Yonga Spray privacy policy

Everything you keep in the app is saved on your phone: your fields, with their sizes, their crops and, if you add them, a customer and an address; your products, with their registration numbers and label values; your people and their licence numbers; your sprayers; every record, voided ones too; the entries you wrote or spoke; the words the app learned from your picks; and your settings.

This data sits in the app’s private storage, which other apps cannot read. Re-entry and harvest times, and the notice that a field may be entered or harvested again, are worked out on the phone itself; no push service is involved. The CSV and PDF files of an export are written on the phone, in the place you choose.

If Android’s backup is turned on for your phone, Android may keep a copy of this data in your own backup and bring it back on a new phone. That copy is handled by Android and your Google account, not by us.

The app uses these permissions:

• Network access, to have entries read once you have allowed that, and to see whether there is a connection.
• Notifications, asked for only if you want a notice when a field may be entered or harvested again.
• Microphone, asked for the first time you tap the microphone to speak an entry.
• Background work, also after a restart, so that an entry waiting for a connection is read when one returns, and a notice comes when it is due.

It does not ask for your location, contacts, camera, photos or files, and it does not read your advertising ID.

Nothing leaves the phone until you allow reading. The first time you record an entry, the app shows what would be sent and asks. If you choose “Not now”, your entries stay on the phone, unread. The choice stays in Settings, where you can turn reading on or off at any time.

With reading on, each entry you record is sent to our server to be read. The request contains:

• the text of the entry and the date and time it was written;
• your setup, as far as reading needs it: the names and sizes of your fields and what grows on them; the names, kinds and active ingredients of your products; the names of your people and of your sprayers; and any other names you gave them;
• the words the app has learned from your picks, such as your own name for a block;
• whether you work in metric or US units, and identifiers the app made up at random for the entry and for each field, product, person and sprayer, so that the answer can point back at them;
• an access key that identifies this installation of the app.

It does not contain your records, your licence and registration numbers, the customer and address kept on a field, or the label values of your products.

The access key is created at random. It is not your name, email address, phone number or advertising ID, and we have no way of telling who it belongs to.

An entry is free text, so it holds whatever you say or write in it, and a name is sent as you wrote it: a field named after a customer or an address carries that name. Please keep passwords, payment details and anything private that a spray record does not need out of your entries and your names.

Pasting a list of fields or products to set them up works the same way: the text you paste is sent to be read, and only while reading is on.

Entries written while reading is off stay on the phone. One of them is sent only if you later open it and choose to have it read.

Two kinds of service handle a request.

Our server. It checks the access key, applies the fair-use limits and passes the entry on to be read. It does not write the text of your entries, your setup or the answer to its storage or to its logs. The answer is held in the server’s memory for up to an hour, so that a request repeated after a lost connection is not read twice, and is then discarded. What the server does keep is a record of the installation, counts of its requests, and totals for the whole service, such as how many entries were read in a day.

AI service providers. The reading itself is done by third-party AI services: one reads the entry, and a second checks every line of what was read. Between them they receive the entry’s text, date and time, your setup as listed above, the learned words and your units. They do not receive the access key or the identifiers, and because the request reaches them from our server, they do not see your IP address or anything about your phone.

These providers process a request in order to answer it. Under the terms that apply to us, they do not use your entries to train their models. We also ask them not to keep a request wherever a service offers that choice; they may still retain it for a limited time under their own terms, for example to detect abuse.

We treat which providers we use as business information, but we will name the current ones if you ask: write to [email protected].

Traffic between your phone, our server and these providers also passes through the hosting and network providers that carry it. Our server and the services described here may process data in countries other than the one you live in.

A spray record names people: the applicator, with a licence number, and in lawn care often a customer and an address. All of that is stored on your phone. Of it, reading sends only names: the names of your people, and a customer’s name or an address where you used it as a field’s name or wrote it in an entry.

You keep these records for your own farm or business, and you are responsible for handling other people’s details in line with the rules that apply where you work. If someone named in your records asks us about their data, we will refer them to you: the records are on your phone, not with us.

When you tap the microphone, your phone’s own speech recognition service listens and turns what you say into text in the entry box. The app asks for the microphone for this and for nothing else.

Spray does not record, store or send the sound. It receives the text, which you can read and correct before you record it; from there it is an entry like any other. The speech service is part of your phone, not of Spray: whether it works on the phone or sends the sound to its own provider depends on that service and on your phone’s settings. Where there is no connection, Spray asks it to work on the phone.

• No advertising, and no advertising identifiers.
• No analytics or tracking software in the app.
• We do not sell or rent your data, and we share it with no one except the service providers described above.
• We do not build a profile of you or your farm from your entries, and we do not use them to train AI models.
• We do not send marketing email. The app never asks for your address.

On your phone, your data stays until you delete it. Spray records usually have to be kept for years, and the app never removes one by itself. “Delete everything” in Settings erases every field, product, person, sprayer, record, entry and learned word. Uninstalling the app also removes everything it stored on the phone. A copy kept by Android’s backup is managed in your phone’s backup settings, not in the app.

You can stop entries leaving the phone at any time with “Turn reading off” in Settings. An entry still waiting to be read at that moment stays on the phone.

Our server holds no copy of your entries or your setup, so there is nothing of that kind to delete there. The counts of an installation’s requests are removed by a regular cleanup: the per-minute counts after an hour, the per-day counts after 40 days. The installation record is kept while the service runs. It is not linked to your identity; if you want it removed, write to [email protected] and we will work out with you which installation is yours.

Requests held by the AI service providers are removed under their own retention rules.

Everything the app sends travels over an encrypted connection. On the phone, the access key is stored encrypted with the phone’s own keystore and is left out of backups, and our server keeps only a one-way fingerprint of it. No system is perfectly secure; holding very little is the main protection we rely on.

Depending on where you live, for example under the GDPR in Europe or the KVKK in Türkiye, you can ask what data we hold about you, have it corrected or deleted, object to its processing or have it restricted, receive a copy of it, and complain to your data protection authority.

Most of your data is on your phone and under your control. For anything else, write to [email protected]. You will get an answer within 30 days, usually much sooner.

Where the law asks for a legal basis: entries are sent for reading on the basis of your consent, which you give by allowing reading and withdraw by turning it off. The installation record and the request counts are kept on the basis of our legitimate interest in keeping the service available and free of abuse.

Yonga Spray is made for people who apply pesticides and fertilizers as part of their work. It is not directed at anyone under 18, and we do not knowingly process a child’s data.

Yonga Spray is made by Yonga Works, an independent software developer based in Türkiye and the controller of the data described on this page. The same person writes the code, answers support mail and handles any request about data.

Contact: [email protected].

If this policy changes, the date at the top changes with it. There is no archive; the page you are reading is the current one.

We will not widen what leaves your phone without asking you in the app first.