Privacy Policy

Draft for review. Remove this box before publishing.

This policy was drafted from a read-only review of the app's code and the website's design. It needs review by Justin and, ideally, an attorney. Highlighted items need confirmation:

Legal entity name and state once SK Farm Systems is incorporated (planned C corporation).
Retention periods for accounts, activity logs, and inquiries.
Which email service receives form messages and alert emails (code points to Microsoft 365 for alerts).
Whether SMS alerts will be offered. The app stores a phone number and SMS setting, but no SMS sending was found.
Whether the Android build includes any analytics, crash reporting, or advertising SDKs. None were found in the web code. The Android project wasn't in the repo reviewed.
Whether Android requests location permission for Bluetooth scanning.
Whether US state privacy laws apply, and whether a non-form contact method is required.

1. Who we are

"SK Farm Systems," "we," "us," and "our" refer to the business developing the Smart Bin Opener. [Legal entity name and state of incorporation to be added once SK Farm Systems is incorporated.] We're based in the United States.

When the app is used by a farm, feed mill, delivery company, or other organization, that organization usually sets up users and decides how the system is used on its sites. In those cases we process account and activity information to provide the service to that organization.

2. The website

You can browse skfarmsystems.com without creating an account.

No analytics, ads, or tracking cookies. The website doesn't use analytics tools, advertising pixels, or tracking cookies. Fonts and images are served from our own site.
Hosting logs. Our hosting provider, Google Firebase Hosting, and the content delivery network it uses, process technical information such as your IP address, browser type, and the pages requested. They need this to deliver the site and protect it from abuse.
Links. The Customer Login button takes you to the Smart Bin Opener app at sbo.skfarmsystems.com, which is covered in section 4. Research articles link to outside websites, which have their own privacy practices.

3. The inquiry form

When you use our contact form, we collect what you enter: your name, company or farm, email, phone number (optional), role, inquiry type, and message.

The form is processed by Formspree, a form-handling service. Formspree receives your submission, may collect technical information such as your IP address and browser details, and may use automated tools to filter spam. It then delivers the message to our business email. Formspree stores submissions on its systems for a period that depends on our plan and settings, and its own privacy policy applies to its processing. Your message is also kept in our business email [provider to be confirmed].

We use inquiries only to respond to you and to follow up on your request, such as scheduling a demo or handling a privacy request. We don't add inquiries to a marketing list unless you ask us to.

4. The Smart Bin Opener app

The app is available on the web and on Google Play. An Apple App Store version is planned. Here's what it collects:

Category	Examples	Source
Account information	Name, username, password (stored only in hashed form), role and access level, organization and farm memberships, account email, alert email, and optional phone number	You or your organization's administrator
Preferences	Alert settings, default view, language, and display theme	You
Farm and equipment information	Organization, farm, and bin names. Bin locations (GPS coordinates). Bin opener device identifiers, status, and connection health. Lid open or closed status	Your organization, and the opener devices
Activity and audit logs	Lid openings and closings with the user, farm, bin, and time. Manual-override openings detected by the opener. Alerts and alert emails sent. Password reset requests. Data imports. Administrative actions, including when an administrator acts on behalf of a user for support	Created as the system is used
Device location	Your device's location, only when you choose to use it, such as when you tap a button to fill in a bin's coordinates	Your device, with your permission
Bluetooth	Information about nearby bin opener devices, used to find and connect to them	Your device, with your permission
Technical information	IP address and request details, used for security purposes such as limiting repeated failed sign-ins. Server and hosting logs	Your device and browser
Information stored on your device	A sign-in token, a cached copy of your profile, language and theme settings, and activity waiting to be uploaded. This information is kept in your browser's or app's local storage	The app

The app doesn't use advertising, and it doesn't use third-party analytics in its web version [confirm for the Android build].

Manual overrides: when a lid is opened without the app, the system is designed to log that a manual-override opening happened and when. It doesn't identify the person who opened the lid.

Planned features: as GPS and Wi-Fi capabilities are added to the opener hardware, the opener may report its location and connection details. We'll update this policy before those features launch.

5. How we use information

To provide the app: signing you in, controlling access, opening and closing lids, showing the dashboard, and keeping activity logs
To send alerts you or your organization have turned on, such as an email when a bin has been open too long
To support users, troubleshoot problems, and respond to requests
To keep the website and app secure and prevent misuse
To develop and improve the Smart Bin Opener
To respond to inquiries, schedule demos, and follow up on pilot interest
To comply with law and enforce our terms

We do not sell personal information, and we don't share it for targeted advertising [confirm].

We share information with service providers that help us run the website and app, only as needed for them to provide their services:

Google: Firebase Hosting and Cloud Run, which host the website and app, and Google Maps Platform, which shows maps in the app. When a map loads, Google receives information such as your IP address.
Supabase: database and storage for app data.
Microsoft: email service used to send alert and account emails.
Formspree: processes website inquiry forms.
Google Play and, when available, Apple's App Store: distribute the mobile app. Their own privacy policies apply.

Within an organization, people with the right access, such as administrators and managers, can see that organization's users, sites, and activity logs. We may also disclose information if required by law, to protect people or property, or as part of a merger, financing, or sale of the business, subject to this policy.

7. Retention

We keep account information while an account is active and for a reasonable time afterward. We keep activity logs as long as needed to provide records to the organizations that use the system. We keep inquiries as long as needed to respond and follow up. [Specific retention periods to be confirmed.] We may keep some information longer when the law requires it or to resolve disputes.

8. Security

We use reasonable safeguards, including encrypted connections, hashed passwords, access controls by user and organization, and limits on repeated sign-in attempts. No system is perfectly secure, so please keep your password private and tell us if you think your account has been compromised.

9. Your choices and requests

You can ask to access, correct, or delete your information, or ask a question about this policy. Use our contact form and choose "Privacy / Account Deletion Request."

Submitting a request doesn't automatically delete your account or data. We'll review your request, may ask you to verify your identity, and will follow up by email.
If your account was set up by an organization, we may need to work with that organization's administrator. Some records, such as activity logs for that organization's bins, may be kept for the organization or as required by law. If so, we'll explain what is kept.
You can turn off alert emails in your app settings. You can also deny or turn off location and Bluetooth permissions in your device settings, though some features may not work without them.

Depending on where you live, you may have additional rights under local law. We'll honor requests as required by applicable law.

10. Children

The website and app are meant for businesses and their workers. They aren't directed to children under 13, and we don't knowingly collect personal information from children under 13.

11. Where data is processed

We're based in the United States, and our service providers mainly process data in the United States. If you use the website or app from another country, your information may be transferred to and processed in the United States.

12. Changes to this policy

We'll update this policy as the product develops. We'll post the new version here with a new effective date. For significant changes, we'll provide additional notice where appropriate, such as in the app.

13. Contact

For privacy questions or requests, use our contact form and choose "Privacy / Account Deletion Request." We'll reply by email.