Privacy Policy

HarvestPro is the data controller for harvest-pro.app. This policy explains what personal data we collect, why, who sees it and what you can do about it, under the Personal Data Protection Act B.E. 2562 (PDPA).

It applies to everyone who uses HarvestPro: farmers, farm members, buyers and experts.

Most of this is data you enter or upload yourself.

Account

Name, email, phone number, birthday, gender, password (stored as a hash), profile photo, and your Google or LINE profile if you sign in with them.

Farm

Farm name and location, boundaries, tree positions, planting and harvest records, activity logs, and photos and videos you upload, including drone footage.

Location

Your device location, only when you allow it in your browser, for example to place your farm or trees on the map.

Sensors

Readings from sensors and devices you connect, such as temperature, humidity and soil moisture, with timestamps.

AI results

Tree counts, yield forecasts and disease detections produced from your photos and videos.

Marketplace

Listings you post, interests you send or receive, and chat messages with other users.

ID number

If you join a digital voucher programme run by a third party, your Thai national ID number. It is stored encrypted and only the last four digits are shown.

Expert application

If you apply to be an expert, your CV and the qualifications you send.

Notifications

Your LINE user ID, display name and picture if you pair LINE, and a browser push subscription if you allow push notifications.

Contributions

Photos and labels you send through Contribute, and the points you earn.

Usage

Only if you accept analytics: pages visited, clicks, errors and screen recordings of your visit, linked to your account ID and role once you sign in. Typed text is hidden.

Browser storage

Cookies and browser storage that keep you signed in and remember your language and privacy choices. Analytics storage is only set after you accept.

Technical

IP address, browser type and sign-in times, in server logs.

The PDPA requires a legal basis for each use. Ours are:

Contract

Running your account and the farm tools you asked for.

Contract

Producing counts, forecasts and disease results from your data.

Contract

Running the marketplace and passing interests and messages between buyers and farmers.

Consent

Enrolling you in a third-party voucher programme and sending it the reports it requires.

Consent

Training and improving our AI with photos you send through Contribute.

Consent

Sending farm and sensor alerts through LINE or push notifications.

Consent

Usage analytics and screen recordings.

Consent

News and offers.

Legitimate interest

Keeping the service secure, preventing abuse and fixing errors.

Legal obligation

Keeping records the law requires and answering lawful requests.

We do not sell personal data. We share it only as follows.

Other users

Your listings and the name on them are visible to buyers. Messages you send are visible to the person you chat with. Farm members you add can see that farm.

Service providers

The services listed in the next section, bound by contract to process data only on our instructions.

Third parties

If you join a voucher programme, the details it needs and the ongoing reports described under Voucher programmes.

Authorities

When the law requires it.

We use outside services for these jobs:

AI

Reads scale displays and fruit photos you send.

Email

Sends sign-in, account and notification emails.

Hosting

Cloud hosting, file storage and network delivery that run the app and keep your files.

Backups

Keeps copies of our database so it can be restored.

Weather

Weather data for your farm location.

Maps

Map and satellite images of your farm area.

Push

Browser push services that deliver the notifications you allow.

Analytics

Product analytics and session recording, only after you accept.

Sign-in

Google or LINE, when you choose to sign in with them.

Some of these services store or process data outside Thailand. We send data abroad only where the destination has protection the PDPA recognises as adequate, with appropriate safeguards such as contract terms, or with your consent.

• Some users join a government support programme run by a third party. If you enrol, the programme receives your ID number and the contact details it needs.
• While you are enrolled, it also receives ongoing daily reports of your app usage and sensor readings.
• You cannot delete your account yourself during the programme. Email us and we will help.

durico888@gmail.com

• Your data is kept until you delete your account.
• When you ask to delete your account, it is held for 30 days. When you sign in during that time, you can choose to cancel it. After 30 days it is deleted.
• Marketplace chat messages are deleted with your account.
• Backups expire within 30 days.
• Voucher programme records are kept as the programme requires.
• Usage analytics no longer linked to you may be kept to understand how the app is used.
• Server logs are kept for a short period for security.

You can:

• Access your data and get a copy.
• Receive it in a machine-readable format (JSON), or have it sent to another service where feasible.
• Correct data that is wrong or out of date.
• Delete or anonymise your data.
• Restrict or object to processing.
• Withdraw consent at any time. This does not affect what was done before.
• Complain to the Office of the Personal Data Protection Committee (PDPC).

Download your data or delete your account at Settings > My data. For anything else, email us. We answer within 30 days.

• Analytics and recordings: change your answer at any time with Privacy choices.
• News and offers: switch on or off in the same panel when signed in.
• Alerts: manage LINE and push notifications in each sensor's notification settings.

Data travels over TLS. Passwords are stored as hashes and ID numbers are encrypted. Access is role-based and limited to the people who need it. We take daily backups. No system is perfectly secure. If a breach puts your rights at risk, we notify the PDPC within 72 hours and tell you when the law requires it.

HarvestPro is meant for adults. If you are under 20, ask a parent or guardian before signing up. If we learn we hold a child's data without the consent the PDPA requires, we delete it.

We may update this policy. The date at the top shows the current version. If a change matters to you, we ask you to accept it again the next time you sign in.

For privacy requests, questions or complaints: durico888@gmail.com