Privacy Policy

1. Introduction

Welcome to Harvestt ("we," "us," or "our"). Harvestt is operated by Scott Bromley and Joe Belcher (cofounders). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you:

• Visit our website at www.harvestt.co.uk
• Use our weighbridge and harvest tracking software for grain farms in a web browser (the signed-in product)
• Use the Harvestt mobile application on iOS (and any future Android release)

Together, these are the "Service". This policy applies to all platforms unless a section says otherwise.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account, join a farm organisation, request access, or contact us, we may collect:

• Full name
• Email address
• Account credentials (managed securely by our authentication provider, Clerk)
• Farm organisation details (farm name and related account settings)
• Payment and billing information when you subscribe (processed securely by Stripe; we do not store your full card details)
• Any other information you choose to provide (for example messages via support, feedback, or access-request forms)

2.2 Farm and Operational Data

To provide the Service, you and your farm team may enter operational records such as:

• Fields, sheds, crops, varieties, and stock units
• Harvest campaigns and related configuration
• Weighbridge loads (weights, timings, field/crop/shed assignments, and related status)
• Shed stock movements and balances
• Team membership and roles within your farm organisation

You retain ownership of this farm and operational data. We process it solely to provide, maintain, and improve the Service, and as otherwise described in this Privacy Policy.

2.3 Information Collected Automatically

When you access the Service, we automatically collect certain information, including:

• Usage Data: Pages or screens visited, features used, time spent, and interaction patterns within the product and marketing site
• Device Information: Browser type (web), operating system, device type or model, screen resolution, app version (mobile), and language preferences
• Log Data: IP address, access times, referring URLs, and error logs
• Cookies and Similar Technologies (website): We use cookies and similar technologies on the website to operate the Service, keep you signed in, and measure how the marketing site performs (see Section 5 and our Cookies Policy)

2.4 Mobile App Data Stored on Your Device

The iOS app may store limited information on your device to keep you signed in and improve day-to-day use, including:

• Authentication tokens in the device secure store (via Clerk / Expo Secure Store)
• Small preferences such as last-used form choices (local storage on the device)
• Cached operational data for offline or faster use (local database on the device)

This on-device data stays on your device unless synced to our servers as part of using the Service. Uninstalling the app or signing out clears or stops access to session tokens as described in the app.

We do not use the mobile app to collect precise location, contacts, photos, microphone, or health data. We do not sell personal information. We do not use third-party advertising SDKs in the mobile app.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain the Service: Operate weighbridge and harvest tracking, sync farm organisations and team access, and store the operational records you enter
• Authenticate users: Sign you in securely and manage farm-level permissions across web and mobile
• Process payments: Handle subscriptions, billing, and refunds through Stripe
• Communicate with you: Send account-related notifications, respond to enquiries, and provide customer support
• Improve the Service: Analyse usage patterns, diagnose issues, and improve reliability and features
• Experiments and measurement: Run first-party A/B tests on the marketing website to understand which pages work better
• Security: Detect and prevent fraud, abuse, and security incidents
• Marketing: With your consent where required, send product updates or offers (you can opt out at any time)
• Legal compliance: Comply with applicable laws, regulations, and legal processes

4. Third-Party Services

We use the following third-party services to operate and improve the Service. Each has its own privacy policy governing the use of your information:

• Clerk: Authentication and user / organisation account management (web and mobile)
• Vercel: Hosting, deployment, and web analytics
• Resend: Transactional email (for example support and onboarding messages)
• PostgreSQL database hosting: Storage of account and farm operational data (via our hosting provider)
• Stripe: Payment processing and subscription management
• Apple: If you download the iOS app from the App Store, Apple processes download and account information under Apple's terms and privacy policy. Subscriptions for Harvestt are billed through Stripe on our website, not through Apple In-App Purchase, unless we state otherwise
• Hotjar: Heatmaps and session recordings on marketing pages only to help us improve the website experience (Hotjar Privacy Policy). Hotjar is not used inside the signed-in product or the mobile app.

We do not sell your personal information to third parties. We only share information with third-party services as described above and as necessary to provide the Service. When paid advertising is active, we may use Google Ads conversion measurement on the website so we can tell whether an ad click led to a subscription; we do not use social media ad trackers.

5. Cookies and Tracking Technologies

On the website, we use cookies and similar technologies to collect and track information about your activity. Cookies are small data files placed on your device. For a full list of cookies, their purpose, and how long they last, see our Cookies Policy.

Types of cookies we use on the website:

• Essential Cookies: Required for the Service to function properly (for example authentication session cookies from Clerk)
• Analytics / Measurement Cookies: Help us understand how visitors interact with the Service and which versions of our marketing pages perform better (for example first-party experiment cookies, Vercel Analytics, and Hotjar on marketing pages)
• Advertising conversion cookies: When Google Ads is configured, Google may set cookies that link an ad click to a completed subscription on the thank-you page

The native mobile app does not use website cookies. It uses the on-device storage described in Section 2.4 instead.

You can control website cookies through your browser settings. Disabling certain cookies may affect sign-in or other functionality. See our Cookies Policy for detail.

6. Data Retention

We retain your personal information and farm operational data for as long as your account is active or as needed to provide the Service. If you close your account or ask us to delete your data, we will delete or anonymise personal information within 90 days, unless we are required to retain it for legal, accounting, or regulatory purposes.

Usage data and analytics information may be retained in an aggregated, anonymised form for longer periods to help us improve the Service.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication through Clerk
• Farm-scoped access controls so team members only see their farm’s data
• PCI-compliant payment processing through Stripe
• Secure on-device storage of auth tokens on mobile where available
• Regular security reviews and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate or incomplete information
• Erasure:Request deletion of your personal information ("right to be forgotten")
• Restriction: Request that we restrict the processing of your information
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to the processing of your personal information for certain purposes
• Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time

To exercise any of these rights, please contact us or use our Support page. We will respond to your request within 30 days.

8.1 UK GDPR

If you are located in the United Kingdom, you have rights under the UK General Data Protection Regulation (UK GDPR). Our legal bases for processing your personal information include: performance of a contract, legitimate interests, and consent. You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

8.2 EEA / EU GDPR

If you are located in the European Economic Area, you are protected under the EU General Data Protection Regulation (GDPR) and have the rights listed above. You may lodge a complaint with your local data protection authority.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy, including the use of Standard Contractual Clauses where applicable.

11. App Store Privacy Labels

Apple requires apps to declare the categories of data collected in App Store Connect ("App Privacy" labels). Our declarations are intended to match this Privacy Policy. In summary, Harvestt may collect account contact information, identifiers used for sign-in, and user content / farm operational data you enter, for app functionality. We do not use that data for third-party advertising. If Apple's labels and this policy ever differ, this policy describes our practices; contact us if something looks unclear.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: