Privacy Policy for BovineFlow

1. Information We Collect

1.1 Information You Provide or Store in the App • Account Information: None required. The App works without registration, login, passwords, or user accounts. • Cattle and Farm Management Data: Cow identifiers or names, breed, gender, birth date, weight, health status, vaccination date, health notes, heat records, insemination or breeding status, bull or semen identifiers, heat signs, observations, predicted next heat dates, and potential calving dates. • Photos: Images you attach to cattle records are compressed on device and stored locally in the App database. • Local Permission Preferences: Local-only flags may track whether notification, camera, or gallery permission prompts have already been shown. • Support Information: If you contact us, we receive the information you choose to send. 1.2 Automatically Collected Technical Data Android and iOS use Firebase Crashlytics for crash reports, non-fatal errors, stack traces, app version, device model, OS version, timestamps, Firebase installation identifiers, and related technical diagnostics. 1.3 Information We Do Not Collect • No GPS or precise location data • No microphone or contacts access • No payment, banking, or financial information • No push notification tokens; heat reminders are scheduled locally • No sale of personal information • No cross-context behavioral advertising • No advertising IDs for ad targeting • No outside-app browsing tracking • No cloud storage, cloud sync, or remote backup for cattle records

2. How We Use Information

2.1 Cattle and Farm Management Data • Local App Functionality: Cattle records, photos, and reproductive calculations are stored and processed on your device. • Predictions and Reminders: Heat cycle and potential calving calculations are performed locally. Notification reminders are scheduled locally through the operating system. • User Control: You can create, edit, and delete records from the App. We cannot access or modify your local cattle records remotely. 2.2 Technical Diagnostics • Crash Reporting: Identify and fix crashes and non-fatal errors. • Compatibility Improvements: Improve reliability across device models, app versions, and operating system versions. 2.3 Support We use support communications to answer your request, troubleshoot issues, and keep a record of the interaction for continuity and abuse prevention. 2.4 Legal Bases for GDPR/UK GDPR • Local App Functionality: Performance of a contract or steps taken at your request. • Crash Reports and Error Diagnostics: Legitimate interests in maintaining security, reliability, compatibility, and app quality. • Support Requests: Legitimate interests in responding to your enquiry and maintaining support records. • Legal Compliance: Compliance with legal obligations where applicable. No Automated Legal Decisions: Heat and calving predictions are local estimates for herd management and do not profile people.

3. How We Share Information

3.1 Cattle and Farm Management Data • Not Shared by Us: We do not receive your cattle records, photos, or local notes, so we cannot sell, disclose, or share them. • Local Storage: Records stay in the App database on your device unless you choose to disclose them outside the App. • Operating System Backups: If you enable Android, iOS, Google, Apple, or device-manufacturer backup features, local app data may be included in those backups. 3.2 Third-Party Processors Firebase Crashlytics receives crash reports, non-fatal error reports, stack traces, Firebase installation identifiers, app version, device model, OS version, timestamps, logs, and technical diagnostics on Android and iOS. Google processes Firebase data under Firebase terms and data processing terms. See firebase.google.com/support/privacy, firebase.google.com/terms/data-processing-terms, and policies.google.com/privacy. 3.3 Legal Disclosures We may disclose information we hold if required by valid legal process, to protect our rights, to prevent abuse, or to comply with applicable law. We cannot disclose cattle records that remain only on your device because we do not have access to them.

4. Data Retention

4.1 Local Cattle Data • Cattle records, photos, and local permission preferences remain on your device until you delete them, clear app data, uninstall the App, or your operating system removes them. • You can delete individual heat records and cow records through the App. Deleting a cow also removes its related local records from the App database. • We cannot remotely delete your local cattle records because we do not hold them. • Deleted local data may persist temporarily in device backups controlled by your operating system or cloud account provider. 4.2 Firebase Diagnostic Data • Crashlytics retains crash stack traces, minidump data, and associated identifiers, including Crashlytics installation UUIDs and Firebase installation IDs, for 90 days before beginning removal from live and backup systems. • Reinstalling the App may reset local Firebase identifiers. You may request deletion of diagnostic data associated with your device, although matching data may require device model, OS version, timestamps, or Firebase identifiers. 4.3 Support Communications Support emails are retained for up to 2 years from the last contact, unless a longer period is needed to resolve a dispute, comply with law, or prevent abuse. You may request deletion by emailing rmarincompany@gmail.com.

5. Your Rights and Choices

5.1 Local Cattle Data • Access and Correction: Your cattle records are available directly in the App. • Deletion: Delete records in the App, clear app data, or uninstall the App. • Portability: BovineFlow does not currently provide a built-in export feature. Because we do not hold your cattle records on our servers, we cannot export them for you from a remote system. • Backups: Manage Android, iOS, Google, Apple, or device-manufacturer backups through your device and account settings. 5.2 Technical Diagnostic Data You may contact us to request access, deletion, restriction, or objection regarding diagnostic data we can reasonably identify. Because diagnostic data is pseudonymous and not tied to an account, we may need device model, OS version, app version, approximate crash date/time, Firebase identifiers where available, or other details. 5.3 GDPR/UK GDPR Rights Where applicable, you may have rights to access, correct, delete, restrict, object, request portability where technically applicable, and lodge a complaint with your supervisory authority. 5.4 California and Other U.S. Privacy Rights Where applicable, U.S. residents may have rights to know, access, delete, correct, appeal, opt out of sale or sharing, or limit use of sensitive personal information. BovineFlow does not sell personal information or share it for cross-context behavioral advertising. 5.5 How to Exercise Rights Email rmarincompany@gmail.com with subject Privacy Request - [Request Type], include enough information to verify and locate relevant records, and we aim to respond within 30 days or sooner where required by law.

6. Data Security

6.1 Local Data Protection • Local cattle records are protected by your device's operating-system sandbox and by your device security settings. • Use a device passcode, biometric lock, and operating-system encryption where available. • Keep your operating system and the App updated. 6.2 Remote Diagnostic Data Protection • Firebase SDK traffic uses encrypted transport. • Access to Firebase diagnostic data is limited to those who need it to maintain and debug the App. • Google provides security, privacy, and compliance information for Firebase at firebase.google.com/support/privacy. 6.3 Data Breach Response If a security incident affects personal data we hold, we will investigate, mitigate, document the incident, and notify affected users or regulators where required by applicable law.

7. International Data Transfers

7.1 Local Cattle Data Your cattle records remain on your device unless you choose to back them up or share them through your operating system or other services. 7.2 Firebase and Support Data Firebase diagnostic data and support communications may be processed in countries where Google or our support providers operate, including the United States. Google states that Firebase services use data processing terms, transfer mechanisms such as Standard Contractual Clauses where applicable, and relevant certifications or frameworks.

8. Children's Privacy

BovineFlow is intended for cattle management and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us through support or diagnostics, contact rmarincompany@gmail.com and we will take appropriate deletion steps. Parents or guardians may exercise applicable privacy rights on behalf of their child.

9. Third-Party Services

9.1 Current Services • Google Firebase Crashlytics: Crash reporting and non-fatal error diagnostics. 9.2 Future Services If we add accounts, cloud sync, advertising, remote backups, payment processing, or broader analytics, we will update this policy and any relevant app-store privacy disclosures before or when those changes become effective.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in the App, legal requirements, or our data practices. • Material Changes: We will provide notice through the website, app-store listing, or in-app notice where available. • App Store Listings: Google Play Data Safety and Apple App Store privacy disclosures should remain consistent with this policy. • Previous Versions: Previous versions are available upon request.

11. Legal Basis Summary

12. Contact Information

12.1 Data Controller • Company: RMarinCompany • Country: Colombia • Email: rmarincompany@gmail.com • Privacy Policy URL: https://bovineflow.com/privacy • Business Hours: Monday-Friday, 9 AM - 5 PM Colombia Time 12.2 Data Protection Officer We have not appointed a Data Protection Officer because our current processing is limited and does not involve large-scale systematic monitoring or large-scale special-category processing. Privacy questions can be sent to rmarincompany@gmail.com. 12.3 Governing Law This Privacy Policy is governed by the laws of the Republic of Colombia, where RMarinCompany operates, without limiting any mandatory rights you may have under applicable local privacy laws.

13. Specific Jurisdictions

13.1 California (CCPA/CPRA) If the California Consumer Privacy Act, as amended by the CPRA, applies to us, California residents may exercise the rights described in Section 5. BovineFlow does not sell personal information, does not share personal information for cross-context behavioral advertising, and does not use sensitive personal information for purposes requiring a Limit the Use of My Sensitive Personal Information link. 13.2 Other U.S. States Residents of U.S. states with comprehensive privacy laws may have rights similar to those described in Section 5, depending on the applicable law. Contact rmarincompany@gmail.com to exercise those rights. 13.3 European Union and United Kingdom EU and UK users may have the rights described in Section 5.3. Our current lawful bases are local app functionality at the user's request, legitimate interests for technical diagnostics, and legal obligations where applicable. Heat and calving predictions are local estimates and are not automated decision-making about people under GDPR Article 22. 13.4 Brazil (LGPD) Residents of Brazil may have rights under the Lei Geral de Protecao de Dados (LGPD), including confirmation of processing, access, correction, deletion, portability where technically applicable, and information about sharing. Contact rmarincompany@gmail.com. 13.5 Canada (PIPEDA) Residents of Canada may request access to personal information we hold about them and challenge its accuracy. Contact rmarincompany@gmail.com. 13.6 Australia (Privacy Act) Residents of Australia may request access to or correction of personal information we hold. If unsatisfied with our response, you may contact the Office of the Australian Information Commissioner. 13.7 Colombia (Ley 1581 de 2012 - Habeas Data) Residents of Colombia have rights under Ley 1581 de 2012 and related rules, including the right to know, update, rectify, suppress, and revoke authorization for personal data processing where applicable. RMarinCompany is the responsible party for personal data it receives through support and technical diagnostics.