Your records are yours. Here is exactly what we hold.

Who we are

SawitSync is a record-keeping app for oil palm smallholders in Malaysia, available at app.sawitsync.com and in the app stores. For the purposes of the Personal Data Protection Act 2010 ("PDPA"), the data user is the operator of SawitSync, based in Malaysia. For anything about your personal data, write to privacy@sawitsync.com.

By creating an account you consent to the processing described here. If you don't agree, please don't create an account — the app cannot run without the data below.

What we collect

• Account. Your email address, a password (stored only as a hash, which we cannot read), your name if you give it, and your language preference. If you sign in with Google, we receive your name, email address and Google account ID from Google instead of a password. If you sign in with Apple, we receive an Apple user ID, the email address Apple gives us (which can be a private relay address if you choose Hide My Email) and, the first time only, your name if you share it.
• Farm. The farm name, its currency and weight unit, and the accounts of the members you invite.
• Lots. Names, acreage, palm age, soil type, palm count, and — only if you set it — the lot's map location.
• Records. Harvests, income and cost entries, fertiliser applications, spraying and pruning logs, and plans, as you enter them.
• Receipt photos. Only if you take or choose one: the photo of a mill slip or shop receipt, kept with the record it belongs to so you can look at it later. Deleting the record deletes the photo.
• Device. If you turn on reminders, a push-notification token for your phone and whether it is Android or iOS. Turning reminders off removes it.
• Usage. Which screens you open and which features you use (for example "harvest logged", "plan created"), the app version, device type and operating system, and the approximate region your connection comes from. Usage events carry your account ID, never your name, email, amounts, notes or lot names.
• Billing. If you subscribe or start a free trial, your subscription status, plan, trial and renewal dates, plus the subscription ID, purchase token or transaction ID that Google Play, the App Store or our payment processor assigns. Card and e-wallet details go directly to Google Play, Apple or the payment processor; we never see or store them.
• Support. Whatever you send us when you write to us, and the address you write from.

We don't collect contacts, background location, advertising identifiers, or anything from other apps. We don't collect sensitive personal data (health, religion, political opinions, or the like). The app is not intended for anyone under 18.

What it's used for

• Running the app for you — showing your records back to you, working out fertiliser doses and due windows, and fetching a weather forecast for your lots.
• Reminders you have turned on: a nudge when a round is due, and during your free trial up to three reminders to try the app if you haven't. Switch them off in Settings any time.
• Account emails — confirming your address, resetting your password, and receipts if you subscribe. These are not marketing.
• Occasional emails about SawitSync — help getting started, trial reminders and offers on a subscription, sent from the founder to the address on your account. We send these only to people who have an account, there are few of them, and every one has an unsubscribe link. If you unsubscribe you still get account emails, because those are how the service works.
• Billing — starting, renewing and cancelling your subscription.
• Improving the app — usage events tell us which features are used and where people get stuck, in aggregate.
• Keeping it safe — spotting abuse, and keeping our own billing records for subscriptions as tax law requires (never your farm records).

We don't build profiles, sell data, or send anyone else's marketing. We don't make automated decisions about you. We choose who receives an offer email from how long they have had an account and whether they have used the app, never from what is in your farm records or from their amounts, notes or lot names.

Who processes it

Only the farm owner can see a farm's records in the app. If you add someone to your farm, they see it too — you choose who they are. Beyond that, the following companies process data on our behalf, under contracts that restrict them to that purpose:

• Supabase — hosts the database, sign-in service and file storage the app runs on (servers in Singapore).
• Cloudflare — serves the web app and this website (global network).
• Resend — sends our emails: account emails such as confirmation and password reset, and the occasional emails about SawitSync described above (United States).
• PostHog — stores the usage events described above (United States).
• Google Firebase Cloud Messaging — delivers push notifications to your phone if you turn reminders on, through Apple's push service on iPhone (United States / global).
• Dodo Payments — our merchant of record. Handles checkout, card details, receipts and refunds if you subscribe (United States). Their own privacy policy applies to what you enter at checkout.
• Google — if you choose "Continue with Google", Google's own privacy policy governs the sign-in step.
• Google Play — handles payment, free trials, renewals, cancellations and refunds if you subscribe in the Android app. Google tells us the subscription's status so the app can unlock; Google's own privacy policy applies to the payment.
• Apple — if you choose "Sign in with Apple", Apple's privacy policy governs the sign-in step. If you subscribe in the iPhone or iPad app, the App Store handles payment, free trials, renewals, cancellations and refunds; Apple tells us the subscription's status so the app can unlock. Apple's own privacy policy applies to the payment. When you delete your account, we also revoke SawitSync's Sign in with Apple access.
• Google Gemini — an AI service. Reads a weighing slip or receipt photo, only after you agree in the app the first time you scan, and returns the date, amounts and items to fill the form. Sent through Google's paid API, which does not use it to train its models (Singapore / United States).
• Open-Meteo — receives the coordinates of a lot when the app fetches its forecast. No account details are sent.
• OpenStreetMap tile servers receive the area of the map you're looking at when you pick a location.

Authorities and data sharing

SawitSync has no link to any government agency or authority. Nothing in the app reports your harvests, income or costs to anyone.

We will never sell or share your data with any government agency, authority or private company — including dealers, mills, banks and advertisers. The only exception is the service providers listed above, which process it solely to run SawitSync.

Creator codes, only if you use one. If you enter a SawitSync creator's code (for example from a video), and tick the box agreeing to it, your first name and email address are shared with that creator, along with when you signed up and whether your trial and first payments went through, so they know you came through them and are paid for it. Nothing else is shared: not your farm, lots, harvests, money or anything you record. Creators agree to use these details only to talk to you about SawitSync, to stop if you ask, and never to pass them on. If you don't use a code, nothing is shared. If you delete your account, you disappear from the creator's list.

Outside Malaysia

Some of the processors above store data outside Malaysia — in Singapore and the United States. We only use providers that commit contractually to protect your data to a standard at least as strict as the PDPA, and we transfer it on that basis and with the consent you give when you create an account. You can withdraw that consent by deleting your account.

How long we keep it

• Your records stay for as long as you have an account.
• When you delete your account (Account → Delete my account), your profile, farms, lots, records and device tokens are removed from the live database immediately and drop out of backups as they roll over, within 30 days.
• Billing records for paid subscriptions are kept for seven years after the transaction, as Malaysian tax law requires, even after the account is gone.
• Usage events carry only an account ID; once the account is deleted, that ID no longer links to anyone. Write to us if you want them erased outright.
• Support emails are kept for up to two years.

Your rights

Under the PDPA you can:

• Access your data — everything is visible in the app, and Reports → Export CSV gives you a copy of your records any time.
• Correct it — edit any record, your name and your farm settings in the app.
• Withdraw consent — turn reminders off in Settings, leave a lot's location unset (you'll simply get no weather for it), or delete your account.
• Stop direct marketing — use the unsubscribe link at the bottom of any email from us, or write to privacy@sawitsync.com from the address on your account and we will stop. The trial reminders in the app are notifications you can switch off in Settings.
• Delete — each harvest, entry or log has a delete action; Account → Delete my account removes everything. A farm member's deletion removes them from the farm and leaves the farm's records with its owner.
• Port your data — the CSV export is in a plain format you can take anywhere.

If something can't be done in the app, email privacy@sawitsync.com from the address on your account. We respond within 21 days. If you're not satisfied with our answer you can complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi) at pdp.gov.my.

Security

Data travels over TLS. It lives in a managed Postgres database with row-level security: every query is restricted on the server to the farms you belong to, and there is no path from one farm's data to another's. Passwords are hashed. Only the operator has administrative access, and only for support and maintenance. If a breach ever puts your data at real risk, we will tell you and notify the Commissioner as the PDPA requires.

Changes

If this notice changes in a way that matters, the app will say so on the dashboard before the change takes effect. The date of the current version is at the bottom of this page.