Privacy Policy
This Privacy Policy (“Privacy Policy”) explains how RENTO, UAB (“Company”, “we”, “us”), publisher of the Farmis family of agricultural applications, collects, stores, uses, and discloses personal information from our users (“you”).
Apps covered by this Privacy Policy
This is a single, unified Privacy Policy that applies to all of the following applications, to the website farmis.com and its subdomains, and to all related services (each an “App”, collectively the “Apps”):
| Application | Android package | Apple App ID |
|---|---|---|
| Farmis (farm management) | com.noframe.farmmanager | 1118014967 |
| GPS Fields Area Measure | lt.noframe.fieldsareameasure | 1123033235 |
| Field Navigator | lt.noframe.farmisfieldnavigator.free | 6587557525 |
| Sprayer Calibrator | lt.farmis.apps.sprayercalibrator | 1382685677 |
| Soil Sampler | com.noframe.farmissoilsamples | N/A |
| BBCH Tracker | lt.farmis.apps.bbch_tracking | N/A |
| Agrobase – weed, disease, insects | lt.farmis.apps.farmiscatalog | 1314976795 |
| Calcagro – Farming Calculator | lt.farmis.apps.agrocalculator | N/A |
Not every App collects every category of data described below. Section 3 sets out which data each App collects. Where an App does not offer a given feature — for example, account registration or Google Sign-In — the corresponding provisions of this Privacy Policy do not apply to that App.
1. Acceptance of Privacy Policy. Changes to Privacy Policy
This Privacy Policy is an integral part of the Terms of Use. By accepting the Terms of Use, you also accept this Privacy Policy.
We reserve the right to and may periodically change, amend, or update this Privacy Policy. We will notify you by email, through the relevant App, or by presenting you with a new version of the Privacy Policy for you to accept if we make modifications that materially change your rights, including any change to how the Apps use Google user data. Your continued use of an App after the effective date of an updated version of this Privacy Policy will indicate your acceptance of the Privacy Policy as modified.
We do not ask you to consent to everything described in this Privacy Policy as a condition of using the Apps. Most of the processing set out below is necessary in order to provide the Apps to you under the Terms of Use, or rests on our legitimate interests in operating, securing and improving them. Consent is used only where applicable law requires it, most importantly for personalised advertising, and it is asked for separately from your acceptance of this Privacy Policy. Section 6 sets out the legal basis on which we rely for each purpose.
Where we rely on your consent, you may withdraw it at any time, and withdrawal does not affect the lawfulness of the processing carried out before you withdrew it. Your advertising choice can be changed at any time through your device’s advertising settings (the advertising ID controls in Android system settings, or the app tracking permission for the relevant App on iOS). For any other consent, or if you are unable to change a setting yourself, write to us at [email protected] and we will action the withdrawal.
Please be advised that some personal data is necessary for the Apps to work at all. If you do not provide it, or if you ask us to erase it, the availability and functionality of the Apps may be partially or fully limited. This is because the core functionality of several Apps is built upon the personal data and other information provided by you.
2. Personal data we collect about you
When you download, install, and use an App, we may collect the following personal data about you:
- Your email address;
- Your phone number;
- Your name;
- Social network profile information, where you sign in using a social or Google account;
- Your language (locale) preference, where this is provided to us by the sign-in provider you choose;
- Geolocation information (GPS data), including precise location while a measurement, navigation or sampling session is running;
- Photos;
- Agronomic data you create in the Apps, including field names, field boundaries, field notes, crop and treatment records, spraying and calibration records, soil sampling points, and growth-stage observations;
- Any other information that you create and (or) import while using the Apps.
We collect this information from the moment you download an application, register (create an account) in an App and (or) visit one of our web pages.
Your account information is stored on our servers, operated at https://app.accounts.farmis.lt/, which are located in Lithuania (EU). A single Farmis account may be used across several of the Apps; where it is, the data associated with that account is stored once and shared between those Apps under your control.
3. What each App collects
The table below summarizes the categories of personal data collected by each App. All Apps collect the automatically-gathered technical information described in Section 4.
| Application | Account (name, email) | Precise location (GPS) | Photos | Agronomic / field data | Google Sign-In offered |
|---|---|---|---|---|---|
| Farmis (farm management) | Yes | Yes | Yes | Yes | Yes |
| GPS Fields Area Measure | Yes | Yes | Optional | Yes | Yes |
| Field Navigator | Optional | Yes | No | No | No |
| Sprayer Calibrator | No | Yes | No | No | No |
| Soil Sampler | No | Yes | No | No | No |
| BBCH Tracker | No | Yes | No | No | No |
| Agrobase – weed, disease, insects | Optional | No | No | No | No |
| Calcagro – Farming Calculator | No | No | No | No | No |
Where an App is marked as offering Google Sign-In, and you choose to use it, that App also receives the language preference described in Section 5.
4. Personal data we collect automatically
When you download, install, and use an App, we may also automatically collect the following information:
- Information about your device, including type of hardware, operating system and its version, unique device identifier, and settings;
- Information gathered about your use of the App (frequency of use, features used, experienced problems, crash reports) via cookies or similar technologies. We need such information in order to improve the Apps’ functionality and technical stability.
If the information covered by Sections 2, 3 and 4 is aggregated or de-identified so that it is no longer reasonably associated with an identified or identifiable natural person, we may use it for any business purpose. To the extent information covered by these Sections is associated with an identified or identifiable natural person and is protected as personal data under applicable data protection laws, it is referred to in this Privacy Policy as “personal data”. We use pseudonymization for particular types of personal data. Pseudonymized data remains personal data, and the rights described in Section 8 continue to apply to it. Where we are genuinely no longer able to identify you from the data we hold, we are not required to obtain additional information for the sole purpose of complying with a request; in that case we will tell you so, and you may provide additional information that enables us to identify you.
5. Google user data
Those Apps identified in Section 3 as offering Google Sign-In allow you to authenticate using your Google account. This Section describes specifically what Google user data those Apps access, how it is used, stored, shared, retained and deleted. It applies in addition to, and prevails over, the general provisions of this Privacy Policy.
What we access. When you choose to sign in with Google, we request the following OAuth scopes and receive the following data:
openid— a unique Google account identifier used to authenticate you;https://www.googleapis.com/auth/userinfo.email— your Google account email address;https://www.googleapis.com/auth/userinfo.profile— your name, your profile picture, and the language (locale) preference set on your Google account.
We do not request access to your Gmail, Google Drive, Google Contacts, Google Calendar or any other Google service beyond the scopes listed above.
How we use it. We use Google user data solely to:
- create your Farmis account and authenticate you when you sign in to any of the Apps;
- identify you within the Apps and display your name and profile picture in your profile;
- present the Apps in your preferred language and set your initial language, date, number and unit formats accordingly, where we support that language;
- link your data across the Apps you use under the same Farmis account;
- contact you about your account, security alerts, and service or support issues.
We do not use Google user data for advertising, ad personalization, profiling, credit assessment, resale, or to develop, improve or train generalized or non-personalized artificial intelligence or machine learning models. Google user data is not used to segment, target or personalize content or advertising, and it is not shared with the third-party services listed in Section 7.
How we store it. Google user data is stored on our servers located in Lithuania (EU), encrypted in transit (TLS/SSL) and at rest. Access is restricted to those employees who require it to operate the Apps, as described in Section 9.
How we share it. We do not sell, transfer, or disclose Google user data to third parties. In particular, Google user data is never shared with any of the advertising or analytics providers listed in Section 7, is not used to build advertising audiences or profiles, and is not disclosed to integrated Third-party services. The only exception is disclosure required by applicable law or valid legal process.
Retention and deletion. We retain Google user data for as long as your Farmis account remains active. You may delete your account at any time from the settings of any App that supports account registration, or by emailing [email protected] with the subject “Data Deletion Request”; your Google user data is deleted from our production systems within 7 days of the verified request, and purged from encrypted backups within 90 days. Because a single Farmis account may be shared across several Apps, deleting the account deletes the associated Google user data for all of them. You may also revoke Farmis’s access to your Google account at any time at https://myaccount.google.com/permissions; revoking access stops any further data being received from Google, and you may then request deletion of previously received data as described above.
Limited Use. The Farmis Apps’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. How we use your personal data
We use the information collected about you and your use of the Apps to operate and improve the Apps and to deliver a better experience.
We may also need your information in order to delete, forbid or block any Content (as defined in the Terms of Use) that violates this Privacy Policy or the Terms of Use, or to investigate any illegal or suspicious use of the Apps.
Generally, we use your personal data for the following purposes:
- To contact you where needed;
- To provide the core functionality of each App — for example, to calculate field area from your GPS track, to guide parallel passes across a field, to calculate spray rates, to record soil sampling points, or to record crop growth stages;
- To synchronize your data between the Apps you use and across your devices;
- To present the Apps in your preferred language and apply the corresponding regional formats;
- To deliver a more personalized and adapted experience to you;
- To enhance or improve your user experience in the Apps;
- To understand how you use the Apps;
- To share aggregated or anonymized data that cannot reasonably be used to identify you, as described in Section 7;
- To share your information with integrated Third-party services in order for such services to provide you with additional functionality within the Apps (for example, additional analytics and insights), where you have opted in;
- To send you technical notices, updates, security alerts and administrative messages relating to your account and the operation of the Apps;
- To send you promotional and marketing materials. You may object to direct marketing at any time, and every marketing message contains an unsubscribe link. Objecting to marketing does not stop the service and security messages described above;
- To respond to your comments, questions and requests and to provide customer service;
- To perform all other actions reasonably required for the maintenance and operation of the Apps.
The uses of Google user data are limited to those set out in Section 5, and the purposes listed above do not extend to Google user data where they conflict with Section 5.
Legal bases for processing. Under the GDPR, we rely on the following legal bases:
- Providing the Apps — account creation and authentication, the core features of each App, synchronization of your data across devices, and presenting the Apps in your language and regional formats: performance of a contract with you (Article 6(1)(b) GDPR);
- Customer support — responding to your comments, questions and requests, and sending service, security and administrative messages: performance of a contract with you (Article 6(1)(b) GDPR);
- Technical stability and product analytics — crash diagnostics, measurement of feature usage, and improvement of the Apps: our legitimate interests in maintaining and improving the Apps (Article 6(1)(f) GDPR);
- Protecting the Apps — investigating illegal or suspicious use, and enforcing the Terms of Use: our legitimate interests in protecting the Apps and their users (Article 6(1)(f) GDPR);
- Personalized advertising — use of your advertising identifier and associated usage data for personalized ads: your consent (Article 6(1)(a) GDPR), obtained as described in Section 7;
- Direct marketing — promotional and marketing messages: our legitimate interests in promoting the Apps (Article 6(1)(f) GDPR), subject to your right to object at any time under Article 21(2) GDPR;
- Integrated Third-party services — disclosure of field data to a service you have chosen to connect: your consent (Article 6(1)(a) GDPR);
- Legal compliance — meeting our legal obligations and responding to valid legal process: compliance with a legal obligation (Article 6(1)(c) GDPR).
7. How we share your personal data
All personal data uploaded from your mobile device or entered by you is stored on our servers for the purposes indicated in Section 6 of this Privacy Policy. We do not share your information with any third parties except as specified in this Privacy Policy and (or) where you provide your consent.
Third-party services. We use the third-party services listed below for advertising, analytics and crash reporting. They receive device and advertising identifiers together with technical and usage data about your interaction with the Apps. Identifiers of this kind are treated as personal data under the GDPR and are covered by this Privacy Policy. These services do not receive any data obtained through Google Sign-In or any other Google API, including your language preference, and they do not receive your field data, field notes or photos.
These services are operated by companies established outside the European Economic Area. Both Google and Meta are certified under the EU–U.S. Data Privacy Framework and also offer the European Commission’s Standard Contractual Clauses. Section 10 describes these transfers in more detail. The privacy policy of each service can be found at the links above.
Advertising. Advertising in the Apps is served by Google AdMob. Where consent is required in your country, AdMob presents its own consent dialog before personalized advertising is enabled, and the choice you make there is recorded and applied by that service. If you decline, you may still see advertising in the Apps, but it will not be personalized. You can change your choice at any time through your device’s advertising settings, as described in Section 1.
Analytics and crash reporting. Google Analytics for Firebase and Firebase Crashlytics run in the Apps in order to measure which features are used, diagnose crashes and maintain technical stability. We rely on our legitimate interests for this processing, and it is not currently offered as a separate in-app choice. If you wish to object to it, you may write to us at [email protected], and you can stop it entirely by uninstalling the App.
Google user data is handled solely as described in Section 5 and is never disclosed to any of the services listed above.
Integrated Third-party services. Certain integrated Third-party services may access your personal data in the same manner as the Company does — for example, information about the name of your farm field, notes that you leave on the field, and field boundaries. Any such Third-party service shall treat your information in the same manner as the Company does, and the Company reasonably ensures that such integrated Third-party services are compliant with applicable data protection laws and regulations. Integration of these Third-party services into the Apps gives you additional functions such as analytics and complementary components. We will periodically update our website with information about which integrated Third-party services we currently have in place and how to use them. In every case you must explicitly opt in to the use of such integrated Third-party services (for example, by using a unique link provided by such service and (or) registering in an App via such link). Google user data is never disclosed to integrated Third-party services.
Your own choices. You may choose to share your Content using any third-party service available through the Apps (for example, email providers). Please note that any such third-party service is not governed by this Privacy Policy. For instance, if you choose to send an email to share your photo using your Google account, the applicable Google privacy policy will apply. When you access and use Third-party services via the Apps, we are not responsible for those services and we do not endorse or make any warranties or representations about them.
Aggregated information. We may also share aggregated, anonymized or de-identified information that cannot reasonably be used to identify you. For example, we may share, including without limitation in articles, blog posts and scientific publications, general demographic information and aggregate agronomic statistics in order to help identify patterns across users. Google user data is not included in such aggregated datasets.
8. Principles of processing. Data retention. User rights
Retention. We retain your personal data for as long as your account remains active and for as long as is reasonably necessary for the purposes set out in Section 6, or for as long as is required under applicable law. Where an App is used without an account, data created in that App is stored locally on your device and is deleted when you uninstall the App or clear its data. When the retention period for a given category of data expires, or when you request deletion, we delete or irreversibly anonymize that data. Following a verified deletion request we delete your account and associated personal data from our production systems within 7 days, and purge it from encrypted backups within 90 days, as described in Section 12. We fully adhere to the principles of data minimization, transparency, purpose limitation, accountability and storage limitation in the operation of the Apps.
Modification, correction and erasure. You are able to modify, correct, erase, and update your personal data in the App settings or by writing to us at [email protected]. Your language preference can be changed at any time in the App settings, and any change you make there overrides the preference received from Google.
Access. You have a right to access the personal data you enter into the Apps and to ask us what kind of personal data we hold about you. You can do this using the App settings or by writing to us at [email protected].
EU residents. Individuals residing in the countries of the European Union have certain statutory rights in relation to their personal data under the General Data Protection Regulation (the “GDPR”). Subject to any exemptions provided by law, you may have the right to request access to personal data (including in a structured and portable form), as well as to seek to update, delete or correct personal data:
- Rectification of personal data and restriction of processing. You are responsible for ensuring the accuracy of the personal data that you submit to the Company. Inaccurate information will affect your experience when using the Apps and our ability to contact you as described in this Privacy Policy. If you believe that your personal data is inaccurate, you have the right to contact us and ask us to correct it at [email protected]. You also have the right to request restriction of processing of your personal data if you contest its accuracy and we need time to verify it;
- Access to your personal data and data portability. The Apps give you the ability to access and update personal data within the App and your account settings. You have the right to request information about whether we hold any personal data about you and to access it (including in a structured and portable form) by writing to us at [email protected];
- Erasure of your personal data. If you believe that your personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed, or where you have withdrawn your consent or object to the processing, or where the processing does not otherwise comply with the GDPR, you have the right to contact us and ask us to erase such personal data at [email protected]. Please be aware that erasing some personal data may affect your ability to use the Apps and their features, and that erasure may take some time for technical reasons;
- Right to object to processing of your personal data. You can object to the processing of your personal data and ask us to stop processing it by writing to us at [email protected]. Please be aware that this may affect your ability to use the Apps and their features;
- Personal data breaches. We will notify our supervisory authority of a personal data breach without undue delay and, where feasible, within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to your rights and freedoms. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay;
- Data protection authorities. Subject to the GDPR, you also have the right to (i) restrict our use of personal data and (ii) lodge a complaint with your local data protection authority about any of our activities that you consider not to be compliant with the GDPR. Our lead supervisory authority is the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija).
Please keep in mind that in the case of a vague access, erasure, objection or other request in exercise of the rights mentioned above, we may engage you in a dialogue in order to better understand the request and to locate responsive information. Where this is impossible, we reserve If we are unable to act on a request, we will tell you why, and inform you of your right to lodge a complaint with a supervisory authority and to seek a judicial remedy.
Following the provisions of the GDPR we may also require you to prove your identity in order to exercise these rights. This is to ensure that no rights of third parties are violated by the request and that the rights described in this Section are exercised by the actual data subject or an authorized person.
We will respond to your request without undue delay and in any event within one month of receiving it. Where a request is particularly complex, or where you have made a number of requests, we may extend that period by up to two further months; if we do, we will tell you within one month of receiving the request and explain the reason for the delay. Please note that carrying out a deletion request in full can take longer than our response to it, because personal data stored in our encrypted backup systems is purged on the cycle described in Section 12.
9. Security of personal data
We take all reasonable and appropriate measures to protect all collected personal data, including Google user data, from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the nature of the personal data. Among others, we use the following information security measures:
- Pseudonymization and tokenization of certain categories of personal data;
- Encryption of personal data in transit (TLS/SSL) and at rest;
- Systematic vulnerability scanning and penetration testing;
- Protection of data integrity;
- Organizational and legal measures. For example, our employees have different levels of access to your personal data, and only those in charge of data management are granted access, and only for the limited purposes required for the operation of the Apps. Our employees are bound by confidentiality obligations in relation to your personal data, and any disclosure, unauthorized access, alteration, destruction or misuse is treated as a disciplinary matter;
- Periodic data protection impact assessments to ensure that the Apps adhere to the principles of “privacy by design” and “privacy by default”. We also commit to undertake a privacy audit in the event of a merger or takeover of the Company.
You can help keep your information secure by choosing and protecting your password appropriately, not sharing it, and preventing others from using your mobile device. Please understand that no security system is perfect and, as such, we cannot guarantee the absolute security of the Apps or that your information will not be intercepted while being transmitted to us. If we learn of a breach of our security systems, we will take steps to remedy it and will notify you and our supervisory authority in accordance with Section 8(e).
We process information in a way that is compatible with and relevant to the purpose for which it was collected. To the extent necessary for those purposes, we take reasonable and appropriate steps to ensure that any information in our care is accurate, complete, current and reliable for its intended use.
10. Storage and international data transfers
Your account information, agronomic data, photos and Google user data are stored on our own servers, which are located in Lithuania (EU), namely on Interneto vizija servers, and are transmitted to them over an SSL/TLS connection. The Interneto vizija privacy policy can be found here.
The third-party services listed in Section 7 are operated by companies established outside the European Economic Area, principally in the United States. The device identifiers and usage data described in Section 7 are therefore transferred outside the EEA. Google LLC and Meta Platforms, Inc. are both certified under the EU–U.S. Data Privacy Framework, which is the subject of an adequacy decision of the European Commission, and both additionally make the European Commission’s Standard Contractual Clauses available as a safeguard. You may request further information about the safeguards applying to a particular transfer by writing to us at [email protected].
Apart from disclosures to integrated Third-party services that you have expressly opted in to, we do not transfer your field data, field notes, photos or Google user data outside the European Economic Area.
11. Children’s privacy
We are committed to protecting the privacy of children under the General Data Protection Regulation, the Children's Online Privacy Protection Act (COPPA) and any other applicable law. The Apps are professional tools for agricultural work. They are not intended for, directed to, or designed to appeal to children. You must be at least 16 years old to create a Farmis account or otherwise use the Apps, and by creating an account you confirm that you meet this requirement.
The measures we take are proportionate to that audience. The Apps are published on Google Play and the Apple App Store with a target audience that excludes children, they contain no content directed at children, and we do not direct advertising or marketing communications to children. We do not operate an age verification process, and we do not collect your date of birth, your age or any age band, either from you or from the sign-in provider you choose.
We do not knowingly collect personal data from any person under the age of 16. If we become aware that we hold personal data relating to a person under that age, we will close the account and delete the associated personal data without undue delay.
If you are a parent or guardian and believe that a person under the age of 16 has created an account or otherwise provided us with personal data, please contact us at [email protected]. We will investigate and, where the report is confirmed, delete the account and the associated personal data within the timeframes set out in Section 12.
12. Data deletion instructions
If you would like to delete your account and all associated data, you can do so in the following ways:
In-app deletion:
You can delete your account directly from the settings of any App that supports account
registration.
Request by email:
You can send a request to [email protected] with the subject
“Data Deletion Request”. Please indicate which App(s) you used, although a deletion request will
be applied to your entire Farmis account.
After receiving your request:
- We will verify your identity;
- We will delete your account and all associated personal data from our production systems within 7 days;
- The data will be purged from our encrypted backups within 90 days.
Data deleted includes:
- Account information (email, name);
- Google account data received through Google Sign-In, including your name, profile picture and language preference (see Section 5);
- GPS/location data;
- Uploaded content (fields, boundaries, notes, records, photos) across all Apps used under that account.
Because the Apps share a single Farmis account, deleting your account removes your data from all of them. Data held only locally on your device in Apps used without an account is removed by uninstalling the App or clearing its data.
Some data may be retained where required by law.
If you signed up using Google Sign-In, you may additionally revoke Farmis’s access to your Google account at any time at https://myaccount.google.com/permissions. If you signed up using Facebook Login, your data will be deleted upon request in accordance with the Facebook Platform Terms.
13. Contact us
If you have any questions regarding this Privacy Policy, or wish to exercise any of the rights described above, please contact us at [email protected].
RENTO, UAB
Savanorių pr. 321C, 50120 Kaunas, Lithuania
Registration code: 301592547