FloraTrace Privacy Policy

This Privacy Policy describes how Flora Carbon ("we," "us," or "our"), a company based in India, collects, uses, stores, and protects personal information when you use the FloraTrace mobile application ("App"), available on the Google Play Store.

FloraTrace is a field data collection tool for forestry and carbon monitoring. By installing, registering for, or using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.

We collect the following categories of personal and field data when you use FloraTrace:

• Account information: your name and email address, provided when you register or sign in through our authentication service.
• Location data: GPS coordinates collected only while you are actively using the App ("while in use") to geotag field observations, plots, and measurements. We do not collect background location.
• Tree measurements: diameter, height, species, and related forestry metrics you record in the field.
• Plot photos: images you capture or upload of plots, trees, or site conditions.
• Field data: plot identifiers, notes, timestamps, and other environmental or project-related information you enter during data collection.
• Device and usage data: basic technical information such as device type, operating system version, and crash logs to maintain and improve App stability.

We use collected information for the following purposes:

• To create and manage your account and authenticate your identity
• To enable field data collection, geotagging, and synchronization of measurements and photos
• To support carbon monitoring, forestry assessments, and project reporting
• To communicate with you about your account, support requests, or service updates
• To improve App performance, fix bugs, and develop new features
• To comply with applicable laws and respond to lawful requests

We do not sell your personal information to third parties.

FloraTrace requests access to your device's precise location only while you are using the App. Location is used to associate field observations, tree measurements, and plot photos with geographic coordinates.

You may deny location permission; however, geotagging features will not function correctly. You can change location permissions at any time through your Android device settings. We do not track your location when the App is closed or running in the background.

User registration and sign-in are handled through Netlify Identity, a third-party authentication service. When you create an account, Netlify Identity processes your email address and authentication credentials on our behalf. Their handling of data is governed by Netlify's privacy practices. We receive only the account information necessary to identify you within FloraTrace.

We use EmailJS to send transactional emails such as password resets, account notifications, or support-related messages initiated through the App. EmailJS processes your email address and message content solely to deliver these communications. We do not use EmailJS for unsolicited marketing without your consent.

Field data, measurements, photos, and account information are stored on secure servers with access controls limited to authorized personnel. We implement reasonable technical and organizational measures—including encryption in transit (HTTPS/TLS), access restrictions, and secure authentication—to protect your data against unauthorized access, alteration, disclosure, or destruction.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

We may share your information only in these circumstances:

• Service providers: trusted partners such as Netlify Identity and EmailJS who process data on our behalf under contractual obligations
• Project partners: aggregated or project-scoped field data shared with authorized collaborators on forestry or carbon projects you participate in
• Legal requirements: when required by law, court order, or government authority in India or other applicable jurisdictions
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice where required by law

If you are located in India, you have rights under the Digital Personal Data Protection Act, 2023 (DPDP Act), including:

• The right to access information about personal data we process about you
• The right to correction and erasure of inaccurate or outdated personal data
• The right to withdraw consent where processing is based on consent
• The right to nominate another individual to exercise your rights in the event of death or incapacity
• The right to grievance redressal through our contact channel below

To exercise any of these rights, contact us at contact@floracarbon.ai. We will respond within the timeframe required by applicable law.

We retain your personal and field data for as long as your account is active or as needed to fulfill the purposes described in this policy, including project reporting and legal obligations. When you request account deletion, we will delete or anonymize your personal data within a reasonable period, except where retention is required by law or legitimate business needs (e.g., audit records).

FloraTrace is not directed at children under 18 years of age. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.

Your data may be processed or stored on servers located outside India by our service providers. Where such transfers occur, we ensure appropriate safeguards are in place consistent with applicable data protection requirements.

The App may reference or integrate with third-party services (including Google Play services, mapping providers, or cloud storage). This policy applies only to FloraTrace and Flora Carbon. We encourage you to review the privacy policies of any third-party services you interact with through the App.

We may update this Privacy Policy from time to time. We will post the revised policy at this URL and update the "Last updated" date. For material changes, we may notify you through the App or via email. Continued use of FloraTrace after changes take effect constitutes acceptance of the updated policy.

For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact:

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India as provided under the DPDP Act.