Auxein Grow — Mobile App Privacy Policy

1. Introduction

Auxein Limited (NZBN: 9429041651063, "Auxein", "we", "us", "our") develops and operates the Auxein Grow mobile application ("Auxein Grow", the "App"), distributed through Google Play and the Apple App Store under the package identifierco.nz.auxein.grow.

This policy explains specifically how Auxein Grow collects, uses, stores, shares, and protects information when you use the App in the field. It is supplementary to our general website privacy policy; where the two overlap, this Auxein Grow policy governs use of the mobile App.

We handle your information in accordance with the New Zealand Privacy Act 2020 and applicable Australian privacy law for users accessing the App from Australia.

2. About the App

Auxein Grow is a vineyard and orchard operations app for field workers, managers, and contractors. It allows authorised users to receive and complete tasks, record GPS tracks of work undertaken (e.g. spray runs), capture observations and photos, log incidents and risks, and report hours worked. All records are scoped to the user's employer or contracting company within the Auxein platform.

3. Information We Collect

3.1 Account & Profile Data

• Name, email address, phone number (if provided), role/permission tier
• Company affiliation (the Auxein customer account you belong to)
• Property and block assignments controlled by your company administrator
• Authentication tokens (session JWTs stored on the device)

3.2 Location Data (Foreground & Background)

Auxein Grow collects precise location data only while you are actively using a feature that requires it. Specifically:

• GPS task tracking: when you tap "Start GPS Tracking" on a task, the App records a continuous track (latitude, longitude, accuracy, speed, heading, timestamp) until you tap Stop. Tracking continues in the background while the App is minimised so the track is not lost when the screen locks or you switch apps. A persistent foreground-service notification is shown on Android while background tracking is active.
• Single-point captures: when you create an observation, incident, asset, or risk record, the App captures a single GPS coordinate at that moment to geo-tag the record.
• Map view: your device's current position may be displayed on map screens to orient you on the property; this position is not transmitted unless you explicitly create a record.

Background location is collected only during active GPS tracking that you have manually started, and stops the moment you stop tracking or close the active task. Auxein Grow does not perform passive, ambient, or always-on location collection.

3.3 Photos & Camera

When you attach a photo to a task, observation, incident, risk, or asset record, the App accesses your camera or photo library to capture or select that image. Selected images are uploaded to our servers and stored against the relevant record. We do not access photos you have not explicitly attached.

3.4 Field Records You Create

• Task statuses, completion times, hours worked, free-text notes
• Observation details (severity, type, plant counts, descriptions)
• Incident details (including injury notes if you choose to record them)
• Risk assessments (likelihood, severity, controls, descriptions)
• Asset records and stock counts

3.5 Device & Diagnostic Data

• Device model, operating system version, app version
• Network connectivity state (used to manage offline queueing)
• Anonymous crash reports and performance diagnostics via Expo Application Services (EAS)

Auxein Grow does not collect advertising identifiers and does not contain third-party advertising SDKs.

4. Permissions Requested by the App

When you install Auxein Grow you may be asked to grant the following permissions. All permissions can be reviewed and revoked at any time in your device settings.

• Precise location (foreground): required to record GPS spots and geo-tag field records.
• Precise location (background): required so GPS task tracking continues uninterrupted when the screen locks or you switch apps. Used only during active task tracking that you have started.
• Foreground service (Android): required to display the persistent notification that keeps GPS tracking running reliably on Android.
• Camera: required to capture evidence photos against records. Optional — you can decline and select existing images from your photo library instead.
• Photo library: required to attach existing photos to records. Optional.

5. How We Use the Information

• Authenticate you and scope visible data to your company and assigned properties
• Record evidence of work performed (GPS tracks, hours, photos) for compliance, audit, and operational reporting back to your employer or contracting company
• Display tasks, blocks, observations, and assets relevant to your role
• Synchronise field records between your device and our servers, including reconciling records captured offline once connectivity is restored
• Generate aggregated, de-identified analytics about app usage so we can improve performance and stability
• Aggregated agronomic research & regional insights: observations, pest and disease records, phenology data, and other field-captured agronomic information may be aggregated and de-identified (stripped of company, user, and location-identifying detail beyond a regional level) and used by Auxein for research, modelling, and the production of regional insights and industry reports. Aggregated outputs do not identify individual users, properties, or companies.
• Communicate operationally important notifications (e.g. new task assignments)
• Comply with legal obligations

We do not use any data captured by the App for advertising, profiling, or marketing to third parties. Identifiable field data is used to deliver the service to your company and is not sold. Aggregated, de-identified outputs derived from field data may be published or incorporated into Auxein Insights products as described above.

6. Who Sees Your Data

• Your company: records you create through the App are visible within your Auxein company account, subject to per-property visibility rules set by your administrators. Managers and admins in your company can see GPS tracks, hours, photos, and other records associated with the work you have completed.
• Service providers acting on our behalf:
  • Amazon Web Services (cloud hosting and database)
  • Mapbox (map tiles and geocoding; receives your map viewport, not your account identity)
  • Expo Application Services (build pipeline and crash diagnostics)
  • Email delivery providers (transactional emails such as login alerts)
• Legal authorities: when required by law, court order, or to protect our rights.

We do not sell, rent, or trade your personal information.

7. Where Your Data Is Stored

Data captured by Auxein Grow is transmitted over TLS/HTTPS to our backend hosted on Amazon Web Services and stored in encrypted databases. Data may be processed in countries outside New Zealand, including Australia and the United States. We put contractual safeguards in place that require recipients to protect your information to standards comparable to the New Zealand Privacy Act 2020.

Photos, GPS tracks, and authentication tokens are also cached locally on your device while you are signed in to support offline operation.

8. Data Retention & Deletion

Records you create through the App are retained for as long as your company remains an Auxein customer, plus any period required to comply with legal obligations (typically up to 7 years for compliance, audit, or financial records).

You may request deletion of your personal data at any time by emailing grow@auxein.co.nz. Where records are required for compliance, audit, or legal purposes, we will de-identify rather than delete them where possible. Signing out of the App or uninstalling it will clear locally cached data on the device.

9. Your Rights

Under the Privacy Act 2020, you have the right to:

• Access: request a copy of personal information we hold about you
• Correction: ask us to correct inaccurate or incomplete information
• Deletion: request deletion of your personal information (subject to retention requirements)
• Withdraw consent: revoke any permission previously granted; you may also revoke OS-level permissions in your device settings at any time
• Complain: lodge a complaint with the New Zealand Privacy Commissioner or the Australian Office of the Information Commissioner

To exercise any of these rights, contact us at grow@auxein.co.nz.

10. Security

• All data in transit is encrypted using TLS
• Database storage is encrypted at rest
• Authentication uses signed JWTs with short-lived sessions
• Access to production data is restricted to authorised Auxein personnel
• Regular security review of dependencies and infrastructure

No method of transmission or storage is completely secure. If you suspect unauthorised access to your account, contact us immediately.

11. Children

Auxein Grow is intended for adult professional use within the agriculture and viticulture industries. The App is not directed at, and we do not knowingly collect personal information from, individuals under 18 years of age. If a parent or guardian believes a child has provided us with personal information, please contact us so we can delete it.

12. Changes to This Policy

We may update this policy as the App evolves. Material changes will be communicated through the App, by email, or by an updated effective date on this page. Continued use of the App after a change takes effect constitutes acceptance of the revised policy.

13. Contact Us

For privacy-related inquiries about Auxein Grow:

NZ Privacy Commissioner: www.privacy.org.nz