vjrj
1ce32c2b5c
Beta-tester feedback triage. The data model already had LotType.seedling as first class; the gaps were copy and UX. - Seedlings/plantones: broaden landing hero (EN/ES), in-app legal notice, and all legal texts (site + docs masters) from seeds-only to "seeds and seedlings", with a live-plant phytosanitary/transport caveat. Seeds stay the hero — targeted, not a blanket rename. - Backups: settings line now states the 7-day cadence explicitly; cadence lives in AutoBackupService.backupInterval as the single source for text and schedule. - Community servers: replace the manual wss:// text box with a checklist of the known servers (defaults visible/toggleable) plus an "add server" affordance with basic validation. No jargon in the UI. i18n across en/es/pt/fr/de/ast (ja falls back). Tests updated + a new server-picker widget test.
90 lines
4.5 KiB
Markdown
90 lines
4.5 KiB
Markdown
# Tane — Privacy Policy
|
||
|
||
**Version 1.0 — 13 July 2026**
|
||
|
||
Tane is published by **Asociación Comunes** (Spain) — <https://comunes.org> —
|
||
contact: <info@comunes.org>. Tane is free software (AGPL-3.0); its source code is
|
||
public, so everything described here can be verified.
|
||
|
||
## The short version
|
||
|
||
- Tane works **without an account**. We don't know who you are.
|
||
- Everything you record stays **on your device, encrypted**. We run no servers that
|
||
receive it, and we have no way to read it.
|
||
- Nothing leaves your device unless **you** choose to share it (an offer, a message,
|
||
your profile). What you share travels through community-run servers we don't control.
|
||
- **No analytics, no ads, no trackers.** Tane collects nothing about you.
|
||
|
||
## 1. No accounts, no collection by us
|
||
|
||
Tane does not ask for your name, email, or phone number. There is no registration and
|
||
no central Tane server. Your identity in the app is a cryptographic key created on your
|
||
device and stored in your device's secure keystore. Asociación Comunes does not collect,
|
||
receive, or process your personal data through the app.
|
||
|
||
## 2. Data stored on your device
|
||
|
||
Your seed inventory (varieties, quantities, notes, photos), your messages, your
|
||
contacts' vouches and ratings, and your keys are stored **only on your device**, in an
|
||
encrypted database (SQLCipher). The encryption key lives in your device's system
|
||
keystore. Backups you create are also encrypted; you choose where to keep them, and
|
||
they never pass through us.
|
||
|
||
## 3. Data that leaves your device — only when you choose
|
||
|
||
Nothing is published automatically. Each of these happens only by your explicit action:
|
||
|
||
- **Offers.** When you offer seeds or seedlings, the app publishes the offer's title, description,
|
||
optional photo, optional price, and an **approximate area** (a zone of roughly 2–80 km,
|
||
as you configure it — never your address or precise location). Offers are public.
|
||
- **Profile.** If you fill it in, your chosen name, bio, and avatar are public.
|
||
- **Messages.** Direct messages are **end-to-end encrypted**: only you and the person
|
||
you write to can read them. The servers that carry them see only encrypted envelopes.
|
||
- **Vouches and ratings.** If you vouch for or rate someone, that statement is public
|
||
and signed by your key.
|
||
- **Sync between your devices.** If you link a second device, your data travels between
|
||
them encrypted so that only your devices can read it.
|
||
|
||
## 4. Where shared data goes: community relays
|
||
|
||
Tane's social features use open, community-run servers ("relays"). By default the app
|
||
uses a small set that includes `relay.comunes.org` (operated by Asociación Comunes) and
|
||
well-known public relays; you can change this list, or empty it to turn the network off
|
||
entirely. Relays other than `relay.comunes.org` are **third-party infrastructure**:
|
||
their operators decide their own retention and policies, and this policy does not cover
|
||
them.
|
||
|
||
## 5. Deletion — an honest note
|
||
|
||
You can delete anything local instantly, and you can withdraw an offer at any time.
|
||
When you withdraw or delete something you had published, the app asks the relays to
|
||
delete it too. Relays we don't operate may keep copies despite that request, and public
|
||
posts may have been copied elsewhere while they were visible. **Treat anything you
|
||
publish as potentially permanent.** On `relay.comunes.org` we honour deletion requests.
|
||
|
||
## 6. Device permissions
|
||
|
||
- **Photos / camera** — only when you attach a picture to a variety, offer, or profile.
|
||
- **Approximate location** (optional) — only if you use "set my area from where I am",
|
||
to pick your coarse sharing zone. Tane never requests precise location.
|
||
- **Notifications** (optional) — to tell you about new messages.
|
||
|
||
## 7. Your rights
|
||
|
||
Because your data lives on your device under your control, you exercise most rights
|
||
yourself: read, correct, export, or delete everything from within the app. For data on
|
||
`relay.comunes.org`, or any question about this policy, write to <info@comunes.org>.
|
||
If you are in the EU, you also have the right to complain to your data protection
|
||
authority (in Spain, the AEPD).
|
||
|
||
## 8. Children
|
||
|
||
The seed inventory can be used by anyone. The market and messaging features are not
|
||
directed at children; by using them you confirm you are old enough to use social
|
||
features under the laws of your country.
|
||
|
||
## 9. Changes
|
||
|
||
We will update this policy if Tane's behaviour changes, and note the changes in the
|
||
app's release notes. The current version always lives at
|
||
<https://tane.comunes.org/legal/privacy>, with history in the public repository.
|