App Privacy Policy

Privacy Policy — TAU Winter Buds Scanner

TAU Winter Buds Scanner is a professional agricultural research tool used by authorised orchard staff and researchers to record video scans of kiwifruit winter buds and upload them for analysis. This policy explains what data the app collects, how it is used, where it is stored, and the choices you have.

The app is intended for authorised business users. It is not directed at children and does not offer public account registration. Accounts are provisioned by Tau.

1. Data We Collect

1.1 Account Information

• Email address and password: These are used solely to sign you in to the Tau research platform at kiwifruitiq.tau.co.nz .
• Your password is transmitted over HTTPS and is never stored on the device.
• After sign-in, the app stores only access and refresh tokens. These tokens are kept in the iOS Keychain, which provides hardware-backed encrypted storage.

1.2 Device Information

• Data collected: Device type and hardware model, such as iOS or iPhone15,2.
• Purpose: This information is registered with your account so we can associate scan quality with the capturing hardware and provide technical support.
• We do not collect advertising identifiers, IDFA information, or device-fingerprinting data.

1.3 Camera and Video Recordings

• With your permission, the app uses the camera to record video scans of kiwifruit vines in the orchard.
• Recording begins only when you explicitly tap "Start Scan".
• The app does not access the microphone. Video recordings contain no audio.
• Recordings are intended to capture orchard rows and canopy. Please avoid deliberately filming people.
• Any incidental footage of people is used only for the agricultural research purposes described in this policy.

1.4 Location and GPS Tracks

• With your permission, the app records your GPS position while a scan is in progress.
• The recorded information may include latitude, longitude, elevation, and timestamp.
• This information is saved as a GPX track alongside the video and is used to map each scan to the physical orchard rows it covers.
• Location is collected only while the app is in use and only during an active scan .
• The app does not track your location in the background or outside recording sessions.

1.5 Scan and Orchard Metadata

• The app may collect site and block identifiers, scan type, row and bay measurements, fruit category, and per-frame camera metrics.
• Camera metrics may include exposure, brightness, and detection counts recorded in a CSV file.
• This information is agronomic and technical data rather than personal data, but it may be linked to your authorised user account.

1.6 Diagnostics

• Basic operational events, such as login success or failure and upload errors, are logged locally on the device using Apple's unified logging system.
• These logs are used to diagnose technical problems and maintain the reliability of the app.
• The app does not include third-party analytics, advertising, or tracking SDKs.

2. How We Use Your Data

We use the information described above only to:

1. Authenticate you and secure access to the Tau research platform.
2. Capture, upload, and process orchard scan videos, GPS tracks, and scan metrics for kiwifruit crop research and yield analysis.
3. Associate scans with the correct orchard site, block, device, and authorised user.
4. Notify you about upload progress and completion through local notifications on your device.
5. Provide technical support and maintain service reliability.

The app does not send remote push notifications.

We do not use your data for advertising, marketing profiling, or tracking as defined by Apple's App Tracking Transparency framework.

We do not sell personal data to anyone.

3. Where Your Data Goes and How It Is Protected

• Data in transit: All communication between the app and our servers uses HTTPS/TLS encryption.
• Uploads: Videos and GPX tracks are uploaded to secure Amazon Web Services S3 cloud storage using short-lived pre-signed URLs.
• Uploaded data is encrypted at rest using server-side encryption with AWS Key Management Service (AWS KMS).
• Authentication tokens: Access and refresh tokens are stored in the iOS Keychain.
• On-device files: Recordings and logs awaiting upload are stored in the app's private sandbox.
• Local recordings are removed when you delete them from the app's Dashboard.
• Cloud infrastructure providers, such as AWS, act as data processors under agreements requiring protections consistent with this policy.
• We do not share your personal data with other third parties except where required by law.

4. Data Retention and Deletion

• Local recordings remain on your device until they are uploaded and/or deleted by you through the app's Dashboard.
• Uploaded scan data is retained on the Tau research platform for as long as it is needed for the relevant research programme.
• When the data is no longer required, it will be deleted or anonymised.
• You may request access to, correction of, or deletion of your account and associated personal data by contacting us using the details below.
• We will process verified requests within a reasonable timeframe and in accordance with applicable law.

5. Your Choices and Permissions

• Camera and Location: These permissions are requested within the app and can be revoked at any time through iOS Settings → Privacy & Security .
• The app cannot record scans without camera and location permissions. Revoking these permissions does not otherwise delete your existing data.
• Notifications: Notifications are optional. Declining notification permission only disables upload-status alerts.
• Logging out: Selecting Settings → Log out removes your authentication tokens from the device.

6. Legal Basis and Applicable Law

We process personal data in accordance with the New Zealand Privacy Act 2020 and, where applicable to overseas users, the General Data Protection Regulation (GDPR).

Processing is based on the performance of our research services agreement with your organisation and our legitimate interest in operating, maintaining, and securing the Tau research platform.

7. Children's Privacy

The app is a professional tool intended for authorised adult users. It is not directed at, or intended for use by, children under the age of 16.

We do not knowingly collect personal data from children.

8. Changes to This Policy

We may update this Privacy Policy as the app's functionality and services evolve.

Material changes will be published on this page with a new effective date and, where appropriate, communicated through the app or to your organisation.

9. Contact Us

For privacy questions, access, correction or deletion requests, or complaints, contact us using the following details:

• Website: https://tau.co.nz
• Email: contact@tau.co.nz