Legal
Privacy Policy — Harvest Journal
Version: 1.0
Effective date: 13 September 2026
Last updated: 13 September 2026
1. Introduction and controller
This Privacy Policy (the "Policy") explains what data we collect, why we collect it, how we use it, and what rights you have when you use the mobile application Harvest Journal: Stats & Diary (the "App") or visit our website harvestjournal.app (the "Website").
The controller of personal data within the meaning of Regulation (EU) 2016/679 (the "GDPR") is:
| Business name | mondov, s. r. o. |
| Registered office | Cintorínska ulica 983/10, Krompachy 053 42 |
| Company ID (IČO) | 57 481 831 |
| Commercial register | Municipal Court Košice, Section Sro, Insert No. 65127/V |
| Contact email | support@harvestjournal.app |
(the "Controller", "we", or "us")
This Policy covers personal data processing only. Your use of the App is also governed by our separate Terms of Use.
2. Who this Policy applies to
This Policy applies to individuals who:
- download, install, or use the App on iOS or Android;
- visit the Website.
2.1 Age
The App and Website are intended for users who are at least 16 years old. If we learn that we have processed personal data in connection with use by someone under 16, we will take reasonable steps, including deleting analytics data where technically possible.
3. Principles we follow
We process personal data in line with GDPR principles, including:
- Lawfulness, fairness and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality
4. What we collect and why
4.1 App — data stored only on your device
The App stores the following only locally on your device. This content is not uploaded to our servers or to third-party servers as part of an account or cloud sync:
| Data type | Purpose |
|---|---|
| Harvest logs (crops, amounts, units, timestamps) | Core harvest tracking |
| Journal entries (notes, photos you attach, activity types) | Garden diary features |
| Your crop list and related settings | Personalise the App |
| App preferences | Remember your choices |
| Export / import backup files you create | Move or back up your data under your control |
We have no access to this local garden content. It is deleted when you uninstall the App or reset the device (unless you previously exported a backup elsewhere).
4.2 App — analytics (PostHog)
To improve the App and fix technical issues, we use PostHog, hosted in the European Union. Analytics data collected through PostHog does not leave the EU/EEA for our EU-hosted instance.
Examples of data we may collect:
| Data type | Purpose |
|---|---|
| Feature usage (e.g. logging a harvest, opening stats or journal — not the content itself) | Product improvement |
| In-app navigation and screen views | UX analysis |
| Technical errors and crashes | Debugging |
| Device / OS / App version | Compatibility and support |
| Anonymous device identifier generated by PostHog | Distinguish unique installs |
What we do not collect via analytics:
- Your name, email, phone number, or other direct identifiers (the App has no account)
- The text of journal notes, photos, or detailed harvest amounts as content backups
- Precise GPS location
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — improving the App and fixing bugs.
Analytics events are tied to an anonymous device identifier. We generally cannot link them to a named person. We still treat them cautiously as potentially personal data under the GDPR.
4.3 Website — hosting logs
When you visit the Website, our hosting provider Vercel, Inc. may automatically record standard server logs, which can include IP address, browser and OS type, date/time, requested URL, and HTTP status codes. These are used for security, availability, and troubleshooting.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — operating a secure Website.
4.4 Website — analytics (PostHog, without cookies)
We may use PostHog on the Website to understand traffic and improve the marketing site (for example page views and basic interaction events). We configure Website analytics without cookies — we do not set analytics cookies and we do not show a cookie consent banner for analytics cookies.
Website analytics may still process limited technical data (such as approximate region derived from IP by the provider, browser type, and pages visited), associated with an anonymous identifier where applicable. See also section 4.2 for our general approach to PostHog data.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — understanding and improving the Website, while avoiding cookie-based tracking on the marketing site.
4.5 Direct communication
If you email us, we process your email address and message content to respond. We do not automatically delete email; we will delete it on request unless we must keep it for legal claims or legal obligations.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
5. Recipients
We may share data with:
| Recipient | Reason | Location |
|---|---|---|
| PostHog, Inc. | Analytics and error tracking | EU (EU-hosted instance) |
| Vercel, Inc. | Website hosting and server logs | EU and/or USA (see below) |
| Public authorities | Where required by law or court order | Slovakia / EU |
International transfers: PostHog for our product is hosted in the EU. Website hosting via Vercel may involve transfers to the USA; where that happens, transfers rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or another valid mechanism.
We do not sell your personal data.
6. Cookies and similar technologies
The marketing Website is operated without analytics cookies. We do not use a cookie banner for analytics consent because we do not set analytics cookies.
Essential technical storage required by the browser or host to deliver the site may still occur as part of normal web operation (separate from analytics cookies). The App may use on-device storage for your garden data and preferences (see section 4.1); that is not website cookie use.
App store platforms (Apple / Google) may process data under their own policies when you download or update the App.
7. Retention
| Data type | Retention |
|---|---|
| Local App garden data | Until you uninstall the App, clear App data, or reset the device (or delete items in-app) |
| PostHog analytics (App) | Up to 10 years; typically shorter per our internal settings |
| PostHog analytics (Website) | Up to 10 years; typically shorter per our internal settings |
| Hosting server logs | Per host policy, typically 30–90 days |
| Email correspondence | No automatic deletion; deleted on request unless law or legal claims require retention |
8. Your rights
Under the GDPR you may have the right to:
- Access (Art. 15)
- Rectification (Art. 16)
- Erasure (Art. 17)
- Restriction (Art. 18)
- Portability (Art. 20) — for local garden data, use the App's export feature
- Object to processing based on legitimate interests (Art. 21)
Note: Because analytics are tied to an anonymous device ID and we do not hold your name or email from the App, some rights (access/erasure of specific analytics rows) may be technically limited unless you can provide information that lets us identify the relevant records.
To exercise your rights, contact us at support@harvestjournal.app. We will respond without undue delay and within 30 days where required.
9. Complaints
If you believe we process your data unlawfully, you may lodge a complaint with the supervisory authority:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava
Tel.: +421 2 3231 3214
Email: statny.dozor@pdp.gov.sk
Web: https://dataprotection.gov.sk
10. Security
We apply appropriate technical and organisational measures, including:
- EU-hosted PostHog with restricted access
- HTTPS/TLS for network transfers
- Keeping garden journal content on-device rather than in an account cloud
No system is perfectly secure. If a breach likely affects your rights and freedoms, we will notify as required by the GDPR.
11. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
12. Changes
We may update this Policy (for example when features or laws change). Material changes will be reflected by updating the "Last updated" date and, where appropriate, a notice in the App.
13. Contact
mondov, s. r. o.
Email: support@harvestjournal.app
This Privacy Policy is effective as of 13 September 2026.