Privacy
Privacy Policy
inForest is built for teams collecting agroforestry data in the field. This page describes what the app collects, where it lives, and how to ask for it back or delete it.
What we collect
- Account information — your email, name, and a hashed password. We never store passwords in plain text.
- Forest, plot, and tree records you and your team create: measurements, species identifications, notes, and the project they belong to.
- Photos you attach to trees or plots, along with their EXIF location and timestamp if your iPad recorded one.
- Location when you actively use the map or capture a measurement. The app does not track your position in the background.
- Crash and error reports via Sentry, used to fix bugs. These contain device model, iPadOS version, and a stack trace — no personal data.
Where it's stored
Records are stored in a Postgres database hosted by Neon (US East region, on AWS infrastructure). Photos are stored in a private AWS S3 bucket. Connections between the app and the server are over HTTPS only.
What we do not do
- We do not sell or share your data with third parties.
- We do not run advertising or behavioral profiling.
Sharing inside a project
When you join or are invited to a project, the data within that project is visible to other members of that project. That is the point — the app is a shared field notebook. Memberships are explicit; you can leave a project at any time.
Account deletion and data export
You can delete your account from inside the app at any time: open the Profile screen, tap Delete Account, and confirm with your password. The deletion is immediate. Your user account, the forests you own, and the data inside them are removed; collaborators on those forests lose access at the same moment.
If you want a copy of your data first, export it from the dashboard before deleting — once the account is gone, the records cannot be recovered.
If you no longer have access to the app or your account, email inforest@dali.dartmouth.edu from the address on your account and we will process the deletion from our side within 14 days.
Records inside projects you don't own remain with the remaining members of those projects. If you would like those removed too, say so in your email request.
Changes to this policy
When we update this policy we change the "last updated" date at the top. Material changes are also announced in the app.
Contact
Questions about privacy? inforest@dali.dartmouth.edu.