Privacy Policy
In short: your farm data is yours. We store it on Amazon Web Services servers in Spain (the photos you share through “Improve the AI with my corrections”, if you turn it on, are stored in Ireland), we use it to make the app work and we do not sell it or pass it on for commercial purposes. From 1 November 2026, what you write to a supplier you have added in the app may be included, always aggregated and without names, in demand signals for suppliers, with a summary every 4 weeks (section 3); if you do not want this, tell us and we will leave you out. What you write to the assistant, the photos you send it and the messages you ask it to translate go through the artificial intelligence provider (Anthropic, via Amazon Bedrock, in the United States) solely to give you the answer; when you talk to the assistant, data from your account is also sent as context, including your workers’ data (section 3). If you use QR check-in, the location of the person checking in is stored only at the moment of checking in and only the person in charge of the farm can see it.
1. Data controller
The data controller is Ali Aauicha, who provides the service under the Mi Campo con IA brand (hereinafter “Mi Campo con IA” or “Mi Campo”).
Contact: privacidad@micampoconia.com for any communication about this policy or to exercise your rights, and hola@micampoconia.com for everything else.
There are two different roles, depending on whose data it is:
- Your data as the account holder (your email, your plots, your expenses, your sales, your messages): the data controller is Mi Campo, as stated above.
- Data about other people that you enter (your workers’ data, such as their name, phone number, address, national ID number (DNI) or Social Security number, and their check-ins; your suppliers’ contacts; the people you invite or chat with): you are the controller. Mi Campo acts only as a data processor: we store that data and show it to you following your instructions, we do not use it for any purpose of our own and we do not pass it on to third parties. To provide the service we rely on the providers listed in section 4, which act as sub-processors: for example, when you use the assistant, your workers’ names, pay rates and tasks, the name of the person who worked each workday and the names of the suppliers and customers that appear in your expenses, sales and stock are sent as context to the AI provider (section 3). The only exceptions are the demand signals and the Messages reports in section 3: for the signals, Mi Campo uses your list of suppliers, as controller, only to know which of your messages are addressed to a supplier; and, when someone reports a conversation, Mi Campo processes the report and the copy of the messages kept with it as controller, only to review it.
In practice, this means that, with regard to your workers, it is you who must inform them that you keep their data in Mi Campo and that their working hours and location are recorded, deal with their requests for access or erasure, and decide how long those records are kept. Mi Campo gives you the tools to do this (a notice shown on the check-in screen before checking in, CSV export and deletion of records one by one), but the legal responsibility towards them is yours.
2. Data we collect
| Category | Specific data | Source |
|---|---|---|
| Identification | Email address, name or nickname, language. The password is managed by Amazon Cognito: we never see it or store it in plain text | You provide it when you sign up, or it reaches us when you sign in with Google or with Apple (your name and email). If you choose “Hide My Email” with Apple, we receive an Apple relay address instead of your real email |
| Farm data | Farms and plots (with their coordinates), crops and campaigns, workdays, irrigation, plant protection treatments and field log, expenses, sales, stock, harvest counts, sensor and weather station readings | You enter it in the app, in writing, by voice or through the assistant |
| Messages | The messages you exchange in the app with your crew, your suppliers or the companies that market your produce, with their attachments (files, photos, voice notes and, if you choose to, your location at that moment) and the translations you ask for. So that people can write to you, the Messages search finds you by your name for the people you are already connected with (your crew, your groups or anyone who has already talked to you), and for any user who types your full email address. The search never shows your email to anyone: only your name. In the iPhone app you cannot search for other users: Messages only shows your crew, your groups and the conversations you already have open. On the website, the search does not show you anyone you have blocked or who has blocked you (what else changes when you block someone is explained in section 3) | You write them or other users send them to you |
| Messages reports and blocks | If you report a conversation with “Report”: who is reporting and, if it is a direct chat, who is being reported (name and internal identifier), the reason you give, the date and a copy of up to 20 messages from that conversation: the latest ones written by the person reported (in a group, the latest ones from the other members) or, if none are found, the latest ones in the conversation, including yours. For each message we keep who wrote it, to whom, when and its text and, for its attachment, the name, the type and the reference (not a copy of the file). If it is a group, also its name, who created it and the list of its members (their internal identifier). If you block someone with “Block”: the list of people you have blocked (their internal identifier), which is kept in your account | You generate them from the “⋯” menu of a conversation; if you are the one reported, or the report includes messages of yours, it is made by another user |
| AI assistant | What you write or dictate to it, the photos you attach, the account data sent to it as context (section 3) and the answer it gives you. With the no-account assistant on the sign-in screen, only what you write to it, its answers and the language (section 3). Also, a daily usage counter per account or, without an account (in the demo and in the assistant on the sign-in screen), per IP address, to apply the message limit | You generate it when you use the assistant |
| Workers’ check-ins | The name the person types when checking in, date and time, type (check-in or check-out), GPS coordinates and margin of error at the moment of checking in, calculated distance to the farm and browser used | Provided by the person themselves when scanning the QR code placed at the farm |
| If you are a supplier | Your name, your company, your phone number or email and whatever you tell us when you write to us about the supplier programme. If you have the supplier AI turned on: the text and documents (PDFs or photos) you upload and the summary the AI makes of each one | You give them to us, by WhatsApp, by email or from your dashboard |
| People you enter | For your workers: the name and, if you fill them in, phone number, email, address, national ID number (DNI), Social Security number, pay rate, start and end dates and notes. For your suppliers: the name and, if you fill them in, tax ID (NIF), contact person, phone number, email, address and notes. The email of the people you invite to the app | You enter them, and you are the controller of this data (section 1); the invitation reaches the invited person by email |
| Photos | Images of delivery notes and invoices (to extract the expense or sale), of harvests (for the count) and of plants or leaves (to ask the assistant) | You upload them voluntarily |
| Technical | IP address, device type, language, connection time, errors | Generated automatically when you use the app |
| Access log | Every time you open the app or the website while signed in: the date and time, your account identifier and email, and the type of browser or device | Generated automatically when you open the app or the website |
| Analytics (website only) | Pages viewed, aggregated clicks, conversions and, every time you open the website while signed in, your account’s internal identifier (a pseudonymous code, not your email or your name) | Google Analytics 4: with cookies only if you accept them; if you do not accept them, the website still sends it cookieless pings (sections 3 and 9) |
3. What we use it for (purposes)
- Providing the service: authentication, saving and syncing your farm data, messaging between users, prices, news and alerts. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- AI assistant: to answer your questions, record what you dictate, read a delivery note, count a harvest or translate a message, what you write or dictate and the photos you attach are passed to the AI provider listed in section 4 and the answer is received. In Messages, the AI can also improve, summarise, make more formal or translate what you are about to send, draft it from what you ask for, suggest a reply or search your conversations: to suggest a reply, the last message you were sent in that conversation is sent and, to search, the messages in your conversations that match your question are sent, with who wrote them, when and in which conversation, even if they were written by other people. When you talk to the assistant, each message also sends, as context, data from your account: your farms (with their crop, their area and their latest irrigation and products applied); the last 15 expenses (with the supplier), sales (with the customer) and workdays (with the name of the person who worked) that you have recorded; your workers, with their pay rate and task; your stock; and your weather stations with their readings. Some features, such as recording products or devices by voice, also send the names of your farms. The assistant does not receive check-in locations. In the iPhone app, we also ask for your explicit permission before these features send anything to the AI for the first time, and we explain what is sent and to whom; if you decline, nothing is sent and you can keep using the rest of the app without the assistant. If you are a supplier, the supplier AI (below) asks you in the app for the same permission before it sends your first message or document to the AI. If you have already given it, you can withdraw it whenever you like in your account panel (your photo or initial at the top right): under “Permission to use AI”, tap “Withdraw”. From then on, neither those features nor the supplier AI send anything more to the AI from that device and, if you use one of them again, the app will ask for your permission again. Withdrawing it does not remove you from the demand signals (below), which are prepared on our servers: to opt out of them, write to us at privacidad@micampoconia.com. Nor does it affect what other people send to the AI from their own devices; for example, if they translate a message you have sent them. Legal basis: performance of a contract. Separately, the no-account assistant on the sign-in screen also asks for permission in the app before the first question, and that permission is withdrawn in its own panel (next point, with its own legal basis).
- No-account assistant on the sign-in screen (website and iPhone app): if you ask it something without signing in, your question, the previous messages in that same conversation (your questions and its answers) and the language of the app or page are sent to our server and, from there, to the AI provider in section 4 (Anthropic, through Amazon Bedrock and, if that is not available, directly; in the United States), never any account data. The AI provider does not receive your IP address. The assistant answers with the information Ali has prepared: in the app, only about Mi Campo; on the website, also about its developer. Mi Campo does not store the conversation: it is only on your screen and disappears when you close the app or the page, reload it, tap “New chat”, or sign in to an account or open the demo; the AI provider processes it under the terms in section 4. To apply the daily limit on questions without an account, which is shared with the demo, we keep your IP address together with a daily usage counter, which expires after 2 days and is deleted automatically. The assistant’s technical logs record, for each answer, the time, the type of request (and, in the app, that it comes from the app), which provider answered, the duration, the cost and a pseudonymous code derived from your IP address (a SHA-256 hash, not the IP); in the app, if the answer filter has removed something, also what kind of thing and how many links, email addresses or phone numbers, and, if something fails, the type of error. Never the text of the conversation. Those logs are deleted after 30 days. In the iPhone app, before your first question we ask for your permission to send it to the AI and explain what is sent and to whom; if you do not give it, nothing is sent. You can withdraw it whenever you like in the assistant’s own panel, with “Withdraw AI permission”: from then on that assistant stops sending your questions to the AI and, if you ask again, it will ask for your permission again. Each answer has “Report answer”, which opens an email to hola@micampoconia.com with that answer: you decide whether to send it and, if you do, we only use it to review that answer and correct the assistant. Do not write personal data about yourself or other people: the assistant does not need it to answer. Legal basis: on the website and in the app, our legitimate interest in answering what you ask us about Mi Campo (on the website, also about its developer) (Art. 6(1)(f) GDPR). The permission the app asks for before the first question is an extra safeguard, so that you decide whether anything is sent, and not the legal basis for this processing: if you do not want it processed, simply do not ask or, in the app, withdraw it with “Withdraw AI permission”. The counter by IP address and the technical logs are based on our legitimate interest in protecting the service against abuse (Art. 6(1)(f) GDPR), and the “Report answer” email, if you send it, on our legitimate interest in reviewing and improving the assistant.
- Satellite imagery (NDVI): to show you the vigour of each plot, public images from the Copernicus programme (Sentinel-2) are retrieved using the plot’s coordinates, without any data that identifies you. Legal basis: performance of a contract.
- Service communications: welcome emails, password recovery, invitations and critical alerts. Legal basis: performance of a contract.
- Improving the AI (only with consent): if you turn on the “Improve the AI with my corrections” option, we keep the harvest photos you correct, with the boxes you mark, linked to a pseudonymous code (a SHA-256 hash of your account identifier, without your name or email), on Amazon Web Services in Ireland (eu-west-1), to improve harvest detection. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from your account settings.
- Web analytics (website only, not in the iPhone app): Google Analytics 4 with Consent Mode v2 in advanced mode. Analytics cookies are only used if you accept them. If you do not accept them, the website still sends Google Analytics cookieless pings with the page you are viewing and the actions measured on it. In addition, every time you open the website while signed in, your account’s internal identifier is sent to it (a pseudonymous code, not your email or your name). Legal basis: consent, for analytics cookies.
- Internal usage statistics: with the access log described in section 2 we count how many people use Mi Campo and how often, in a dashboard that only the administrator can see. The administrator can also look up these figures with the assistant: to do so, the visit totals and a summary of up to 12 accounts (each with a pseudonym, without its email; the dates of sign-up, last access and last activity, and how many farms, expenses, sales and workdays each one has) are sent to the AI provider in section 4. Apart from that, the log is not passed on to third parties or used for advertising (what Google Analytics receives on the website is explained in the previous point). Legal basis: legitimate interest (Art. 6(1)(f) GDPR), namely Mi Campo’s interest in knowing how much the service is used in order to maintain and improve it.
- Recording working hours with a location check: when a person checks in by scanning a farm’s QR code, their name, the date and time, and their location at that precise moment are recorded, so that the farm holder can verify that the check-in actually took place at the farm. The location is taken only at the instant of pressing Check in or Check out: the app does not track continuously and does not know the worker’s position at any other time. In this processing Mi Campo acts as a processor (see section 1) and the legal basis is determined by the employer as controller.
- Demand signals for suppliers (from 1 November 2026): farm suppliers who have their specialised AI turned on in Mi Campo, and the people on their team, see every 4 weeks some trends in what farmers are asking for (for example, “several farmers are asking for anti-thrips mesh for peppers”); the summary is the same for all of them, not just for the supplier you wrote to. Only what you write, from that date, in a direct chat to a supplier that you yourself have added to your list of suppliers (or to a person on their team) is included. Your chats with your crew, groups, announcements, support, what suppliers write and messages from accounts less than 30 days old are never included, and only the text of each message counts: never photos, voice notes, files or locations. To prepare each summary, the text of those messages is sent to the AI provider in section 4 (in the United States) without your name or email, with a pseudonym and with any email addresses and phone numbers it contains masked. Signals are only calculated if there are messages from at least 5 farmers, and the system discards any topic that is not raised by at least 3 different farmers. Suppliers only receive the text of the summary, never how many farmers or messages are behind it, and an automatic check blocks it if it contains an email address, a phone number, the name of a person or company from those conversations or a sentence copied from a message. It is not used to make any decision about you or to profile you. Legal basis: legitimate interest (Art. 6(1)(f) GDPR), namely Mi Campo’s interest in offering suppliers an aggregated view of demand within the service it provides to them. We have balanced this against your rights: only messages that you already address to a supplier are used, the result is designed so that no one can be identified, and you can object at any time by writing to privacidad@micampoconia.com from the email address you signed up with (just write “Signals: no”): if you do so before 1 November 2026, your messages are never included and, if you do so later, they stop being included from the next summary. The conditions of the signals are also set out in section 7 of the Terms of Service.
- Access you give a supplier: if you add a supplier and tick modules for them, that company (and the employees it has added) will see the data in those modules (today, your weather stations and soil probes with their readings) until you withdraw it, which you can do at any time from the app. Your workers’ data is never shared with suppliers. Legal basis: performance of a contract, at your request.
- Supplier programme: if you write to us on WhatsApp or to hola@micampoconia.com to take part in the supplier pilot, we use your name, your company, your phone number or email and whatever you tell us to reply to you and assess your participation. Legal basis: if you contract in your own name, the pre-contractual steps you ask us to take (Art. 6(1)(b) GDPR); if you write on behalf of a company, our legitimate interest in keeping in contact with it (Art. 6(1)(f) GDPR and Art. 19 LOPDGDD).
- Supplier AI: if you are a supplier and have the specialised AI turned on, the text and documents you upload, and what you and your team ask it, are sent to the AI provider in section 4 to summarise them and to answer you. In the iPhone app we first ask for the same permission as for the assistant, and you can withdraw it in the same way (see “AI assistant” above). Legal basis: performance of a contract.
- Security and abuse prevention: detecting suspicious access, daily usage limits on the assistant per account (or, without an account, per IP address), protection against automated abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Reports in Messages (moderation): when someone taps “Report” in the “⋯” menu of a conversation, the report (who is reporting, who is being reported, the group if there is one, the reason and a copy of up to 20 messages from that conversation, as detailed in section 2) is stored on Amazon Web Services, in the European Union, and the Mi Campo administrator is notified so that they can review it. Only the administrator sees it, and uses it solely to review it within 24 hours and, if someone is breaking the Terms of Service, to remove the content and, if necessary, close their account. It is not used for any other purpose or passed on to third parties, unless the law requires it. Legal basis: legitimate interest (Art. 6(1)(f) GDPR), namely the interest of Mi Campo and its users in keeping the service safe and enforcing the Terms. We have balanced this against the rights of the people concerned: only a copy of at most 20 messages from the reported conversation is kept, only the administrator sees it, and it is kept for the period stated in section 6.
- Blocks in Messages: when you block someone with “Block” (in a direct chat), we keep in your account the fact that you have blocked them. From then on, that person and you cannot write to each other in a direct chat, you no longer see their messages (also in the groups you share), their conversation disappears from your Messages list and they do not appear in your search on the website. We do not tell them that you have blocked them, but if they try to write to you they will see that their message is not sent, and they can still see your earlier conversation. To undo it, tap “Unblock” in that same conversation; if it no longer appears, write to us at hola@micampoconia.com and we will undo it. Legal basis: performance of a contract.
4. Who we share it with (data processors)
| Provider | Function | Data location |
|---|---|---|
| Amazon Web Services (AWS EMEA SARL) | All of the app’s infrastructure: accounts and passwords (Amazon Cognito), database (DynamoDB), API and real time, storage of photos and attachments (S3), web server (CloudFront) | EU (eu-south-2, Spain). Photos from “Improve the AI with my corrections”, if you turn it on: EU (eu-west-1, Ireland) |
| Amazon Bedrock (AWS) with Anthropic models | AI assistant: answers (with the account data sent as context, section 3), reading delivery notes, harvest counting, message translation and queries with photos; the no-account assistant on the sign-in screen (section 3); also the suppliers’ AI (summaries of their documents), the demand signals in section 3 and the administrator’s queries about use of the service (section 3). As a fallback, when Bedrock is not available, the same request goes to the API of Anthropic PBC | USA — under the EU-US Data Privacy Framework (AWS) and Standard Contractual Clauses (Anthropic). Under the terms of both, your messages and photos are not used to train their models |
| Amazon SES (AWS) | Sending transactional emails (welcome, password recovery, invitations) and receiving support email | USA (us-east-1) — under the EU-US Data Privacy Framework |
| Google LLC | Sign in with Google (optional, via Amazon Cognito) and Google Analytics 4 (website only; sections 3 and 9) | USA — under the EU-US Data Privacy Framework |
| Apple Distribution International Ltd. | Sign in with Apple (optional, only in the iPhone app, via Amazon Cognito): Apple gives us your name and your email or, if you choose “Hide My Email”, a relay address. For this sign-in, Apple processes your data under its own privacy policy | Under Apple’s privacy policy |
| Element 84, Inc. (Earth Search) | Search for Sentinel-2 images for the NDVI map. The query is made by our server, not your device, and only with the plot’s coordinates: it does not receive your IP address or anything that identifies you | USA (catalogue) — public images from the European Copernicus programme |
| Open-Meteo (OpenMeteo GmbH) | Weather forecast for the farm. It only receives the farm’s coordinates, without your identity | Switzerland, a country with an adequacy decision from the European Commission. Open service, with no account or identifier of yours; under its privacy policy, it deletes its logs, which may include the coordinates, after 90 days and does not share them |
| Instituto Geográfico Nacional (IGN, Spain’s National Geographic Institute), with the PNOA orthophotos | Aerial photos for the maps: the view of your farms, the map for placing them and the thumbnail of a location shared in a message. It only receives the map area being drawn (its coordinates), without your identity | Spain — a body of the Spanish State Administration, subject to the GDPR |
| OpenStreetMap Foundation (Nominatim) | Place search when locating a farm: only when you tap Search or press Enter, never while you type, or when you ask the assistant to place a farm. It only receives the text you search for, without your identity | United Kingdom and the Netherlands (backups in the EU), under the OpenStreetMap Foundation’s privacy policy |
| Ecowitt | Only if you connect your weather station: readings are requested from Ecowitt with the keys of your own Ecowitt account, which we keep inside your Mi Campo account (encrypted at rest) | Wherever Ecowitt sets for your own account: the connection is with your Ecowitt account, just as when you use its app, and Mi Campo does not choose where Ecowitt keeps that data (section 5) |
| goQR.me (api.qrserver.com) | It generates the image of each farm’s check-in QR code. It only receives the check-in web address, without your name or email | EU (Germany); under its privacy policy, it does not store the content of the codes |
| Meta Platforms (WhatsApp) | Only if you choose to write to us on WhatsApp from any of the WhatsApp buttons on the website or in the app: the conversation is governed by WhatsApp’s terms | Under WhatsApp’s terms |
The map, weather and QR code services (the Instituto Geográfico Nacional, OpenStreetMap, Open-Meteo and goQR) and Ecowitt, if you connect your weather station, receive the request directly from your device, with its IP address, like any website you visit; we do not send them your name or email.
If you dictate by voice, speech recognition is not done by Mi Campo but by your device’s system or your browser (for example, Apple in the iPhone app and Google in Chrome), which processes the audio under its own terms. Mi Campo only receives the resulting text.
We do not share your farm data (plots, harvests, finances, messages) with any third party for commercial purposes. We do not sell it. The demand signals in section 3 are not a disclosure of your data: suppliers only see aggregated trends, without names, farms or sentences, designed so that no one can be identified. The market prices and news you see in the app come from public sources (the Spanish Ministry of Agriculture, the Junta de Andalucía regional government, official gazettes) and carry none of your data.
The same protection with every third party. Every third party in the table to which Mi Campo discloses your data provides the same or equal protection for it as described in this policy:
- Processors: Amazon Web Services (including Amazon Bedrock and Amazon SES), Anthropic, when the request goes directly to its API, and Google, for Google Analytics on the website, process your data on Mi Campo’s behalf under a data processing agreement in accordance with Article 28 GDPR: only to provide their service to us and following our instructions, with a duty of confidentiality and security measures and, in the case of AI, without using it to train their models. Outside the European Economic Area, they do so with the safeguards in section 5.
- Services that only receive what is strictly necessary: the Instituto Geográfico Nacional, the OpenStreetMap Foundation, Open-Meteo and goQR.me only receive what the table shows (the coordinates, the text you search for or the check-in web address), without your name or email, and handle it under privacy policies that provide at least that same protection. Element 84 is queried by our server, only with the plot’s coordinates: it does not receive your IP address or anything that identifies you.
- Services you deal with yourself: Apple and Google, when you sign in with them, receive no data of yours from Mi Campo beyond the sign-in request itself: they are the ones who give us your name and email. Ecowitt only receives, from your device, the keys of your own Ecowitt account and your station’s identifier, to return your readings, just as when you use its app. And WhatsApp only receives what you choose to write to us there. Each of them handles that data as controller, under the privacy policy you accepted with them.
5. International transfers
Your data is stored in the European Union. When any of the providers listed processes data outside the European Economic Area (the AI assistant, email, Google), it does so under safeguards recognised by the European Commission: adequacy decisions, Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework, as appropriate. The aerial photos for the maps are requested from the Instituto Geográfico Nacional, in Spain. The requests your device makes to OpenStreetMap (United Kingdom and the Netherlands), to Open-Meteo (Switzerland) and to goQR.me (Germany) go to EU countries or to countries with an adequacy decision from the European Commission. The image query for the NDVI map is made by our server to Element 84 (USA) only with the plot’s coordinates, without any data that identifies you. There is one request from your device for which we cannot assure you of those safeguards: if you connect your weather station, the one to Ecowitt, which goes to the servers Ecowitt uses for your own account, under its terms.
6. How long we keep it
- Account data and farm data: while the account is active. If you delete it yourself from the iPhone app (tap your photo or initial at the top right, then “Delete my account”), it is deleted immediately; if you ask us by email, within 30 days at most. In both cases, except where there is a legal obligation to keep it, and without prejudice to the backups, the “Improve the AI” photos and the Messages reports, which are explained below.
- Messages: while the account is active or until you delete them. A message you sent to another person may remain in that person’s conversation. If you delete your account, the messages you sent are deleted (also from the other person’s conversation), as are the chat groups you created, with all their messages; messages that other people sent to you remain in those people’s accounts. The copy of messages kept in a report follows the period in the next point.
- Messages reports: each report is kept for at most 12 months from when we receive it, even if in the meantime the account of the person reporting, of the person reported or of someone whose messages are quoted is deleted, unless it has to be kept longer to deal with a claim or a request from an authority. After that period, the report and the notice the administrator received are deleted.
- Blocks: until you unblock that person; the list is deleted when you delete your account.
- Requests to the AI assistant: we do not keep a history of your conversations with the assistant beyond what you record through it; the daily usage counter expires after 2 days and is deleted automatically. Conversations with the no-account assistant on the sign-in screen are not stored; the IP address with its counter expires after 2 days and is deleted automatically, and its technical logs, with the code derived from the IP, are deleted after 30 days. “Report answer” emails you send us are kept for at most 12 months from when we receive them.
- Photos: photos of delivery notes, sales and counts are kept with the entry they belong to, for as long as that entry exists. Photos you attach to a query to the assistant are not kept.
- Photos to improve the AI (with consent): they are stored on Amazon Web Services in Ireland (eu-west-1), linked only to a pseudonymous code (a SHA-256 hash of your account identifier, without your name or email). If you withdraw your consent, they stop being used in future improvements, but models that have already been trained cannot unlearn aggregated statistics. Deleting your account does not delete these photos automatically: if you want us to delete them, write to privacidad@micampoconia.com and we will identify them by that code and delete them.
- Workers’ check-ins (including location): kept for 4 years, in line with the retention period for working-time records. The farm holder, as controller of that data, can delete them earlier from the app itself.
- Exported copies: the app lets the holder export the check-ins and the plant protection products register to a CSV file. From that moment, that file is outside our systems and under the holder’s sole responsibility.
- Backups: the database has continuous backup with point-in-time recovery for the last 35 days; deleted data may remain in those backups until they expire. Previous versions of the photos and files you save are kept for up to 30 days.
- Demand signals: messages are not copied anywhere else in Mi Campo; for each summary, their text is sent to the AI provider as explained in section 3. The summaries are kept, and they contain no personal data.
- If you are a supplier: if you wrote to us about the pilot and never joined, we delete your contact details 12 months after the last contact. Your AI’s documents and their summaries are kept until you delete them or leave the service.
- Access log: while your account exists; it is deleted when the account is deleted.
- Technical logs: 90 days.
- Analytics data: according to the Google Analytics 4 settings (14 months by default).
7. Your rights
You have the right to:
- Access: know what data we hold about you.
- Rectification: correct inaccurate data.
- Erasure (“right to be forgotten”): have us delete your data and your account.
- Objection: object to processing based on legitimate interest; for example, to what you write to your suppliers being included in the demand signals.
- Portability: receive your data in a structured format (JSON or CSV).
- Restriction: ask us to pause the processing temporarily.
- Withdraw your consent at any time, without affecting the lawfulness of the processing carried out before.
In the iPhone app you can delete your account yourself, without waiting for us to reply: tap your photo or initial at the top right, then “Delete my account”. Your account and your data are deleted (farms, workers, expenses, sales, workdays, treatments, the photos of those entries, the messages you sent, suppliers, stations, settings and the access log). The backups remain until they expire, as do the “Improve the AI” photos if you shared them and the Messages reports you appear in, until their period ends (section 6). If you used to sign in with Apple, you remove the connection between Mi Campo and your Apple Account yourself, from your Apple Account settings, under “Sign in with Apple”.
To exercise these rights, including deleting your account from the website or if you would rather we deleted it for you, write to privacidad@micampoconia.com from the email address you signed up with. We will reply within 30 days at most.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).
8. If you check in at a farm (information for workers)
If you have scanned a QR code placed at a farm and pressed Check in or Check out, this is exactly what is stored about you:
- What is stored: the name you type, the date and time and, if your phone provides it, your location at that moment (coordinates and the margin of error of the measurement) together with the resulting distance to the farm. Location is not mandatory: you can check in without it and the record is saved anyway.
- When your location is taken: only at the exact instant you press Check in or Check out. There is no continuous tracking. Outside that moment the app does not know where you are: not while you work, not when you finish, and not when you are not using it.
- What it is used for: solely so that the person in charge of the farm can verify that the check-in took place there. It is not used for any other purpose, passed on to third parties, sold or sent to the AI assistant.
- Who can see it: only the holder of the farm where you check in.
- If the measurement is imprecise: inside a greenhouse the signal can have a margin of error of hundreds of metres. In that case the system does not conclude that you were away from the farm: it marks it as “Not compared”, precisely so as not to attribute to you something that the data does not prove.
- How long it is kept: 4 years, in line with the retention period for working-time records.
- Your rights: you can request access to, rectification or erasure of your check-ins. As the controller of that data is the holder of the farm you work for, contact them first. If you get no answer, write to privacidad@micampoconia.com and we will help you direct your request. You can also complain to the Spanish Data Protection Agency (AEPD).
9. Cookies and storage on your device
Mi Campo uses:
- Essential local storage (localStorage): your signed-in session, the language and the app preferences (filters, active tabs, visible modules). Also a marker with your account identifier indicating that your account uses offline saving on that device (it is kept when you sign out). It does not require consent and is not sent to third parties.
- App cache (service worker): stores the app’s files on your device so that it opens quickly even without signal. It contains neither your data nor anyone else’s.
- Data for using the app without signal (IndexedDB): since 8 October 2026, the browser keeps a copy of your account data on your device so that you can see it offline. It includes your profile, farms, workers, expenses, sales, workdays, irrigation, treatments, calendar, warehouse, campaigns, suppliers and their workers, stations and harvest counts. If you sign in as an invited worker or as a supplier, the copy also includes the data of the account you are viewing, without the station keys. Since 9 October 2026 it also keeps your expense, sale, workday, irrigation, treatment and appointment entries, with their photo if they have one. They stay there until they are uploaded to our servers (with signal, they upload straight away). It also keeps your account email when you record any of these (with or without signal), so that the sign-in screen can warn you, with the email partly hidden, if there are entries not yet uploaded. The copy is deleted when you sign out or sign in with another account. Pending entries stay on the device even if you sign out, until they are uploaded with your account or you discard them, and they are never uploaded with another account. The email stays on the device even after the entries are uploaded or you sign out, until you clear the site data. As in your account, it contains whatever data you have about your workers and suppliers. This is essential storage so that you can see your data and save your entries without signal: it does not require consent and is not sent to third parties.
- Analytics cookies (Google Analytics 4, website only): they are only activated if you press “Accept all” in the cookie banner. We use Consent Mode v2 in advanced mode: even if you do not accept them, the website loads Google Analytics and Google Tag Manager and sends Google Analytics cookieless pings, which carry, like any request, your IP address and, if you open the website while signed in, your account’s internal identifier (section 3).
- iPhone app: it does not use Google Analytics or Google Tag Manager and does not show the cookie banner. You can sign in with email and password, with Apple or with Google; with Apple or Google, sign-in opens in a secure system window, not inside the app, and is handled by Amazon Cognito. Pages of this website that you open from the app (for example, this policy or the terms) are shown in a sheet inside the app itself, also without Google Analytics. Everything else in this section (local storage and data for using the app without signal) applies in the same way, except the app cache (service worker): the iPhone app does not use it, so it needs a connection to open.
You can change your choice at any time with the “Cookies” link on the website’s sign-in screen, which shows the banner again, or by clearing the site data in your browser and signing in again. If you clear the site data, any entries not yet uploaded are lost.
10. Minors
Mi Campo is not aimed at children under 14. If you believe that a minor has created an account without a guardian’s consent, contact us and we will delete it.
11. Changes to this policy
If we change this policy substantially, we will let you know by email and in the app itself before the changes take effect. The current version is always available at micampoconia.com/privacy.html.
What changed on 27 October 2026: section 9 now makes clear that the iPhone app does not use the app cache (service worker), so it needs a connection to open; nothing else about what is stored on your device changes.
What changed on 17 October 2026: the check-in QR code is now generated only by goQR.me: we have removed quickchart.io, which was its fallback. As a result, every third party that receives your data provides the same or equal protection for it as this policy (sections 4 and 5).
What changed on 16 October 2026: we explain that in the iPhone app you can sign in with Apple or with Google, and what data reaches us that way (sections 2, 4 and 9); the access log we use for internal statistics and how long it is kept (sections 2, 3 and 6); what data about your workers and suppliers you can store, and that you are the controller of it (sections 1 and 2); who can find you in the Messages search, which does not show your email (section 2); the map and place search services, where they are and what they receive: the aerial photos for the maps are now the PNOA orthophotos from the Instituto Geográfico Nacional, instead of Esri’s, and OpenStreetMap only receives what you search for when you tap Search; and quickchart.io as a fallback for the QR code (sections 4 and 5); that Open-Meteo receives the farm’s coordinates, not approximate ones, and where it is (sections 4 and 5); that the pseudonymous code for “Improve the AI” is a SHA-256 hash, not encryption (sections 3 and 6); the exact steps to delete your account in the app and how to remove the connection with your Apple Account (sections 6 and 7); that the prior permission in the iPhone app is requested for the assistant’s features, including those in Messages, and for the supplier AI (section 3); what data from your account the assistant receives as context (summary and sections 1, 2, 3 and 4) and what the Messages features send to the AI, such as suggesting a reply or searching your conversations (section 3); that the administrator can look up usage statistics with the assistant, with each account under a pseudonym and without its email (sections 3 and 4); who recognises your voice when you dictate, and the voice notes in Messages (sections 2 and 4); what Google Analytics receives on the website even if you do not accept cookies (sections 2, 3, 4 and 9); the “Cookies” link to change your choice (section 9); reports and blocks in Messages: what data is kept, why, on what legal basis, who sees it and how long it is kept, also after the account is deleted (sections 1, 2, 3, 6 and 7); that in the iPhone app you cannot search for other users in Messages, which only shows your crew, your groups and your open conversations (section 2); that the third parties that receive your data provide the same or equal protection for it as this policy, except quickchart.io, the fallback for the QR code, which is explained separately, and where the queries to Element 84, quickchart.io and Ecowitt go (sections 4 and 5); that the demand signals summary is the same for all suppliers with the AI, that it only uses the text of the messages and how to object (section 3); that the website pages you open from the app are shown inside it, without Google Analytics (section 9); the no-account assistant on the sign-in screen, on the website and in the iPhone app: what it sends and to whom, that we do not store the conversation, the counter by IP address, also in the demo, and the technical logs, the permission the app asks for and how to withdraw it in the same panel, “Report answer” and its legal basis (sections 2, 3, 4 and 6); and that you can withdraw the permission to use AI from your account panel, and what does not change when you withdraw it (section 3). Apart from signing in with Apple and Google in the iPhone app, reports and blocks in Messages, the app not having a user search, the option to withdraw the permission to use AI, the supplier AI asking for that same permission, the no-account assistant in the iPhone app, with its permission, and “Report answer”, the aerial photos from the Instituto Geográfico Nacional, place search only when you tap Search, the administrator’s assistant no longer receiving the accounts’ emails and website pages opening inside the app, which are new, these are clarifications of how the service already works. In addition, this page now has an English version.
What changed on 15 October 2026: section 1 is corrected: the data controller is not a company but Ali Aauicha, who provides the service under the Mi Campo con IA brand. This correction does not change what data we process, why, or who we share it with, nor your rights. In addition, the iPhone app is described. You can delete your account yourself from the app (sections 6 and 7: what is deleted and what is not, namely the backups and the “Improve the AI” photos). We ask for your explicit permission before the assistant sends anything to the AI for the first time (section 3). And the app does not use Google Analytics (section 9).
What changed on 9 October 2026: section 9 describes what the app stores on your device so that you can use it without signal. Since 8 October, a copy of your account data so that you can view it offline. Since 9 October, the entries you save on your phone until they are uploaded. Also your account email, which stays on the device, to warn you on the sign-in screen if there are entries not yet uploaded. And a marker in local storage. This corrects what was clarified on 3 October. Now, offline, you can see your data as it was the last time, and expenses, sales, workdays, irrigation, treatments and appointments are saved on your phone until they are uploaded.
What changed on 3 October 2026: we correct how the “Improve the AI with my corrections” photos are stored (sections 3, 4 and 6): they are not linked to an anonymous identifier but to a pseudonymous code (a SHA-256 hash of your account identifier, without your name or email), and they are stored on Amazon Web Services in Ireland (eu-west-1), not in Spain; and, in section 9, we clarify that offline you cannot see or save your expenses, sales, workdays, farms or treatments.
What changed on 1 October 2026: we add the demand signals for suppliers (a summary every 4 weeks), which only use messages written from 1 November 2026 (section 3: which messages are included, how they are anonymised and how to object); the access you give a supplier to the modules you choose; the supplier programme and the supplier AI, with their retention periods (section 6); and that WhatsApp can be used from any of our buttons.
What changed on 18 September 2026: the database and accounts moved from Supabase (Ireland) to Amazon Web Services in Spain; the AI assistant runs on Anthropic via Amazon Bedrock (OpenAI is no longer used); we describe messaging between users, the photos sent to the assistant, the satellite map and the weather stations, and we clarify that account deletion is requested by email.