Privacy Policy (Mobile App)

Last updated: 16 February 2026

This policy explains how Soil Moisture Sense Ltd ("we", "us", "our") collects and uses personal data when you use our mobile application (the "App").

Definitions

1. Controller / Processor roles

Soil Moisture Sense Ltd acts as a Data Controller for Personal Data needed to administer accounts, provide access, secure the service, and deliver support.

Where an Organisation provides Users with access and instructs us to process data on its behalf (for example, enabling Users to view sensor data associated with that Organisation), Soil Moisture Sense Ltd may act as a Data Processor and the Organisation may act as the Data Controller for those activities.

2. What data we collect

2.1 Account and identity data

• Name (if provided)
• Email address
• Organisation/farm association and roles/permissions
• Authentication identifiers (managed via Amazon Cognito)

2.2 App usage and device data

We do not intentionally collect analytics or user behaviour tracking data from within the App (for example, we do not use third-party analytics or in-app performance/crash SDKs).

2.3 Sensor / agronomy data you submit or view

• Manually entered readings and notes
• Sensor readings and associated metadata linked to your account/organisation
• Station, field, block, or location identifiers (where configured by your Organisation)

3. How we use your data (purposes)

• To provide and operate the App and related services
• To authenticate Users and enforce access controls within Organisations
• To display sensor and manually entered data to authorised Users
• To maintain security, prevent fraud/abuse, and troubleshoot service issues
• To respond to support requests
• To improve reliability and maintain service performance

4. Lawful bases for processing (UK GDPR)

We process Personal Data under the following lawful bases (as applicable):

• Contract — to provide the App/services to you or your Organisation.
• Legitimate interests — to secure, maintain, and improve the service (balanced against your rights).
• Legal obligation — where we must comply with law (e.g., regulatory or accounting requirements).
• Consent — where we explicitly ask and you choose to provide it (if ever applicable).

5. Where your data is stored

We use cloud infrastructure to operate the App. Data is stored and processed within UK and/or European Union AWS regions (as configured for the service), including use of AWS services such as Amazon Cognito for authentication.

6. Security

• Encrypted connections (HTTPS/TLS) for data in transit
• Role-based access controls for organisational accounts
• Monitoring and logging to detect abuse and improve reliability
• Restricted administrative access

We may maintain server-side security and error logs (for example within AWS services such as CloudWatch) to operate and secure the service. These operational logs are not intended to be used for user tracking across apps or websites owned by other companies.

7. Sharing and service providers

We do not sell Personal Data.

We may share Personal Data only:

• With service providers acting as processors to help us operate the service (e.g., cloud hosting and authentication providers such as AWS)
• With your Organisation's authorised administrators, where applicable
• Where required by law, or to protect rights, safety, and security
• With third parties upon your written instruction or the written instruction/authorisation of your Organisation (for example, where you authorise an integration or data export)

8. International transfers

In some circumstances, Personal Data may be accessed or processed outside the UK (for example by support or operational measures). Where international transfers occur, we use appropriate safeguards (such as standard contractual clauses or equivalent measures) to protect Personal Data.

9. Data retention

We keep Personal Data only as long as necessary for the purposes described above, including to provide services to your Organisation and meet legal obligations.

• Account data: retained while the account remains active, and for a reasonable period after closure unless deletion is requested/required.
• Operational logs: retained for limited periods to support troubleshooting and security.
• Sensor and manual entry data: retained according to organisational requirements and service configuration.

10. Your rights

Under UK GDPR you may have the right to:

• Access your Personal Data
• Correct inaccurate Personal Data
• Request deletion (where applicable)
• Restrict or object to processing (where applicable)
• Data portability (where applicable)
• Withdraw consent (where consent is the lawful basis)

To make a request, email gdpr@soilmoisturesense.com. Please include the email address used for your account and a clear description of your request.

• We may request additional information to verify your identity before fulfilling a data protection request.
• We aim to respond within one month of receiving a valid request (and may extend this period where permitted by law).

If you use the App through an Organisation, some requests may need to be handled by your Organisation's administrator.

11. Complaints

If you have concerns, please contact us first so we can try to resolve them. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): www.ico.org.uk.

12. Children

The App is not intended for children under 16.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be posted at this URL and the "Last updated" date will be revised.

← Back to Legal