Privacy policy
BioFarmOS lets you monitor and control, remotely, a farm equipped with the BioFarmOS system. This page explains what data the app and its server process, why, for how long, who receives it, and what your rights are. The French version of this page prevails in case of discrepancy.
Who is responsible
BioFarmOS is published by WebMed SRL (BE 0509.982.745, Boulevard Industriel 9, 1070 Anderlecht, Belgium), hereafter "the publisher". Contact for any question or request about your data: info@webmed.be.
- Farm data (readings, equipment, settings, alerts, commands): the client farm is the controller; the publisher processes this data on its behalf, as a processor.
- Your account, your sign-in sessions and the notification token: the publisher is the controller.
Data processed
- Account: email address, name, role and the farm you belong to. Accounts are created by the farm administrator; the app offers no self sign-up. Your password is never stored in clear text: the server only keeps a hash of it.
- Sign-in sessions: when you sign in, the server issues an access token valid for 15 minutes and a refresh token. The server only keeps a hash of the refresh token, with its creation and expiry dates.
- Farm data: sensor readings (temperature, humidity, CO2, soil moisture, etc.), equipment state, settings and alerts. They are used to display the farm status and to carry out your commands.
- Command log: every command sent from the app or the website (for example an emergency stop or a changed setting) is recorded with the identifier of its author, their role, the date, the target equipment, the command content and its outcome. This log shows who did what on the farm.
- Notification token: if you allow notifications, the phone receives a device token from Firebase Cloud Messaging (Google). We store it with the platform (iOS or Android) and the app language, only to send you your farm's alerts.
- Website contact form: name, e-mail address and, if you provide them, farm, phone number and message. They are used only to reply to you; the team is alerted by a notification on its phone showing your name, e-mail and the start of the message.
- IP address: the app server uses it in memory, to limit repeated sign-in attempts, and does not record it. The hosting provider may log technical access data (date, IP address, request) for a limited period, as needed for security.
What the app does not do
- No advertising, no ad tracking, no audience analytics.
- No location, no access to contacts, photos, camera or microphone.
- No sale of data. Data is only shared with the recipients listed below.
On the phone
Sign-in tokens are kept in the system's secure storage (Keychain on iOS, Keystore on Android). The chosen language and a last farm snapshot, for offline display, are kept in the app's files. None of this data is included in Android backups.
Signing out erases the tokens from the phone, revokes the session on the server and unregisters the phone from notifications. Changing your password closes all your sessions and unregisters all your phones from notifications: each one must sign in again.
Recipients
- DigitalOcean: hosting of the server and database, in a DigitalOcean data center located in Amsterdam (the Netherlands, European Union).
- Google (Firebase Cloud Messaging) and, on iPhone, Apple (Apple Push Notification service): delivery of notifications. They receive the device token and the notification content (farm name and alert text).
- Telegram or another messaging service: only if the farm administrator turns on alert delivery to that service. The alert text is then sent to it, under that service's own terms.
- Google Fonts: the pages of this website load their font from Google, which receives the visitor's IP address. The mobile app does not use Google Fonts.
Traffic between the app and the server is encrypted (HTTPS). Google and Apple are based in the United States: these transfers rely on the EU-US Data Privacy Framework or, failing that, on the European Commission's standard contractual clauses.
Legal basis
The account, sessions, farm data and notifications are necessary to provide the service your farm subscribed to (GDPR Art. 6(1)(b)). The command log and the limiting of sign-in attempts rely on the legitimate interest in securing the farm and the service (Art. 6(1)(f)). Notifications are only sent if you allow them on the phone; you can turn them off at any time in the system settings.
Retention
- Account and farm configuration: as long as the account exists.
- Alerts: as long as the farm account exists.
- Sensor reading history: 30 days.
- Equipment action history: 14 days.
- Command log: 180 days.
- Sign-in sessions: the refresh token expires after 30 days without use and, in any case, 180 days after sign-in.
- Contact form messages: 12 months.
- Notification token: deleted on sign-out, on password change, or as soon as Google or Apple report it as inactive (app uninstalled).
Your rights
You can request access to your data, its correction or deletion, a copy in a common format, or object to processing. Write to the address in the Who is responsible section, or contact your farm administrator; for farm data, the publisher forwards the request to the farm and helps it respond. Account deletion is requested the same way.
You may also lodge a complaint with the Belgian Data Protection Authority: dataprotectionauthority.be.
Changes
If this policy changes, the date at the top of the page is updated.
See also the Support page.