Privacy policy

This translation is provided for convenience. The Finnish version is the legally binding text in case of discrepancies.

Updated 23 October 2026

1. Data controller

Lait On Oy (LaitonAI), business ID 3610587-5
Email: support@laiton.ai

2. What data we collect

We collect the following personal data to provide the Service:

  • Location data: the device's GPS location to power map features and local forecasts. Location is processed on the device and is not stored on our servers without separate consent.
  • Account information: Tattis uses Firebase Authentication (Apple and Google sign-in). We store your authentication identifier, the email address provided at sign-in, and a display name to link your cloud account to your devices.
  • Purchase and subscription data: when you buy Tattis Pro, the App Store or Google Play processes the payment and we never see your payment details. We use RevenueCat to manage subscriptions. It processes your user identifier, your purchases and subscription status, the app store, country and currency, and the app and device version. If you installed the app through an Apple Ads advertisement, RevenueCat also records the ad campaign and search keyword through Apple's AdServices measurement. This measurement does not use the advertising identifier (IDFA) and does not track you across other apps.
  • Mushroom observations: observations you save in the mushroom journal (species, location, date and photos). When signed in, your observations and their photos are backed up over an encrypted connection to Cloudflare R2 storage, whose primary storage is located in the EU region, so you can use them on multiple devices. You can erase all cloud data in-app from Settings → Delete account.
  • Camera access and photos: the app asks for permission to use your device's camera so you can take photos of your mushroom observations directly inside the app. The camera is used only when you open the camera view yourself. We do not use the camera in the background and we do not capture photos automatically. Photos you take are attached to your observation and backed up to the same EU-region storage as your other observations. You can delete photos at any time by deleting the observation or your account.
  • Usage data: anonymous information about how the app is used (which features, session length) to help us improve the Service.
  • Device data: operating system, app version and device type, to ensure technical support and compatibility.
  • Crash and error reports: when the app crashes or hits an error, it sends technical diagnostic data to Google Firebase Crashlytics so we can find and fix bugs. A report contains the error details and stack trace, device model, operating system version, app version and similar technical state (for example free memory, free disk space and screen orientation), along with a random installation identifier generated by Crashlytics. This data is not linked to your identity or your account, and it is not used for advertising or tracking.

3. Legal basis for processing

Personal data is processed on the following bases:

  • Contract: to provide the Service in accordance with the terms of use, including managing your Tattis Pro subscription.
  • Consent: for the use of location data and the sharing of observations.
  • Legitimate interest: for improving the Service and analytics, for measuring the results of our advertising, and for keeping the app working and secure through crash and error reports.

4. Sharing data

We do not sell your personal data. We share data only:

  • With service providers (sub-processors): we use trusted service providers to operate the Service. Data is processed under data processing agreements (DPAs):
    • Cloudflare (R2 + Durable Objects): storage and backup of photos and observations. Data is stored primarily on EU-region servers (location EEUR).
    • Google Firebase: authentication (Firebase Authentication), push notifications (Firebase Cloud Messaging) and crash reporting (Firebase Crashlytics).
    • RevenueCat: management of Tattis Pro subscriptions and purchases, and Apple Ads measurement. Data is processed in the United States.
  • With app stores: the App Store (Apple) and Google Play (Google) process purchases and payments as independent controllers under their own privacy policies.
  • Anonymised observations: anonymised observation data may be used to improve our forecast models.
  • When required by law: when responding to lawful requests from authorities.

Transfers outside the EU and EEA: Google and RevenueCat may also process data in the United States. These transfers rely on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

5. Data retention

We keep your personal data as long as your account is active. You can delete your cloud account and its observations, photos and account details immediately in-app from Settings → Delete account. The action is final and no separate retention period applies. Deleting your account does not delete the purchase and subscription data held by RevenueCat. You can ask us to delete it at support@laiton.ai. Anonymised data may be retained for longer. Crash and error reports are deleted from Firebase Crashlytics automatically after 90 days. More guidance: Account deletion.

6. Information security

We protect data with appropriate technical and organisational measures, including encryption in transit and at rest, access controls and regular security reviews.

7. Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to:

  • access your data
  • request correction or erasure of your data
  • restrict or object to processing
  • port your data to another service
  • withdraw consent at any time
  • lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

To exercise your rights, email support@laiton.ai. We will respond within 30 days.

8. Cookies and analytics

Our website may use strictly necessary cookies. For analytics we use anonymised tools that do not track individual users.

9. Changes to this policy

We may update this privacy policy. We will notify you in the app of material changes. We recommend reviewing this policy periodically.

10. Contact

For privacy questions, contact:
support@laiton.ai