Politique de confidentialité

This Privacy Policy describes how Renan Rafael Bertoldo ("we", "us", or "the developer") collects, uses, processes, and shares information when you use the mobile application PulveCast (identifier com.pulvecast.app on iOS and Android), the website pulvecast.com, and all related services (collectively, the "Service").

By using the Service, you agree to the collection, use, and processing of information in accordance with this policy. If you do not agree with these terms, please do not access or use the Service.

1. Information We Collect

1.1 Information You Provide

• App preferences (on-device): Equipment type, operational limits, crop/nozzle presets, checklists, favorite locations, language, and units. These are stored in local storage on your device and are never sent to PulveCast Cloud.
• Field records (on-device): Clients, farms, fields and their outlines, equipment, service orders and the application log you type or import, including photos you attach. They stay on your device unless you turn on PulveCast Cloud. Photos are re-encoded on the device, which removes their location and camera metadata, and they are never uploaded.
• Support and Contact: Any emails, suggestions, or reports you send to us for customer support.

1.2 PulveCast Cloud (optional)

PulveCast Cloud lets a spraying company share its records with its team and its customers. It is off unless you create an account or join a company with an invite code.

• Account: your email address and a password, or the sign-in you choose with Google or Apple (we receive the email address, the name and an identifier of that account from Google or Apple, never its password). Passwords are handled by Firebase Authentication; we never see or store them.
• Settings: the units and formats you choose in the web system, and, if you turn on service order alerts, whether you want each alert and the daily summary, its time, your time zone and language.
• Push notifications (optional): when you turn on service order alerts, a Firebase Cloud Messaging token of this installation, so our server can tell you about orders assigned to you. It is deleted when you sign out, turn the alerts off or delete the account.
• Company and team: the company name, the email address and role (admin, manager, operator or client) of each member, and the invite codes created by an admin (valid for up to 31 days).
• Company records: the field records described in 1.1: clients with the details you type (name, tax id such as CPF/CNPJ, contact name, phone, email, notes), farms and field outlines, sensitive areas you draw near them, equipment (including drone flight limits), service orders with prices and costs, and application records with products, field readings and the forecast saved with them. Each record carries the identifier of the user who last changed it.
• Photos of applications: when a team member's phone is signed in to the company, a smaller copy (1280 pixels, re-encoded on the phone, without location data) of each photo attached to an application is uploaded so the office can see it and print it in the report. By default only on Wi-Fi. The original stays on the phone.
• Change history: for each company record, who created, changed or deleted it (their user identifier and the email address of their membership at the time), when, and which fields changed. Visible to the company's admins and managers.
• Storage used: how much space the company's records and photos take, compared with the limit of its plan.
• Emails we send: to tell a company's owner that it was approved or suspended, its admins that its plan or its storage is about to run out, PulveCast's own administrators that a company is waiting for approval, and a person whose email address an admin typed in an invite (with the invite code). We keep a record of each email sent (its subject, number of recipients and date) to avoid sending it twice.

The company decides what is entered about its own customers and is responsible for having a legal basis to do so; for that data we act as a processor on the company's behalf (an operador under the LGPD). Each company's records are kept separate from every other company's, and a member with the client role sees only the records of the customers the admin assigned to them.

1.3 Partner Codes (optional)

• Redeeming a code: The code you type is sent to our server together with a random identifier of your app installation (not linked to your name, email or device identifiers), so the partner's offer can be applied. No sign-in is required; Google Play and the App Store apply each offer at most once per store account.
• Partner commission records: For subscriptions started with a partner code or through a partner's link, we receive from Google Play and the App Store the subscription and order/transaction identifiers, the country and the amount charged for each billing period (including renewals and refunds), and store them with the partner code to calculate the partner's commission. These records contain no name or email address.
• Install source (Android): The app reads the Google Play Install Referrer once to learn which campaign or partner link led to the installation, and reports it to Firebase Analytics.

1.4 Information Collected Automatically

• Precise Location Data: With your explicit consent, the Service may access your device's GPS/location coordinates to fetch local weather forecasts and agricultural metrics. Location coordinates are transmitted anonymously to weather API providers, are processed in volatile memory, and are not stored permanently on our servers. You can enter locations manually instead, in which case no GPS data is collected.
• Sensor Data (Device Orientation/Motion): The app may access device orientation data locally to power the wind direction compass. This data is processed on your device and is not uploaded to our servers.
• Usage and Diagnostics: Aggregated analytics (operating system version, device model, app version, language settings, and feature usage events) via Firebase Analytics to diagnose issues and improve the product. We do not use this data for advertising or cross-app tracking.
• In-App Purchases and Entitlements: Transaction identifiers, receipt/purchase validation logs, and subscription status (e.g., active monthly Pro subscription) for Apple App Store (iOS) or Google Play (Android). We do not collect or store your financial information, credit card numbers, or billing addresses — these are handled exclusively by Apple or Google.
• App integrity: Firebase App Check tokens may be used to protect backend APIs (for example, the Apple WeatherKit proxy) from abuse.

2. How We Use Information

• To deliver local weather forecasts, wind conditions, Delta T, spray drift risk index, and thermal inversion warnings.
• To validate in-app purchases and restore premium entitlements.
• If you use PulveCast Cloud: to sign you in, keep your company's records in sync between its members' devices, and show its dashboard.
• To monitor app security, detect fraud, and verify app integrity (e.g., via Firebase App Check).
• To analyze anonymous, aggregated usage statistics to improve features.
• To comply with regulatory and legal obligations.

3. Legal Basis for Processing (GDPR / LGPD)

If you reside in the European Economic Area (EEA), United Kingdom (UK), or Brazil (LGPD), our processing of your personal data rests on:

• Contractual Performance: To provide weather features, tools, PulveCast Cloud accounts, and manage Pro subscriptions purchased through the stores.
• Consent: For precise GPS coordinates when you grant location permission. Consent can be revoked at any time via your device settings.
• Legitimate Interests: To maintain security, verify app integrity, and resolve software bugs.
• Legal Obligation: To maintain purchase records or respond to law enforcement requests.

4. Third-Party Services and Data Integration

The Service integrates third-party APIs to deliver core functionalities. These services process data under their own respective privacy policies:

We do not sell your personal data, and there are no third-party ad networks embedded in the application. We do not use App Tracking Transparency / IDFA for advertising.

5. Data Storage, Security, and Transfers

Most preference data remains on your device. Purchase validation, WeatherKit proxy requests and PulveCast Cloud data are processed via Firebase/Google Cloud infrastructure (primarily United States data centers) using TLS in transit and encryption at rest. Access to PulveCast Cloud records is restricted by server-side rules to the members of the company that owns them. While we take reasonable steps to secure the Service, no internet-based service can guarantee 100% security.

6. Data Retention

• On-device preferences and field records: Remain until you delete them, clear app data or uninstall the app.
• PulveCast Cloud: Kept while the account and the company exist. A deleted record leaves only a marker with its identifiers and deletion date, so other devices remove it too. When you delete your account, it is scheduled for 14 days later, so it can still be cancelled; after that date it is deleted for good. When the company's owner deletes their account, the company and all its records and photos are deleted with it.
• PulveCast Cloud photos: Deleted from our servers automatically two years after they were uploaded (the copy on the phone that took them is not affected), or earlier when the record is deleted or taken out of the cloud by the company's admins.
• Change history: Each entry is deleted automatically two years after the change.
• Old company records: A company's admins can take applications and finished service orders older than a date out of the cloud (Settings → Storage); only a small marker with their identifiers and dates stays, and the phones keep their own copies.
• Analytics: Aggregated usage events are retained according to Firebase Analytics retention settings (typically up to 14 months).
• Purchase records: Entitlement validation logs may be retained as needed to support restores and fraud prevention, subject to Apple/Google policies.
• Partner commission records: Kept, without name or email, for as long as needed to pay and audit partner commissions and to meet accounting obligations.

If you created a PulveCast Cloud account, you can delete it in the app (Company → My account → Delete account) or in the web system (Settings → My account). The deletion happens 14 days after the request, and until then the same screen lets you cancel it. Without an account, nothing about you is kept on our servers apart from the records above. Customers of a company who want their data corrected or deleted should first ask that company; you can also contact us. To request deletion of any personal data you may have sent by email (for example, support messages), contact us at support@pulvecast.com.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, restrict processing, or delete your personal data. To exercise these rights, contact us at support@pulvecast.com. We will reply within 30 days.

8. Service Suspension without Prior Notice

We reserve the right, at our sole discretion, to suspend, terminate, or completely discontinue the Service at any time, for any reason, without notice. If the Service is discontinued, no refunds, reparations, or compensations will be paid by the developer beyond any remedies available under Apple App Store or Google Play policies for auto-renewable subscriptions.

9. Children's Privacy

The Service is not intended for or directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe we have accidentally collected data from a child, please contact us for immediate removal.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be marked with the "Last updated" date at the top. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

11. Contact