This policy covers the Android app Farmonomic and this website. It is deliberately specific: it names every piece of data the app actually processes, and none that it does not. The German version is authoritative.
1. Controller
Patrick Escher
Zum Brodack 9
29562 Suhlendorf, Germany
E-mail: dallwerk2@gmail.com
2. What the app does not do
No ad SDK, no analytics, no crash reporting, no cross-app tracking, no profiling, no automated decision-making, no selling of data. The app requests no location, contacts, camera or microphone permission. The permissions it does request are limited to internet access, notifications, vibration and the boot receiver that restores scheduled reminders.
3. Data processed
| Data | Purpose | Legal basis | Recipient |
|---|---|---|---|
| Anonymous account id (random UUID created on first launch) | Tie your save game to your device | Art. 6(1)(b) GDPR (contract) | Supabase (EU) |
| Player name you choose | Shown to other players in guilds, trades and jobs | Art. 6(1)(b) GDPR | Supabase (EU), visible to co-players |
| Save game: fields, machines, buildings, animals, ledger, progress | Cloud backup, continuing after reinstall, guild play | Art. 6(1)(b) GDPR | Supabase (EU) |
| Chosen land parcels and the postcode you search with | Picking real fields on the map | Art. 6(1)(b) GDPR | Supabase (EU) |
| Google account id and e-mail — only if you enable account backup yourself | Recovering your farm after device loss or reinstall | Art. 6(1)(b) GDPR | Google, Supabase (EU) |
| Purchase and subscription status (no payment details) | Unlocking premium features | Art. 6(1)(b) GDPR | Google Play, RevenueCat (USA) |
| Name, e-mail and message if you use the feedback form | Replying to your request | Art. 6(1)(a) GDPR (consent by sending) | Supabase (EU); also sent as e-mail to my Google (Gmail) mailbox |
| IP address when map tiles are loaded | Displaying the map | Art. 6(1)(f) GDPR (legitimate interest) | OpenStreetMap Foundation (United Kingdom) |
The app's fonts ship inside the installation package. Nothing is fetched from a font server at startup, so no IP address goes there either.
4. Recipients
Supabase hosts the database and authentication; this project's database is located in the Ireland (EU) region. A data processing agreement is in place; EU Standard Contractual Clauses cover support access from the USA.
Google processes purchases via Play; I never see payment details, only whether a subscription is active. If you enable account backup, Google verifies your sign-in and passes me your account id and e-mail address.
RevenueCat manages subscription status and receives the anonymous account id plus the Play purchase confirmation. Based in the USA, Standard Contractual Clauses.
OpenStreetMap Foundation serves the map tiles and therefore sees your IP address and the map section you look at. Not opening the map does not trigger this.
5. Retention
- Save game and account stay until you delete them — see Delete account. Deletion is complete and immediate; there is no recycle bin.
- Feedback messages are deleted once the matter is settled, at the latest after twelve months.
- Purchase records are subject to statutory retention periods and are held by Google, outside my control.
6. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Consent can be withdrawn at any time with future effect. Contact dallwerk2@gmail.com. You may also lodge a complaint with a data protection supervisory authority.
7. Children
The app is not directed at children under 13 and does not knowingly collect data from them.