Effective Date: May 1, 2026
Last Updated: May 1, 2026
Developer Contact: [Your Name / Company Name]
Email: [your-email@example.com]
Welcome to TheWoodFarm ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our mobile application (TheWoodFarm) and related services.
TheWoodFarm serves two types of users:
Visitors – Individuals interested in learning about our farm, booking tours, or viewing public farm data
Investors – Individuals who have invested in our farm business and require access to additional insights, performance metrics, and operational data
By using TheWoodFarm, you agree to the collection and use of information in accordance with this Privacy Policy.
We collect only basic information necessary to provide our services to visitors and investors.
Data Type
Examples
Purpose
Name
First name, last name
Identification, personalized communication
Email Address
user@example.com
Account creation, login, notifications, password recovery
Device Information
Device model, OS version, app version
App performance optimization, crash reporting
Usage Data
Pages viewed, time spent, features used
Improving app functionality, understanding user preferences
IP Address
Anonymous network location
Security, fraud prevention, analytics
Data Type
Examples
Purpose
Investment Details
Investment amount, date of investment, shareholding
Display investor dashboard, calculate returns
Contact Preferences
Preferred communication method, notification settings
Sending investor updates, reports, alerts
Transaction History
Payout records, dividend history, capital contributions
Financial reporting and transparency
Verification Documents
(If required by law) KYC information
Regulatory compliance, identity verification
TheWoodFarm displays the following farm data to users (this data is entered by us, not collected from you):
Tree growth metrics and health status
Soil and weather conditions
Harvest schedules and production forecasts
Financial performance indicators
Investor-specific return calculations
We collect information through:
Direct user input – When you create an account, update your profile, or contact us
Automatic collection – Device information, usage data, and IP addresses via analytics tools
Investor onboarding – When you complete the investor registration process
Third-party services – Authentication providers (e.g., Google Sign-In) if you choose to use them
We use your information for the following purposes:
Purpose
Legal Basis
User Type
Create and manage your account
Contract performance
Visitors & Investors
Provide farm insights and data
Contract performance
Visitors & Investors
Display investor-specific dashboards
Contract performance
Investors only
Send operational updates and farm reports
Legitimate interest
Investors only
Respond to your inquiries
Legitimate interest
Visitors & Investors
Improve app performance and fix bugs
Legitimate interest
Visitors & Investors
Comply with legal and regulatory obligations
Legal obligation
Investors only (if applicable)
Prevent fraud and secure the app
Legitimate interest
Visitors & Investors
We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal effects.
We share your information only in the following limited circumstances:
We may share data with trusted third-party services necessary to operate TheWoodFarm:
Service Type
Examples
Data Shared
Hosting & Database
Firebase, Supabase, AWS
User account data, farm data
Analytics
Google Analytics, Firebase Analytics
Usage data, device info (anonymized where possible)
Crash Reporting
Crashlytics, Sentry
Device info, app logs (no personal identifiers)
Email Services
SendGrid, Mailchimp
Email address (only if you opt in to communications)
All service providers are contractually obligated to protect your data and use it only for the services they perform for us.
We may disclose your information if required to do so by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to:
Comply with legal obligations
Protect our rights or property
Investigate fraud or security issues
Protect the personal safety of users or the public
If TheWoodFarm or its assets are acquired, merged, or sold, your information may be transferred as part of that transaction. We will notify you via email or in-app notice before your data becomes subject to a different privacy policy.
Investor-specific data (investment amounts, returns, etc.) is:
Not shared with other investors – Each investor sees only their own data
Not shared with visitors – Investor dashboards require authentication
Shared with farm management (us) – Operational necessity
We retain your personal data only as long as necessary for the purposes outlined in this policy:
User Type
Data Retention Period
Visitors (inactive accounts)
12 months after last login, then account deleted
Visitors (active accounts)
Until you request deletion
Investors (active)
Duration of your investment + 7 years (legal/tax compliance)
Investors (divested/completed)
7 years from last transaction or investment end
Usage analytics
26 months (aggregated, anonymized after this period)
After the retention period, your data will be permanently deleted or anonymized so it can no longer be associated with you.
Depending on your location (e.g., EU, UK, California, Brazil), you may have the following rights regarding your personal data:
Right
What It Means
How to Exercise
Access
Request a copy of data we hold about you
Email [your-email@example.com]
Correction
Correct inaccurate or incomplete data
In-app profile settings or email us
Deletion
Request deletion of your data (subject to legal retention)
Email [your-email@example.com]
Restriction
Limit how we use your data
Email [your-email@example.com]
Portability
Receive your data in a machine-readable format
Email [your-email@example.com]
Objection
Object to processing based on legitimate interests
Email [your-email@example.com]
Withdraw Consent
Withdraw consent where we rely on it
Email [your-email@example.com]
For investors: Some data (investment records, tax-related information) cannot be deleted immediately due to legal retention requirements. We will retain only what is legally required and delete the rest.
Send an email to: [your-email@example.com] with the subject line: "Privacy Request – TheWoodFarm"
Please include:
Your full name
The email address associated with your account
Whether you are a Visitor or Investor
The specific right you wish to exercise
We will respond within 30 days (or as required by applicable law).
TheWoodFarm is not intended for children under 13 years of age (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately, and we will delete it.
We implement reasonable security measures to protect your data:
Encryption in transit – All data transmitted between your device and our servers uses TLS/SSL encryption
Encryption at rest – Sensitive data (investor information) is encrypted in our database
Access controls – Only authorized personnel can access user data
Regular audits – We review our security practices periodically
Secure authentication – Investors use email + password (or Google Sign-In) with recommended strong passwords
Limitation: No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
If we become aware of a data breach affecting your personal information, we will:
Investigate the breach internally
Notify affected users within 72 hours (or as required by law)
Report to relevant authorities as required
Take steps to prevent future breaches
Your information may be transferred to and processed in countries other than your own. These countries may have data protection laws different from your country.
We ensure appropriate safeguards are in place for international transfers, including:
Standard Contractual Clauses (SCCs) approved by the European Commission
Data processing agreements with our service providers
Transfer impact assessments where required
If you are located in the European Economic Area (EEA) , UK, or Switzerland, your data is transferred only to countries deemed adequate by the European Commission or under SCCs.
TheWoodFarm may contain links to third-party websites (e.g., payment processors, booking systems). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.
If you are a California resident, you have additional rights under the California Privacy Rights Act (CPRA):
Right to know – Categories of personal information collected, sources, purposes, and third-party sharing
Right to delete – Request deletion of personal information (subject to exceptions)
Right to correct – Correct inaccurate personal information
Right to opt-out – We do not sell your data, so no opt-out is needed
Right to non-discrimination – We will not discriminate against you for exercising your rights
To exercise California rights, email [your-email@example.com] with "California Privacy Request" in the subject line.
California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not share your information for such purposes.
If you are in the European Economic Area (EEA) or United Kingdom, you have the following rights under GDPR/UK GDPR:
Right to be informed – This policy fulfills that right
Right of access – Obtain confirmation of whether we process your data and access that data
Right to rectification – Correct inaccurate data
Right to erasure (Right to be forgotten) – Request deletion
Right to restrict processing – Limit how we use your data
Right to data portability – Receive your data in a structured format
Right to object – Object to processing based on legitimate interests
Rights related to automated decision-making – We do not use automated decision-making
We do not have a statutory DPO at this time. For privacy inquiries, contact [your-email@example.com].
If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local supervisory authority (e.g., ICO in the UK, CNIL in France, or your local DPA).
We may update this Privacy Policy from time to time. Changes will be posted with a new "Last Updated" date.
For significant changes (e.g., new data collection, new sharing practices), we will:
Notify you via email (if we have your email address)
Display an in-app notice requiring acknowledgment
Obtain renewed consent if required by law
We encourage you to review this policy periodically.
For any questions, concerns, or requests regarding this Privacy Policy or your data:
Email: [your-email@example.com]
Response time: Within 5-7 business days for general questions; within 30 days for formal privacy requests
Mailing Address (optional):
[Your Name / Company Name]
[Your Street Address]
[City, State, ZIP Code]
[Country]
By using TheWoodFarm, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with any part of this policy, please do not use our app.
Replace the following placeholders with your actual information:
Placeholder
What to Put
[Your Name / Company Name]
Your legal name or business name
[your-email@example.com]
Your actual contact email (e.g., privacy@thewoodfarm.com)
[Your Street Address]
Your physical address (optional but recommended)
[City, State, ZIP Code]
Your location
[Country]
Your country
Copy the entire policy (from above)
Paste it into a text editor and make your customizations
Host it using one of these free options:
Google Sites – Create a free site and paste the policy
GitHub Gist – Create a public Gist (raw URL works)
Your own website – If you have one
Notion – Publish a public Notion page
Get the public URL
Play Console → TheWoodFarm → Policy and programs → App content
Privacy Policy section → Paste your URL
Save
Add a menu item in TheWoodFarm that opens this URL, for example:
Settings → Privacy Policy
About → Privacy Policy
Footer on every screen (in a web view)