Privacy Policy for Microva

Effective date: March 17, 2026

Last updated: March 17, 2026

1. Who is the controller of your personal data

The controller of personal data processed in connection with the Microva – Microgreens Tracker mobile application (the “App”) is Rafal Nawojczyk Code, NIP: 6941689741, ul. Tęczowe Ogrody 24, 72-005 Warzymice, Poland, email: info@microva.app (“Controller”, “we”, “us”, or “our”).

2. Scope of this Privacy Policy

This Privacy Policy explains how we collect, use, store, and otherwise process personal data in connection with your use of the App, including when you:

• install and use the App,
• purchase a monthly subscription, yearly subscription, or lifetime product,
• contact us for support,
• use technical or diagnostic features of the App.

3. What personal data we may process

Depending on how you use the App, we may process the following categories of data:

a) Account and identification data

If you create an account in the App (which is optional), we may process:

• your email address,
• your user ID,
• your display name or profile name,
• information received from a third-party login provider, if you use external sign-in.

b) Data you enter into the App

We may process information that you voluntarily enter into the App, such as:

• names of crops, trays, batches, or projects,
• sowing, growth, and harvest dates,
• notes,
• settings and preferences.

c) Purchase and premium access data

If you purchase paid access, we may process data related to:

• the selected product: monthly subscription, yearly subscription, or lifetime access,
• purchase status,
• subscription status,
• start and expiry dates of premium access,
• information needed to validate your purchase and grant premium access,
• transaction-related identifiers or identifiers assigned by the app store or billing system.

If purchases are made through the Apple App Store or Google Play, we do not generally receive your full payment card details. Payments and billing are handled by the relevant app store, and we receive only the information necessary to confirm the purchase and provide premium access.

d) Technical and diagnostic data

We may automatically process technical data related to the operation of the App, such as:

• device model,
• operating system and version,
• App version,
• device language,
• time zone,
• basic session information,
• crash reports,
• error logs,
• diagnostic data.

e) Contact and support data

If you contact us, we may process:

• your email address,
• the content of your message,
• the history of our communication,
• information needed to resolve your request.

f) Analytics data

We may process analytics and usage data, such as:

• feature usage,
• screen views,
• in-app events,
• approximate device or session identifiers,
• technical interaction data.

4. Where we get personal data from

We receive personal data:

• directly from you,
• automatically from your device when you use the App,
• from payment and billing service providers that support in-app purchases,
• from technical, analytics, and diagnostic service providers we use to operate the App.

5. Why we process personal data and the legal basis

We process personal data for the following purposes:

a) To provide and operate the App

This includes processing data necessary to:

• provide the App’s features,
• save your data and preferences,
• sync your data across devices, if such functionality is available,
• grant and maintain premium access.

Legal basis: performance of a contract or taking steps at your request before entering into a contract.

b) To manage purchases, subscriptions, and lifetime access

This includes processing data necessary to:

• verify purchases,
• assign premium entitlements,
• renew or end premium access,
• handle support requests related to payments and access.

Legal basis: performance of a contract.

c) To ensure security, stability, and improvement of the App

This includes processing data necessary to:

• detect errors,
• prevent abuse,
• monitor performance and stability,
• improve the quality of the App,
• understand usage patterns and improve product functionality.

Legal basis: our legitimate interests in maintaining the security, reliability, and quality of the App.

d) To provide customer support

This includes processing data necessary to:

• respond to your messages,
• resolve technical issues,
• communicate with you about the App or your account.

Legal basis: performance of a contract or our legitimate interests in supporting our users.

e) To comply with legal obligations

We may process personal data where necessary to:

• keep accounting and tax records,
• handle complaints and claims,
• establish, exercise, or defend legal claims.

Legal basis: compliance with a legal obligation and, where applicable, our legitimate interests.

6. Subscriptions and lifetime product

The App may offer the following paid products:

• monthly subscription,
• yearly subscription,
• lifetime product, which provides access for an unlimited period, as described in the App at the time of purchase.

Purchases made through mobile app stores are processed by Apple or Google under their own terms and privacy policies. Apple or Google may process payment-related data, store account data, and purchase history in accordance with their own rules.

We process only the data necessary to confirm the purchase, grant the relevant premium entitlement, and maintain premium access, including through services such as RevenueCat where used.

If your subscription is billed through Apple App Store or Google Play, subscription management and cancellation are handled through your Apple or Google account. Deleting the App does not automatically cancel an active subscription.

7. Who we share personal data with

We may share personal data with service providers who help us operate the App, but only to the extent necessary for them to provide their services.

Depending on the actual configuration of the App, these recipients may include:

• Apple or Google, for app store infrastructure, billing, and purchase processing,
• RevenueCat, for subscription and purchase status management,
• Sentry, for crash reporting and diagnostics,
• Expo and providers of technical infrastructure used by the App,
• Supabase, for authentication and database services,
• PostHog, for analytics.

8. International data transfers

Some of our service providers may process personal data outside the European Economic Area. Where this happens, we take reasonable steps to ensure that appropriate safeguards are in place, as required by applicable law, including, where appropriate, standard contractual clauses or other lawful transfer mechanisms.

9. How long we keep personal data

We keep personal data for no longer than necessary for the purposes described in this Privacy Policy, including:

• account data and App data - for as long as you use the account or App, and then for 60 days where needed for backups and deletion handling,
• subscription and purchase data - for as long as necessary to manage premium access, complaints, accounting, and legal claims,
• diagnostic data and error logs - usually for up to 24 months,
• support correspondence - for as long as needed to resolve the matter and then for 24 months, unless a longer retention period is required by law or necessary for legal claims.

10. Your rights

Subject to applicable law, you may have the right to:

• request access to your personal data,
• request correction of inaccurate data,
• request deletion of your personal data,
• request restriction of processing,
• request portability of your personal data,
• object to processing based on legitimate interests,
• withdraw consent at any time where processing is based on consent,
• lodge a complaint with a competent supervisory authority.

To exercise your rights, including requesting deletion of your personal data or account, you can:

• use the in-app option under Profile > Manage Account, or
• contact us at info@microva.app.

We will process deletion requests in accordance with applicable law. In some cases, we may retain certain information where necessary to comply with legal obligations or to establish, exercise, or defend legal claims.

11. Complaints

If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with the competent data protection authority, including in Poland the President of the Personal Data Protection Office (UODO).

12. Data security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, destruction, or unauthorised alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children

The App may have an app store age rating of 3+. However, this age rating does not mean that children can independently make purchases or provide personal data without the involvement of a parent or legal guardian where required by applicable law.

The App is not intended to knowingly collect personal data from children in violation of applicable law. If you are a parent or legal guardian and believe that a child has provided us with personal data inappropriately, please contact us at info@microva.app, and we will review the matter and, where appropriate, delete the data.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be made available in the App, on our website, or in another appropriate place. If the changes are material, we may also provide additional notice, for example within the App or by email where we have your contact details.

15. Contact

If you have any questions about this Privacy Policy or about how we process personal data, you can contact us at:

Rafal Nawojczyk Code

ul. Tęczowe Ogrody 24

72-005 Warzymice

Poland

info@microva.app