Your farm data stays yours.

HarvestMark Privacy Policy

Public URL: https://sunniebendtech.ca/harvestmark/privacy

Data deletion: https://sunniebendtech.ca/harvestmark/delete-data

In-app link: Settings > Privacy

Controller: Sunniebend Technologies Inc., Manitoba, Canada

Contact: support@sunniebendtech.ca

Effective date: 2026-09-28

Our promise to farmers

Your farm records stay on your phone until you unlock sharing. Fields, bins, yields, and sample moisture never leave the device unless you have HarvestMark+ and you tap Share farm. Store Result on the meter is temporary on-screen only — it is not saved and not synced. Log Moisture activities are saved on the device and, if you have sharing on, synced with that farm.

Your farm records are yours. Yields, acres, moisture, bin inventories, and what you seeded or sprayed are not a product we sell.

• Stored in Canada. If you turn on farm sync (HarvestMark+), that copy lives on our backend in Canada Central (ca-central-1). We do not move farm content to the United States or anywhere else for “analytics.”
• Anonymous to us. HarvestMark has no name, email, phone, or advertising ID. Devices are identified only by a random install ID. We cannot tell which legal land or which family farm is yours from a login, because there is no login.
• Never sold. Never licensed. Never given to aggregators. We will never sell, rent, barter, or otherwise provide your farm data — including yields, production, inventories, or field activity — to commodity traders, grain companies, data brokers, advertisers, or any other third party that would use it to influence prices or market against you.
• Not used to train models on your farm. We do not mine synced records for industry benchmarks, AI training, or marketing lists.
• You can take it with you. Settings → Export My Farm Data writes one Excel workbook (.xlsx) you can open on your computer. You can delete the farm in-app or email support@sunniebendtech.ca.

The rest of this policy is the binding detail.

1. Who we are

Sunniebend Technologies Inc. ("Sunniebend", "we") of Manitoba, Canada is the data controller for HarvestMark (com.sunniebendtech.harvestmark on Android; HarvestMark on iOS).

Contact for privacy questions, access, correction, and deletion requests: support@sunniebendtech.ca. We aim to reply within 30 days.

2. What HarvestMark does

HarvestMark is an offline-first farm record-keeping app: moisture-meter correction (Canadian Grain Commission tables), fields, field activities, bin yards, bin contents, and optional local notifications you turn on.

• Default: fully offline. No login. Data stays on your device unless you share your farm (§4).
• Optional: HarvestMark+ unlock, QR farm invites so people you trust can share one farm, and an Excel (.xlsx) export for your own records.

3. Data stored on your device (always)

Stored in a private app database (harvestmark.db) and private preferences. It is not sent to us unless you share your farm (§4).

No name, email, phone number, contacts, photos, or files are collected by us.

4. Optional sync & sharing (Supabase) — only if you share your farm

Sync lets devices you invite read and edit one shared farm.

• Farm records — uploaded only when you have HarvestMark+ and tap Share farm: farm, fields (including corners), field activities, logged sample moisture (the Log Moisture button — not Store Result), bin yards, bins, bin contents, and bin activities, plus the anonymous farm ID and install IDs of participating devices. updated_by is the install ID that last wrote the row. Meter preferences, notification settings, Store Result scratch values, and the offline satellite PNG are not uploaded.
• Plus licence check — sent as soon as you buy HarvestMark+, before any sharing: your random install ID, the purchase token/transaction details, and your device name/model, so we can verify the purchase and enforce the 3-device limit (§6). Buying Plus alone uploads no farm records.
• Where: Supabase Postgres on our instructions. TLS in transit, encrypted at rest. Region Canada Central (ca-central-1). Farm content does not leave Canada for processing.
• Who can see it: only members of that farm (you and people who scan your QR). Row-level security prevents other HarvestMark users from reading your rows. We, as operator, can access the database only to run the service, fix outages, or honour a deletion request — not to build marketing or commodity datasets.
• Owner vs member. The device that enables sharing is the owner (rename farm, mint/revoke QR, nickname and remove devices, delete the synced farm). Members can read and edit field and bin records and the farm name, but cannot delete the farm or manage devices. Share and Join require HarvestMark+.
• QR invites: random single-farm token, 7-day expiry; owner can refresh. Removing a device retires all current invites, so a removed device can only rejoin with a newly generated QR. Treat invite screenshots like passwords.
• Instant updates (push): while a farm is shared, the phone gets a Firebase Cloud Messaging (FCM) token from Google and we store it with its install ID in the same Canadian database. When a member saves a change, our server asks FCM to wake the other members' phones with a message that contains only the farm ID; each phone then syncs from our server directly. No farm records pass through Google. The token is created only once a farm is shared, and is deleted with Delete My Data or when FCM reports it expired.
• If you never share your farm, nothing in §3 leaves your device except the Plus licence check in §6 (install ID and purchase data, only if you buy Plus) and the OS-level and map/table fetches in §7.

5. Camera, location, and notifications (permission-gated)

You can deny camera or location and keep using manual entry.

6. HarvestMark+ one-time purchase — up to 3 devices per Google account

• Free tier: 4 fields and 1 bin yard. HarvestMark+ is a one-time purchase (not a subscription) that raises those caps.
• Who processes payment: Google Play Billing (Android) or the App Store / StoreKit (iOS). We never receive your card number, expiry, or CVV.
• What we receive: purchase token / transaction ID, product ID, status, timestamp, store account obfuscation ID (if any), plus your random installUuid, and the device's name or model (for example "Galaxy S20") with when it last checked in, so you can tell your devices apart. Purpose: verify with Google/Apple, unlock Plus, enforce the 3-device limit.
• Tied to your store account: the purchase belongs to the Google (or Apple) account that bought it and can't be moved to another account. It works on up to 3 devices at once.
• Transfers: on a 4th device, choose one of your 3 devices to transfer HarvestMark+ from; that device loses Plus. One transfer every 30 days. If a device is lost or stolen, email support@sunniebendtech.ca.

7. Third parties that necessarily receive something

No advertising, attribution, analytics, crash-reporting, or data-broker SDKs of our own are in the current app. To be explicit about “no analytics, no tracking”: we perform none — but the Google-operated components (Maps SDK, Play services code scanner/billing, Firebase Cloud Messaging) necessarily send Google their own usage and diagnostic data as part of operating those services; that stream goes to Google, under Google's policies, and carries no farm records from us. We do not send farm records to anyone except Supabase when you share your farm, and then only for that farm.

8. What we do NOT do

• We do not sell farm data. We do not sell personal information. We do not “share” for cross-context advertising (CCPA/CPRA). No IDFA / App Tracking Transparency prompt; no cross-app profiling.
• We do not provide yields, inventories, acres, or activity logs to grain buyers, elevators, commodity funds, agronomic data platforms, or any aggregator — paid or free.
• No email/phone collection, no contact-list upload, no compulsory accounts.
• Farm sync content is used only to provide sync to the devices you invite.

9. Retention, backups, deletion, and export

• On-device: kept until you delete it. Uninstalling removes the private database except OS backups below.
• Export: Settings → Export My Farm Data writes one Excel workbook (.xlsx) of the current farm (fields, corners, activities, yards, bins, contents, bin activities, logged sample moisture). The file stays on your device / share sheet. We do not receive a copy.
• OS backups: Android Auto Backup / iCloud may keep an app-data copy under your Google/Apple account. Disable app backup in OS settings to avoid this.
• Synced farms: retained until you delete the synced farm in-app or request deletion. Deleting a synced farm removes its records from our database immediately; the empty farm marker is purged within 90 days. Deleting an individual record wipes its contents immediately and keeps only an anonymous ID and deletion time so other devices remove it too.
• Purchase/licence records: up to 7 years for tax and fraud prevention, then minimised.
• Delete My Data (Settings): wipes every farm record, cached map image and export on this phone. If the phone ever used sync or HarvestMark+, it also deletes the cloud copy of farms it owns (for every member), removes it from farms it joined, releases its HarvestMark+ activation, and deletes its anonymous sync sign-in. Purchase/licence records are kept as above, and the purchase itself is unaffected. If the phone is offline, the cloud part runs the next time the app opens with a connection.
• How to request deletion: in-app, or email support@sunniebendtech.ca with your install ID (Settings) and farm name. We reply within 30 days. Full steps: https://sunniebendtech.ca/harvestmark/delete-data

10. Security

TLS in transit, Supabase Row-Level Security, server-side purchase verification, per-device purchase seats, expiring QR invite tokens. Keep devices locked and invite codes private. Report issues to support@sunniebendtech.ca.

11. Children

HarvestMark is a general-audience farm tool, not directed at children under 13. If you believe a child provided synced data, contact us and we will delete it.

12. International transfers & Canadian / EU / California rights

• We are in Manitoba, Canada (PIPEDA). Synced farm data is hosted in Canada (§4). Map tiles and store checkout are handled by Google/Apple as described in §7.
• Your rights: access, correction, deletion, portability (in-app Excel export or on request), objection, and withdrawal of sync (stop sharing + delete the cloud copy). Exercise via support@sunniebendtech.ca. You may complain to the OPC (Canada), your EU/UK authority, or the California AG; please contact us first.
• California: we do not sell or share personal information as those terms are defined for advertising.

13. Changes

Material changes are announced in-app and with a new effective date above at least 14 days before they apply to synced/Plus data. The live URL is always current; prior versions on request.

14. Contact

Sunniebend Technologies Inc., Manitoba, Canada — support@sunniebendtech.ca. Postal address provided on request / with formal complaints.

Appendix A — Google Play Data safety mapping

• Location → Precise location — App functionality (pins, nearby shortcuts); shared with our Canadian backend only if you share your farm. Optional.
• App activity → Field/bin/meter logs — App functionality; synced only if you enable Share farm. Logged sample moisture syncs; Store Result does not.
• Financial info → Purchase history (Plus token/status) — App functionality; processed by Play, verified via our backend.
• Identifiers → Install ID / farm ID (pseudonymous) and FCM push token (Device or other IDs) — App functionality; sync/Plus only.
• Photos/video → Not collected (camera used only to decode QR).
• Contacts, messages, health, etc. → Not collected.
• Data encrypted in transit. Deletion: in-app (Settings → Delete My Data) + support@sunniebendtech.ca; web page sunniebendtech.ca/harvestmark/delete-data.
• No independent sharing with advertisers or data brokers.

Appendix B — Apple App Privacy mapping

• Tracking: No.
• Data Linked to You (only if you use sync/Plus): Precise Location, User Content (farm records), Purchases, Identifiers — App Functionality, Fraud Prevention.
• Data Not Linked to You: none beyond ordinary OS diagnostics you may send to Apple yourself.
• SDKs: Supabase (sync backend, Canada), Firebase Cloud Messaging (push wake-ups, Android), Google Maps SDK (maps), StoreKit (purchase).

Appendix C — Permission rationale

• INTERNET / ACCESS_NETWORK_STATE: map tiles, CGC table refresh, and (when enabled) sync + purchase verification.
• No CAMERA permission: QR invites are scanned with the Google Play services code scanner, which returns only the decoded text to the app.
• ACCESS_FINE_LOCATION / When In Use: user-placed pins and nearby shortcuts; never background.
• POST_NOTIFICATIONS: only after you check an activity type in Settings.
• BILLING: HarvestMark+ purchase.