Privacy Policy — Mi Campo
Mi Campo
← Back to the app

Privacy Policy

Last updated: 27 October 2026 · In accordance with the GDPR (EU Regulation 2016/679) and the LOPDGDD (Spanish Organic Law 3/2018 on data protection).

In short: your farm data is yours. We store it on Amazon Web Services servers in Spain (the photos you share through “Improve the AI with my corrections”, if you turn it on, are stored in Ireland), we use it to make the app work and we do not sell it or pass it on for commercial purposes. From 1 November 2026, what you write to a supplier you have added in the app may be included, always aggregated and without names, in demand signals for suppliers, with a summary every 4 weeks (section 3); if you do not want this, tell us and we will leave you out. What you write to the assistant, the photos you send it and the messages you ask it to translate go through the artificial intelligence provider (Anthropic, via Amazon Bedrock, in the United States) solely to give you the answer; when you talk to the assistant, data from your account is also sent as context, including your workers’ data (section 3). If you use QR check-in, the location of the person checking in is stored only at the moment of checking in and only the person in charge of the farm can see it.

1. Data controller

The data controller is Ali Aauicha, who provides the service under the Mi Campo con IA brand (hereinafter “Mi Campo con IA” or “Mi Campo”).

Contact: privacidad@micampoconia.com for any communication about this policy or to exercise your rights, and hola@micampoconia.com for everything else.

There are two different roles, depending on whose data it is:

In practice, this means that, with regard to your workers, it is you who must inform them that you keep their data in Mi Campo and that their working hours and location are recorded, deal with their requests for access or erasure, and decide how long those records are kept. Mi Campo gives you the tools to do this (a notice shown on the check-in screen before checking in, CSV export and deletion of records one by one), but the legal responsibility towards them is yours.

2. Data we collect

CategorySpecific dataSource
IdentificationEmail address, name or nickname, language. The password is managed by Amazon Cognito: we never see it or store it in plain textYou provide it when you sign up, or it reaches us when you sign in with Google or with Apple (your name and email). If you choose “Hide My Email” with Apple, we receive an Apple relay address instead of your real email
Farm dataFarms and plots (with their coordinates), crops and campaigns, workdays, irrigation, plant protection treatments and field log, expenses, sales, stock, harvest counts, sensor and weather station readingsYou enter it in the app, in writing, by voice or through the assistant
MessagesThe messages you exchange in the app with your crew, your suppliers or the companies that market your produce, with their attachments (files, photos, voice notes and, if you choose to, your location at that moment) and the translations you ask for. So that people can write to you, the Messages search finds you by your name for the people you are already connected with (your crew, your groups or anyone who has already talked to you), and for any user who types your full email address. The search never shows your email to anyone: only your name. In the iPhone app you cannot search for other users: Messages only shows your crew, your groups and the conversations you already have open. On the website, the search does not show you anyone you have blocked or who has blocked you (what else changes when you block someone is explained in section 3)You write them or other users send them to you
Messages reports and blocksIf you report a conversation with “Report”: who is reporting and, if it is a direct chat, who is being reported (name and internal identifier), the reason you give, the date and a copy of up to 20 messages from that conversation: the latest ones written by the person reported (in a group, the latest ones from the other members) or, if none are found, the latest ones in the conversation, including yours. For each message we keep who wrote it, to whom, when and its text and, for its attachment, the name, the type and the reference (not a copy of the file). If it is a group, also its name, who created it and the list of its members (their internal identifier). If you block someone with “Block”: the list of people you have blocked (their internal identifier), which is kept in your accountYou generate them from the “⋯” menu of a conversation; if you are the one reported, or the report includes messages of yours, it is made by another user
AI assistantWhat you write or dictate to it, the photos you attach, the account data sent to it as context (section 3) and the answer it gives you. With the no-account assistant on the sign-in screen, only what you write to it, its answers and the language (section 3). Also, a daily usage counter per account or, without an account (in the demo and in the assistant on the sign-in screen), per IP address, to apply the message limitYou generate it when you use the assistant
Workers’ check-insThe name the person types when checking in, date and time, type (check-in or check-out), GPS coordinates and margin of error at the moment of checking in, calculated distance to the farm and browser usedProvided by the person themselves when scanning the QR code placed at the farm
If you are a supplierYour name, your company, your phone number or email and whatever you tell us when you write to us about the supplier programme. If you have the supplier AI turned on: the text and documents (PDFs or photos) you upload and the summary the AI makes of each oneYou give them to us, by WhatsApp, by email or from your dashboard
People you enterFor your workers: the name and, if you fill them in, phone number, email, address, national ID number (DNI), Social Security number, pay rate, start and end dates and notes. For your suppliers: the name and, if you fill them in, tax ID (NIF), contact person, phone number, email, address and notes. The email of the people you invite to the appYou enter them, and you are the controller of this data (section 1); the invitation reaches the invited person by email
PhotosImages of delivery notes and invoices (to extract the expense or sale), of harvests (for the count) and of plants or leaves (to ask the assistant)You upload them voluntarily
TechnicalIP address, device type, language, connection time, errorsGenerated automatically when you use the app
Access logEvery time you open the app or the website while signed in: the date and time, your account identifier and email, and the type of browser or deviceGenerated automatically when you open the app or the website
Analytics (website only)Pages viewed, aggregated clicks, conversions and, every time you open the website while signed in, your account’s internal identifier (a pseudonymous code, not your email or your name)Google Analytics 4: with cookies only if you accept them; if you do not accept them, the website still sends it cookieless pings (sections 3 and 9)

3. What we use it for (purposes)

4. Who we share it with (data processors)

ProviderFunctionData location
Amazon Web Services (AWS EMEA SARL)All of the app’s infrastructure: accounts and passwords (Amazon Cognito), database (DynamoDB), API and real time, storage of photos and attachments (S3), web server (CloudFront)EU (eu-south-2, Spain). Photos from “Improve the AI with my corrections”, if you turn it on: EU (eu-west-1, Ireland)
Amazon Bedrock (AWS) with Anthropic modelsAI assistant: answers (with the account data sent as context, section 3), reading delivery notes, harvest counting, message translation and queries with photos; the no-account assistant on the sign-in screen (section 3); also the suppliers’ AI (summaries of their documents), the demand signals in section 3 and the administrator’s queries about use of the service (section 3). As a fallback, when Bedrock is not available, the same request goes to the API of Anthropic PBCUSA — under the EU-US Data Privacy Framework (AWS) and Standard Contractual Clauses (Anthropic). Under the terms of both, your messages and photos are not used to train their models
Amazon SES (AWS)Sending transactional emails (welcome, password recovery, invitations) and receiving support emailUSA (us-east-1) — under the EU-US Data Privacy Framework
Google LLCSign in with Google (optional, via Amazon Cognito) and Google Analytics 4 (website only; sections 3 and 9)USA — under the EU-US Data Privacy Framework
Apple Distribution International Ltd.Sign in with Apple (optional, only in the iPhone app, via Amazon Cognito): Apple gives us your name and your email or, if you choose “Hide My Email”, a relay address. For this sign-in, Apple processes your data under its own privacy policyUnder Apple’s privacy policy
Element 84, Inc. (Earth Search)Search for Sentinel-2 images for the NDVI map. The query is made by our server, not your device, and only with the plot’s coordinates: it does not receive your IP address or anything that identifies youUSA (catalogue) — public images from the European Copernicus programme
Open-Meteo (OpenMeteo GmbH)Weather forecast for the farm. It only receives the farm’s coordinates, without your identitySwitzerland, a country with an adequacy decision from the European Commission. Open service, with no account or identifier of yours; under its privacy policy, it deletes its logs, which may include the coordinates, after 90 days and does not share them
Instituto Geográfico Nacional (IGN, Spain’s National Geographic Institute), with the PNOA orthophotosAerial photos for the maps: the view of your farms, the map for placing them and the thumbnail of a location shared in a message. It only receives the map area being drawn (its coordinates), without your identitySpain — a body of the Spanish State Administration, subject to the GDPR
OpenStreetMap Foundation (Nominatim)Place search when locating a farm: only when you tap Search or press Enter, never while you type, or when you ask the assistant to place a farm. It only receives the text you search for, without your identityUnited Kingdom and the Netherlands (backups in the EU), under the OpenStreetMap Foundation’s privacy policy
EcowittOnly if you connect your weather station: readings are requested from Ecowitt with the keys of your own Ecowitt account, which we keep inside your Mi Campo account (encrypted at rest)Wherever Ecowitt sets for your own account: the connection is with your Ecowitt account, just as when you use its app, and Mi Campo does not choose where Ecowitt keeps that data (section 5)
goQR.me (api.qrserver.com)It generates the image of each farm’s check-in QR code. It only receives the check-in web address, without your name or emailEU (Germany); under its privacy policy, it does not store the content of the codes
Meta Platforms (WhatsApp)Only if you choose to write to us on WhatsApp from any of the WhatsApp buttons on the website or in the app: the conversation is governed by WhatsApp’s termsUnder WhatsApp’s terms

The map, weather and QR code services (the Instituto Geográfico Nacional, OpenStreetMap, Open-Meteo and goQR) and Ecowitt, if you connect your weather station, receive the request directly from your device, with its IP address, like any website you visit; we do not send them your name or email.

If you dictate by voice, speech recognition is not done by Mi Campo but by your device’s system or your browser (for example, Apple in the iPhone app and Google in Chrome), which processes the audio under its own terms. Mi Campo only receives the resulting text.

We do not share your farm data (plots, harvests, finances, messages) with any third party for commercial purposes. We do not sell it. The demand signals in section 3 are not a disclosure of your data: suppliers only see aggregated trends, without names, farms or sentences, designed so that no one can be identified. The market prices and news you see in the app come from public sources (the Spanish Ministry of Agriculture, the Junta de Andalucía regional government, official gazettes) and carry none of your data.

The same protection with every third party. Every third party in the table to which Mi Campo discloses your data provides the same or equal protection for it as described in this policy:

5. International transfers

Your data is stored in the European Union. When any of the providers listed processes data outside the European Economic Area (the AI assistant, email, Google), it does so under safeguards recognised by the European Commission: adequacy decisions, Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework, as appropriate. The aerial photos for the maps are requested from the Instituto Geográfico Nacional, in Spain. The requests your device makes to OpenStreetMap (United Kingdom and the Netherlands), to Open-Meteo (Switzerland) and to goQR.me (Germany) go to EU countries or to countries with an adequacy decision from the European Commission. The image query for the NDVI map is made by our server to Element 84 (USA) only with the plot’s coordinates, without any data that identifies you. There is one request from your device for which we cannot assure you of those safeguards: if you connect your weather station, the one to Ecowitt, which goes to the servers Ecowitt uses for your own account, under its terms.

6. How long we keep it

7. Your rights

You have the right to:

In the iPhone app you can delete your account yourself, without waiting for us to reply: tap your photo or initial at the top right, then “Delete my account”. Your account and your data are deleted (farms, workers, expenses, sales, workdays, treatments, the photos of those entries, the messages you sent, suppliers, stations, settings and the access log). The backups remain until they expire, as do the “Improve the AI” photos if you shared them and the Messages reports you appear in, until their period ends (section 6). If you used to sign in with Apple, you remove the connection between Mi Campo and your Apple Account yourself, from your Apple Account settings, under “Sign in with Apple”.

To exercise these rights, including deleting your account from the website or if you would rather we deleted it for you, write to privacidad@micampoconia.com from the email address you signed up with. We will reply within 30 days at most.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. If you check in at a farm (information for workers)

If you have scanned a QR code placed at a farm and pressed Check in or Check out, this is exactly what is stored about you:

9. Cookies and storage on your device

Mi Campo uses:

You can change your choice at any time with the “Cookies” link on the website’s sign-in screen, which shows the banner again, or by clearing the site data in your browser and signing in again. If you clear the site data, any entries not yet uploaded are lost.

10. Minors

Mi Campo is not aimed at children under 14. If you believe that a minor has created an account without a guardian’s consent, contact us and we will delete it.

11. Changes to this policy

If we change this policy substantially, we will let you know by email and in the app itself before the changes take effect. The current version is always available at micampoconia.com/privacy.html.

What changed on 27 October 2026: section 9 now makes clear that the iPhone app does not use the app cache (service worker), so it needs a connection to open; nothing else about what is stored on your device changes.

What changed on 17 October 2026: the check-in QR code is now generated only by goQR.me: we have removed quickchart.io, which was its fallback. As a result, every third party that receives your data provides the same or equal protection for it as this policy (sections 4 and 5).

What changed on 16 October 2026: we explain that in the iPhone app you can sign in with Apple or with Google, and what data reaches us that way (sections 2, 4 and 9); the access log we use for internal statistics and how long it is kept (sections 2, 3 and 6); what data about your workers and suppliers you can store, and that you are the controller of it (sections 1 and 2); who can find you in the Messages search, which does not show your email (section 2); the map and place search services, where they are and what they receive: the aerial photos for the maps are now the PNOA orthophotos from the Instituto Geográfico Nacional, instead of Esri’s, and OpenStreetMap only receives what you search for when you tap Search; and quickchart.io as a fallback for the QR code (sections 4 and 5); that Open-Meteo receives the farm’s coordinates, not approximate ones, and where it is (sections 4 and 5); that the pseudonymous code for “Improve the AI” is a SHA-256 hash, not encryption (sections 3 and 6); the exact steps to delete your account in the app and how to remove the connection with your Apple Account (sections 6 and 7); that the prior permission in the iPhone app is requested for the assistant’s features, including those in Messages, and for the supplier AI (section 3); what data from your account the assistant receives as context (summary and sections 1, 2, 3 and 4) and what the Messages features send to the AI, such as suggesting a reply or searching your conversations (section 3); that the administrator can look up usage statistics with the assistant, with each account under a pseudonym and without its email (sections 3 and 4); who recognises your voice when you dictate, and the voice notes in Messages (sections 2 and 4); what Google Analytics receives on the website even if you do not accept cookies (sections 2, 3, 4 and 9); the “Cookies” link to change your choice (section 9); reports and blocks in Messages: what data is kept, why, on what legal basis, who sees it and how long it is kept, also after the account is deleted (sections 1, 2, 3, 6 and 7); that in the iPhone app you cannot search for other users in Messages, which only shows your crew, your groups and your open conversations (section 2); that the third parties that receive your data provide the same or equal protection for it as this policy, except quickchart.io, the fallback for the QR code, which is explained separately, and where the queries to Element 84, quickchart.io and Ecowitt go (sections 4 and 5); that the demand signals summary is the same for all suppliers with the AI, that it only uses the text of the messages and how to object (section 3); that the website pages you open from the app are shown inside it, without Google Analytics (section 9); the no-account assistant on the sign-in screen, on the website and in the iPhone app: what it sends and to whom, that we do not store the conversation, the counter by IP address, also in the demo, and the technical logs, the permission the app asks for and how to withdraw it in the same panel, “Report answer” and its legal basis (sections 2, 3, 4 and 6); and that you can withdraw the permission to use AI from your account panel, and what does not change when you withdraw it (section 3). Apart from signing in with Apple and Google in the iPhone app, reports and blocks in Messages, the app not having a user search, the option to withdraw the permission to use AI, the supplier AI asking for that same permission, the no-account assistant in the iPhone app, with its permission, and “Report answer”, the aerial photos from the Instituto Geográfico Nacional, place search only when you tap Search, the administrator’s assistant no longer receiving the accounts’ emails and website pages opening inside the app, which are new, these are clarifications of how the service already works. In addition, this page now has an English version.

What changed on 15 October 2026: section 1 is corrected: the data controller is not a company but Ali Aauicha, who provides the service under the Mi Campo con IA brand. This correction does not change what data we process, why, or who we share it with, nor your rights. In addition, the iPhone app is described. You can delete your account yourself from the app (sections 6 and 7: what is deleted and what is not, namely the backups and the “Improve the AI” photos). We ask for your explicit permission before the assistant sends anything to the AI for the first time (section 3). And the app does not use Google Analytics (section 9).

What changed on 9 October 2026: section 9 describes what the app stores on your device so that you can use it without signal. Since 8 October, a copy of your account data so that you can view it offline. Since 9 October, the entries you save on your phone until they are uploaded. Also your account email, which stays on the device, to warn you on the sign-in screen if there are entries not yet uploaded. And a marker in local storage. This corrects what was clarified on 3 October. Now, offline, you can see your data as it was the last time, and expenses, sales, workdays, irrigation, treatments and appointments are saved on your phone until they are uploaded.

What changed on 3 October 2026: we correct how the “Improve the AI with my corrections” photos are stored (sections 3, 4 and 6): they are not linked to an anonymous identifier but to a pseudonymous code (a SHA-256 hash of your account identifier, without your name or email), and they are stored on Amazon Web Services in Ireland (eu-west-1), not in Spain; and, in section 9, we clarify that offline you cannot see or save your expenses, sales, workdays, farms or treatments.

What changed on 1 October 2026: we add the demand signals for suppliers (a summary every 4 weeks), which only use messages written from 1 November 2026 (section 3: which messages are included, how they are anonymised and how to object); the access you give a supplier to the modules you choose; the supplier programme and the supplier AI, with their retention periods (section 6); and that WhatsApp can be used from any of our buttons.

What changed on 18 September 2026: the database and accounts moved from Supabase (Ireland) to Amazon Web Services in Spain; the AI assistant runs on Anthropic via Amazon Bedrock (OpenAI is no longer used); we describe messaging between users, the photos sent to the assistant, the satellite map and the weather stations, and we clarify that account deletion is requested by email.

Mi Campo — Smart farm management · micampoconia.com · Suppliers (in Spanish) · Terms of Service