Privacy policy

This translation is provided for convenience. The Finnish version is the legally binding text in case of discrepancies.

Updated 29 April 2026

1. Data controller

LaitonAI
Email: support@laiton.ai

2. What data we collect

We collect the following personal data to provide the Service:

  • Location data — the device's GPS location to power map features and local forecasts. Location is processed on the device and is not stored on our servers without separate consent.
  • Account information — Tattis uses Firebase Authentication (Apple and Google sign-in). We store your authentication identifier, the email address provided at sign-in, and a display name to link your cloud account to your devices.
  • Mushroom observations — observations you save in the mushroom journal (species, location, date and photos). When signed in, observations are synced to the cloud via Firebase so you can use them on multiple devices. You can erase all cloud data in-app from Settings → Delete account.
  • Camera access and photos — the app asks for permission to use your device's camera so you can take photos of your mushroom observations directly inside the app. The camera is used only when you open the camera view yourself — we do not use the camera in the background and we do not capture photos automatically. Photos you take are attached to your observation and stored to your account. You can delete photos at any time by deleting the observation or your account.
  • Usage data — anonymous information about how the app is used (which features, session length) to help us improve the Service.
  • Device data — operating system, app version and device type, to ensure technical support and compatibility.

3. Legal basis for processing

Personal data is processed on the following bases:

  • Contract — to provide the Service in accordance with the terms of use.
  • Consent — for the use of location data and the sharing of observations.
  • Legitimate interest — for improving the Service and analytics.

4. Sharing data

We do not sell your personal data. We share data only:

  • With service providers — we use Google Firebase (Authentication, Firestore, Cloud Messaging) for sign-in, cloud storage and push notifications. Data is processed under data processing agreements.
  • Anonymised observations — anonymised observation data may be used to improve our forecast models.
  • When required by law — when responding to lawful requests from authorities.

5. Data retention

We keep your personal data as long as your account is active. You can delete your cloud account and all associated data immediately in-app from Settings → Delete account. The action is final and no separate retention period applies. Anonymised data may be retained for longer. More guidance: Account deletion.

6. Information security

We protect data with appropriate technical and organisational measures, including encryption in transit and at rest, access controls and regular security reviews.

7. Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to:

  • access your data
  • request correction or erasure of your data
  • restrict or object to processing
  • port your data to another service
  • withdraw consent at any time
  • lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

To exercise your rights, email support@laiton.ai. We will respond within 30 days.

8. Cookies and analytics

Our website may use strictly necessary cookies. For analytics we use anonymised tools that do not track individual users.

9. Changes to this policy

We may update this privacy policy. We will notify you in the app of material changes. We recommend reviewing this policy periodically.

10. Contact

For privacy questions, contact:
support@laiton.ai