to commercial and tax retention periods in Spain/EU.
6. Recipients and processors
We do not sell your personal data. We may share it with providers that supply services under data processing agreements and only per our instructions, for example:
- Cloud infrastructure and databases (e.g. [PROVEEDOR_NUBE]).
- Authentication and storage linked to your chosen identity provider.
- Apple (App Store, Sign in with Apple, subscription management) when you use its services.
- Analytics or error monitoring tools ([PROVEEDOR_ANALITICA]), with aggregated or pseudonymised data where possible.
- Legal or accounting advisers, or competent authorities when legally required.
7. International transfers
Some providers may be located outside the European Economic Area. In that case we apply appropriate safeguards (EU Standard Contractual Clauses, adequacy decisions or other measures recognised under the GDPR) and assess the protection level in the destination country.
8. Your rights
You may exercise at any time your rights of access, rectification, erasure, restriction of processing, objection, portability and withdrawal of consent (where processing is based on consent) by emailing [EMAIL_LEGAL] with a copy of ID if we need to verify your identity.
We will respond within one month, extendable by two further months in complex cases, as required by the GDPR.
9. Minors
Place is not directed at children under 14. We do not knowingly collect data from minors. If you believe a minor has provided data without valid parental consent, contact [EMAIL_LEGAL] so we can delete it.
10. Security
We apply reasonable technical and organisational measures (encryption in transit, access control, backups, vendor review) to protect your data against unauthorised access, loss or alteration. No system is 100% secure; we recommend strong access methods on your device.
12. Changes to this policy
We may update this policy to reflect legal or product changes. We will publish the current version on place.app with the last updated date. If changes are material, we will notify you by reasonable means (app, email or web notice).
13. Complaint to the supervisory authority
You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es, if you believe your data is not processed in accordance with the law.
Legal and privacy inquiries: hello@place.app