Privacy Policy

1. Data Controller

The data controller for Plianta Fieldnotes is:
Daniel Kuschel
Email: privacy@plianta.com

2. What Data We Collect

When you use Plianta Fieldnotes, we collect and process the following data:

• Account data: Email address and password (for authentication)
• Profile data: Display name
• Photos: Images you capture or upload within the app, including metadata (timestamps, categories, notes)
• Session data: Inspection sessions you create, including session name, location, and team members
• Usage data: Basic analytics to improve the service (no tracking cookies)

3. Camera and Photo Access

Plianta Fieldnotes requests access to your device camera to capture inspection photos directly within the app. Photos are stored locally on your device first (offline-first architecture) and synced to the cloud when a connection is available.

We only access your camera when you actively take a photo. We do not access your photo library without your explicit action.

4. AI Photo Analysis

Plianta Fieldnotes offers an optional AI-powered photo analysis feature. When you choose to analyze a photo:

• The photo is sent to Anthropic (Claude API) for analysis
• The AI generates findings, categories, and corrective action suggestions
• You must explicitly consent before any photo is sent for AI analysis
• You can revoke your consent at any time in your account settings

Anthropic processes photos under their privacy policy. Photos sent for analysis are not used to train AI models.

5. How We Store Your Data

Your data is stored using the following services:

• Supabase (database and authentication) — hosted in the EU. Supabase Privacy Policy
• Supabase Storage — for photo uploads, hosted in the EU
• Your device — local IndexedDB storage for offline functionality

6. Data Sharing

We do not sell your data. Your data may be shared in the following contexts:

• Team collaboration: When you join a session, other session members can see photos and data within that session
• Service providers: Supabase (hosting), Anthropic (AI analysis, only with your consent), Netlify (website hosting)

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Portability — Receive your data in a machine-readable format
• Objection — Object to data processing
• Withdraw consent — Revoke consent for AI analysis at any time

To exercise these rights, contact us at privacy@plianta.com.

8. Account Deletion

You can delete your account at any time from within the app (Account > Delete Account). This permanently removes all your personal data, photos, and session memberships. See our account deletion instructions for details.

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. Anonymized, aggregated data may be retained for service improvement.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, contact us at:
privacy@plianta.com