FieldWarden is a field scouting and spray-supply calculator for farms, operated by SEAX Enterprises, a sole proprietorship in Edmonton, Alberta, Canada. This policy explains what the app collects, why, where it is kept, and what you can do about it. It is written to be read, not to be survived.
It applies to users in Canada and the United States. Sections 11 and 12 set out rights that apply specifically in the United States.
If anything here does not match what the app actually does, the app is wrong and we want to know: support@seaxenterprises.com.
1. The short version
- We collect the farm data you enter, because the app cannot work without it.
- Photographs keep the location they were taken at. That is deliberate — it is what places an observation on your map. Every other camera detail is stripped before the photo is stored.
- We collect a small amount of usage data. It is counts and yes/no flags only. It never contains your notes, your field names, your product names, your prices or your coordinates.
- We do not sell or share your personal information, for advertising or anything else. Ever.
- We do not use your farm data or your photographs to train artificial-intelligence models. A photo goes to an AI service only when you tap Identify from photo, and then as a copy with no location (§6).
- You can export everything, and delete your account and its data, from inside the app.
2. Every data type we collect, at a glance
| Data | Collected? | Why | Shared with |
|---|---|---|---|
| Email address and name | Yes | Account, sign-in, support | Hosting provider |
| Password | Salted hash only, never the password itself | Sign-in | Hosting provider |
| Organisation / farm business name | Yes | Separating your data from every other customer's | Hosting provider |
| Farm and field records, boundaries, acreage, crop, notes | Yes | These are the product | Hosting provider |
| Scouting observations — what, where, when, severity, notes | Yes | The record the app exists to keep | Hosting provider |
| Precise location — of an observation, and inside photos | Yes, with your permission | Placing observations on your map | Hosting provider |
| Photographs | Yes — all camera metadata stripped except GPS | Evidence attached to an observation | Hosting provider; Anthropic only when you tap Identify from photo, and then a copy with no GPS or metadata (§6) |
| Recommendations, calculations, spray records, prices you enter | Yes | Calculating quantities and producing reports | Hosting provider |
| Usage data — counts and flags | Yes | Knowing whether the app works | Nobody; we host it ourselves |
| Crash and error diagnostics | Yes | Fixing bugs | Error-monitoring provider |
| Purchase records | Yes | Subscriptions | Apple, Google, payment processor |
| IP address when the map loads | Yes, by the map provider | Serving map tiles | Map imagery provider |
| A field's approximate location — its centre (or, with no boundary drawn, its latest observation), rounded to about 1 km | Yes, when you view weather | Weather and growing degree days for that field | Environment and Climate Change Canada, from our server — never your IP address, account or field data |
| Team invites — the invitee's e-mail and role | Yes, on the Team plan | Letting the right person join your organisation | Hosting provider; the link travels however you send it |
| Contacts, advertising identifiers, browsing across other apps or sites | No — never | — | — |
2.1 Use case by use case
What happens to your data in each thing you do in FieldWarden:
| When you… | What is stored | Where it goes |
|---|---|---|
| Draw or import a field | The boundary, area, crop and notes | Your phone first, then our server when it syncs |
| Scout (weed, disease, insect, photo, note) | What you saw, severity, notes, the GPS position, and the photos with their location | Your phone first, then our server. Nothing else |
| Use Help me identify | Nothing new — the questions run on your phone | Nowhere |
| Tap Identify from photo | Nothing new is kept | One stripped copy of that photo (no location, no metadata), with the crop and category, to Anthropic from our server; the suggestion comes back to you (§6) |
| Run the Supply or Break-even calculator | Nothing, unless you save it to a field | Saved calculations go to our server; unsaved ones never leave the phone |
| Look at weather | Nothing about you | A location rounded to about 1 km, from our server to Environment and Climate Change Canada |
| Generate a report | The PDF, on our server | Nobody, until you share it |
| Share or e-mail a report | A secret link (§7.1) | Wherever you send it. Email from my phone uses your own mail app and address — we do not see the message |
| Invite a team member | Their e-mail and role, until the invite is used, revoked or expires | Only to the people you send the link or code to |
| Work offline | A copy of your organisation's data on the device | Stays on the device until it syncs |
| Delete your account | — | Deleted immediately from our server (§9) |
3. Who we are
SEAX Enterprises is responsible for your personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), and, for users in the United States, the state privacy laws described in section 11.
Contact: support@seaxenterprises.com — this address reaches the person accountable for privacy.
4. What we collect, and why
4.1 Information you give us
Everything in the table above that you type, draw, import or photograph: your account details, your organisation, your farms and fields, the boundaries you draw or import, your observations and photos, your recommendations, calculations and spray records, and anything you send us in a support message.
4.2 Location
FieldWarden uses your device's location in three places, and only these:
- When you log an observation, so it is pinned to where you actually stood. The app asks permission first and works without it — an observation with no location is still saved, it simply is not plotted on the map.
- Inside the photographs you attach. See below, because this one deserves its own heading.
- While you walk a soil-sampling grid, to show the distance and direction to the next sample point. Your position is used on the device for that and is not stored: marking a sample records the planned point, the time and how accurate the GPS fix was, not where you were standing.
Separately, to show weather and growing degree days for a field, our server looks up that field's centre (or, if no boundary is drawn, its most recent observation), rounded to about 1 km, with Environment and Climate Change Canada (the Government of Canada's weather service). The request comes from our server, so the weather service never sees your IP address, your account or anything about your farm beyond that rounded point. There is no other weather provider and no fallback to one.
We do not track your location in the background, and we do not build a movement history.
4.3 Photographs — read this part
When you attach a photo, the app re-encodes it and strips every piece of embedded camera metadata except the GPS coordinates. Camera make and model, serial numbers, lens data, camera timestamps and everything else are removed. The location is kept on purpose: it is what puts the observation in the right place on your map and in your reports.
This is a deliberate difference from other SEAX apps, which strip location from photos entirely. FieldWarden keeps it because a scouting photo without a location is of little use.
If you do not want a photo's location stored, turn off location access for the camera app you use to take it, or do not attach the photo.
4.4 Usage data
We record a short list of events so we can tell whether the app is actually working: the app being opened, a farm or field created, an observation logged, a calculation run or saved, a report generated or sent, a sync finishing, a paywall seen, an upgrade started, and a boundary import succeeding or failing.
What those events may contain is a fixed list in the code, and everything else is discarded before
the event is stored. In practice that means counts (how many products were in the mix), yes/no flags
(whether a boundary existed), an app version, a platform, and enumerated values such as imperial or
metric. A filter rejects any text containing spaces, punctuation or an @ — because that is what a
note, a name or an email address looks like.
Usage data never contains your notes, farm or field names, pest or product names, prices, file names, or latitude and longitude.
We use no third-party analytics service, no advertising SDK, and no cross-app or cross-site tracking.
4.5 Technical information
Our servers keep ordinary web logs — request path, response status, duration, and a request identifier — to operate and secure the service. When the map is displayed, your device requests map tiles from our map provider, which necessarily sees your IP address and the map area you are looking at. It receives no field data, no account information, and nothing you have typed.
5. How we use it
To run the app for you: store and display your records, calculate quantities, generate the reports you ask for, sync between your devices, send the emails you ask us to send, process subscriptions, fix crashes, prevent abuse, and answer your support requests.
We do not use your data to build advertising profiles, and we do not make automated decisions about you that produce legal or similarly significant effects.
6. Artificial intelligence and model training
We do not use your farm data, your photographs, your notes or your reports to train machine-learning or artificial-intelligence models.
Identify from photo. When you tap Identify from photo on an observation, and only then, FieldWarden sends a copy of that one photo to Anthropic (the maker of the Claude AI models) to suggest what it might show. The copy is made on our server for that request: re-encoded, reduced to at most 1024 pixels, and stripped of its location and every other piece of metadata. It travels with the field's crop and the category you picked (weed, disease or insect) — nothing else: not your name, account, farm, field, notes or GPS position. We do not keep the copy. Anthropic processes it under its commercial terms for API customers, which do not allow it to train its models on what we send; it may keep requests for a limited time for safety and abuse monitoring. The answer is a suggestion with a stated confidence, never a diagnosis. If you never tap the button, no photo of yours goes to any AI service. The Help me identify questions work entirely on your phone and send nothing.
There is a setting for this, and it is off. Settings → Improving pest identification holds one switch, "Let my photos help improve pest identification". It is off unless you turn it on, and it does nothing today — nothing is being contributed, because there is nothing to contribute to yet. It exists so that the choice is yours from the beginning rather than being asked for after the fact.
If contributing ever starts, we will tell you before it does. And when it does, this is what a contributed copy would carry and what it would not:
| Contributed | Never contributed |
|---|---|
| The photograph | Its GPS coordinates |
| What it was identified as, and the severity | Your notes |
| A coarse region — roughly a 70 km grid cell | The field, the farm, or your organisation |
| The year | The date, or your identity |
The location never goes. That is enforced in the code, not just promised here: the only function that can build a contribution has no way to put coordinates in one, and it refuses outright unless the setting is on.
Identification from a photograph, described above, likewise only ever sends a stripped, re-encoded copy with its location removed — never the original we store for your map.
7. Who else sees your data
Your farm data is visible to your own organisation and to nobody else's. We use a small number of service providers, and each receives only what its job requires:
| Provider | What they handle |
|---|---|
| Cloud hosting | The database and your photographs |
| Map imagery provider | Serving map tiles; sees your IP address and map area |
| Environment and Climate Change Canada | Weather for a field: receives only a location rounded to about 1 km, from our server |
| Anthropic (Claude) | Only when you tap Identify from photo: one re-encoded copy of that photo with no location or metadata, plus the crop and category, from our server. Not used to train models |
| Email delivery | The emails you ask us to send |
| Apple / Google / payment processor | Billing. We never see your full card details |
| Error and uptime monitoring | Telling us when something breaks |
We may disclose information if the law requires it, or to protect someone's safety — and we will tell you unless legally prohibited. If the business is ever sold or merged, your data may transfer with it, subject to this policy.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding 12 months.
7.1 Report share links
When you share a report, the app creates a secret link that anyone holding it can open, without signing in. That is the point — you are handing it to a grower. Two things follow: the link works for 60 days unless you revoke it sooner, and you can revoke it at any time from the report screen, which immediately kills the old link and issues a new one.
8. Where your data lives, and cross-border transfer
Your account, farm records and photographs are stored on servers located in Canada — the service runs in a Toronto data centre, and its nightly backup copies are kept on SEAX's own servers in Alberta. Photos you send for Identify from photo are processed by Anthropic, which may process them outside Canada, including in the United States; they carry no location or account information (§6).
If you are in the United States, your data will be stored and processed in Canada. Canadian law applies to it there, and Canadian courts, law-enforcement and government authorities may in some circumstances obtain access to it under Canadian law. By using FieldWarden you consent to that transfer. Some of our service providers may process limited data (such as error reports or billing) in the United States or elsewhere.
Data on your own phone, tablet or computer stays there until it syncs — FieldWarden is built to work offline, so a copy of your organisation's data lives on each device you sign in on. When you sign in as a different account on a shared device, the previous account's data is removed from that device.
9. How long we keep it
| What | How long |
|---|---|
| Account, farm records, observations, photographs | While your account is open |
| After you delete your account | Deleted immediately — your user, and if you were your organisation's only member, the whole organisation with its records, photographs and reports. There is no undo, which is why the app asks for your password first; export first if you want a copy |
| If others remain in your organisation | Your user is deleted; the organisation's shared records stay with the organisation |
| Backups | Nightly copies age out on their normal cycle, within about six weeks; they are used only to restore the service after a failure |
| Usage data | Kept in aggregate, not linked to your farm records |
| Security logs | Kept to prevent fraud and abuse. When you delete your account, your user ID, IP address and the details of each entry are removed, so what remains no longer identifies you |
| Transaction records | As long as tax and payment law requires |
10. Security
Passwords are stored hashed and salted, never in plain text. Access requires a token that expires, and repeated failed sign-ins lock an account temporarily. Data in transit is encrypted with HTTPS. Your organisation's records are isolated from every other organisation's, and a request for another organisation's data is refused as though it did not exist.
No system is perfect. If we discover a breach creating a real risk of significant harm, we will notify you and the relevant regulators as the law requires.
11. Your rights
11.1 Everyone
- See what we hold. Settings → Export my data gives you a complete JSON file of your organisation's records, immediately, with no request to us.
- Correct it. Everything you entered is editable in the app.
- Delete it. Settings → Delete my account, which asks for your password.
- Withdraw consent, including location permission, at any time in your device settings, without losing access to the app.
We answer requests within 30 days and will not charge you or treat you differently for making one.
11.2 In Canada
Under PIPEDA and Alberta's PIPA you may access and correct your personal information and withdraw consent. Complain to us first at support@seaxenterprises.com. If we do not resolve it, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).
11.3 In the United States
Depending on your state — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others as their laws take effect — you may have the right to know what we collect and why, access a copy, correct it, delete it, opt out of sale, sharing, targeted advertising and profiling, and not be discriminated against for exercising these rights.
Two of those are simple for us to answer: we do not sell or share personal information and we do not use it for targeted advertising or profiling, so there is nothing to opt out of. The rest are available in the app as described in 11.1, or by emailing support@seaxenterprises.com.
Sensitive personal information (California). Precise geolocation is treated as sensitive personal information under the CPRA, and FieldWarden does collect it. We use it only to provide the service you asked for — placing your observations on your map — and never to infer characteristics about you. On that basis the right to limit its use does not apply; we mention it because you are entitled to know we hold it.
If we say no, you can appeal. Virginia, Colorado, Connecticut and several other states require it, and we offer it everywhere rather than checking which state you are in. Reply to our decision, or write to support@seaxenterprises.com with "appeal" in the subject. We will answer within 45 days and tell you the reasons. If we deny the appeal we will also give you a way to complain to your state Attorney General.
Authorised agents may submit requests on your behalf with proof of authority. We may need to verify your identity, normally by confirming control of your account email.
Opt-out preference signals. Browsers can send a Global Privacy Control signal. FieldWarden honours it by construction: it asks us not to sell or share personal information, and we do neither, so there is nothing for the signal to switch off.
Shine the Light (California). We do not disclose personal information to third parties for their own direct-marketing purposes.
12. Children
FieldWarden is a tool for agricultural professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or under 16 where state law sets that age). If you believe a child has given us information, contact us and we will remove it.
13. Changes to this policy
If we change this policy in a way that matters, we will tell you in the app before the change takes effect, and update the date at the top. We will not quietly broaden what we do with data you have already given us — a new purpose means new consent.
14. Contact
SEAX Enterprises, a sole proprietorship Edmonton, Alberta, Canada support@seaxenterprises.com