Privacy Notice

This Privacy Notice for OSIT Inc., doing business as Base Nine Studios (“we,” “us,” or “our”), describes how and why we access, collect, store, use, and share (“process”) your personal information when you use our services (“Services”), including when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions after reading this notice, contact us at apps@baseninestudios.com.

Summary of key points

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, the personal information we process depends on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? Some U.S. state privacy laws (including California’s) treat precise geolocation as sensitive personal information. We collect precise geolocation only when you grant location permission, only for the specific purposes of logging finds and recording trips, and we do not use it for advertising or profiling. We do not process any other categories of sensitive information.

Do we collect any information from third parties? We do not collect any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We will not process your information for other purposes without your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.

In what situations and with which parties do we share personal information? We share information only in specific situations and only with specific third parties, listed below. Learn more about when and with whom we share your personal information.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is to use the in-app “Delete account” option in Settings or to follow the instructions on our Account & data page. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the Privacy Notice in full.

Table of contents

1. What information do we collect?
2. How do we process your information?
3. When and with whom do we share your personal information?
4. Do we use cookies and other tracking technologies?
5. How do we handle your social logins?
6. Is your information transferred internationally?
7. How long do we keep your information?
8. Do we collect information from minors?
9. What are your privacy rights?
10. Controls for Do-Not-Track features
11. Do we make updates to this notice?
12. How can you contact us about this notice?
13. How can you review, update, or delete the data we collect from you?

1. What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Categories of personal information we collect. Depending on how you interact with the Services, we collect the following:

• Account information. Your name (display name) and email address. If you sign in with Google, we also receive your Google profile picture URL.
• Precise location. GPS coordinates (latitude, longitude, altitude) and accuracy values. We use your coordinates for four purposes: (a) to record where you logged a find (the coordinates are stored on the find), (b) to plot your route while a trip is being recorded, (c) to resolve coordinates into a human-readable city and state name on a find, and (d) to display current local weather on the App’s home dashboard. For (c), we send your coordinates to Nominatim, operated by the OpenStreetMap Foundation; for (d), we send them to Visual Crossing Weather. Both providers are described in When and with whom do we share your personal information? below. Precise geolocation may be treated as sensitive personal information in certain U.S. states (see What are your privacy rights? below). Location is collected only with your express permission, granted through your operating system’s location settings.
• Trip waypoints. While a trip is being recorded, we capture GPS waypoints along your route (latitude, longitude, altitude, timestamp, distance traveled) so we can plot the route on a map. Trip recording uses a foreground location service so it can continue while the App is in the background; you can stop recording at any time.
• Journal content. Titles, scientific or common species names, taxonomy, notes, dates and times, harvest status, and harvest-readiness reminders you create.
• Photo references (not the photos themselves). Photos you take or attach inside the App are saved to your device’s local storage only — they are not uploaded to our servers and we do not have copies. What we do store, in our database, is the filename of each photo so the App can re-attach the right photo to the right find or trip on your device. The image content itself never leaves your device.
• Subscription information. If you purchase a subscription, we receive subscription status, transaction identifiers, and country of purchase from Google Play or the Apple App Store. We do not receive or store your payment-card or banking details; those are handled by Google or Apple under their own privacy policies.

Sensitive personal information. Some U.S. state laws (including California’s Consumer Privacy Act, as amended by the California Privacy Rights Act) treat precise geolocation as sensitive personal information. We process precise geolocation only when you grant location permission through your operating system and only for the purposes described above (recording finds, recording trips, displaying current local weather, and resolving coordinates to a city and state name). We do not use this information to infer characteristics about you, do not sell it, do not share it for cross-context behavioral advertising, and do not use it for targeted advertising or profiling. The limited disclosures we make to service providers in order to deliver the App’s core functions (reverse geocoding and weather) are described in When and with whom do we share your personal information? below. We do not process any other categories of sensitive information — we do not collect racial or ethnic origin, religious beliefs, sexual orientation, biometric data, health information, immigration status, union membership, or government identifiers.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically logged by our backend

In Short: Google Firebase logs basic technical request information when the App talks to our backend. We do not run analytics, advertising, or behavioral tracking.

The App talks to a backend hosted on Google Firebase — specifically Firebase Authentication, Cloud Firestore, and Cloud Functions. When the App makes a request to these services, Google’s infrastructure records standard server-side information about the request, including the IP address the request came from, the device user-agent string, the time of the request, and which collection or function was called. We do not configure these logs for analytics or marketing; Google retains them as a sub-processor under its Firebase data-processing terms, for the purposes of operating, securing, and debugging the underlying infrastructure.

We do not run a separate analytics platform, advertising platform, or behavioral-tracking tool inside the App. We do not use Firebase Analytics, Firebase Crashlytics, Firebase Performance Monitoring, or any third-party tracking SDK such as Sentry, Mixpanel, Amplitude, Segment, Adjust, AppsFlyer, or Branch.

2. How do we process your information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We will not process your information for other purposes without your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts. We process your information so you can create and log in to your account, and to keep your account in working order.
• To deliver and facilitate delivery of services to the user. We process your information to provide you with the requested service.
• To respond to user inquiries and offer support to users. We process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
• To send administrative information to you. We process your information to send you details about our products and Services, changes to our terms and policies, and other similar information.
• To save or protect an individual’s vital interest. We will process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
• To comply with our legal obligations. We will process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

3. When and with whom do we share your personal information?

In Short: We share information with the infrastructure providers we use to run the App. We do not sell your information, do not share it for advertising, and have no business-partner arrangements that involve your data.

We share your personal information in the following situations:

• Service providers (sub-processors). We use the following third-party services to operate the App. Each receives only the information necessary for the function listed, only on our instructions, and only to the extent needed to return the requested result. Each provider’s use of your information is governed by its own privacy and data-processing terms.
  • Google Firebase (Authentication, Cloud Firestore, Cloud Functions) — user authentication, storage and sync of your journal data, and server-side processing. Receives: account information, journal content, find and trip metadata, precise location coordinates, and trip waypoints. Provider: Google LLC (United States).
  • Google Maps Platform — renders map tiles when you view your finds or trips on a map. Receives: precise location coordinates for the map view. Provider: Google LLC (United States).
  • Google ARCore (Android only) — augmented-reality features for the AR Spotter. Processing runs on your device. Provider: Google LLC (United States).
  • Nominatim, operated by the OpenStreetMap Foundation — reverse-geocodes the coordinates of your finds and reminders into a human-readable city and state name. Receives: precise location coordinates. Provider: OpenStreetMap Foundation (United Kingdom). Servers may be located in the European Union.
  • Visual Crossing Weather — fetches current weather conditions for the location shown on the App’s home dashboard. Receives: precise location coordinates. Provider: Visual Crossing Corporation (United States).
• Mobile app stores. If you purchase a subscription, Google Play (on Android) or the Apple App Store (on iOS) processes the payment and shares limited transactional information with us (subscription status, transaction identifiers, country of purchase). They do not share your payment-card or banking details with us.
• Affiliates. If we expand into corporate affiliates — a parent company, subsidiaries, or entities under common control — we will share your information with them, and we will require those affiliates to honor this Privacy Notice.
• Business transfers. If we are involved in a merger, sale of company assets, financing, or acquisition of all or a portion of our business, we will share or transfer your information in connection with that transaction. If that happens, we will notify you and continue to honor the commitments in this Privacy Notice (or any successor notice you accept).
• Legal requirements and safety. We will disclose your information if we are required to do so by law, regulation, court order, subpoena, or other valid legal process, or where disclosure is necessary to investigate, prevent, or take action regarding suspected illegal activity, fraud, threats to physical safety, or violations of our terms.

We do not sell or rent your personal information to third parties, do not share it for cross-context behavioral advertising, and do not have any “business partner” relationships that would result in sharing your data for promotions or marketing.

4. Do we use cookies and other tracking technologies?

In Short: No. We do not use cookies, web beacons, pixels, fingerprinting scripts, or similar tracking technologies on our website or inside the App.

Our marketing website at foragersfieldbook.com is a static site. It does not set cookies, does not load Google Analytics, Google Tag Manager, the Meta pixel, or any other third-party analytics or advertising script, and does not contain web beacons or tracking pixels.

The App does not embed third-party analytics or advertising SDKs and does not load tracking scripts in any web view.

The only persistent storage involved in your use of the Services is (a) the local storage on your device that the App uses to hold your finds, trips, photos, and preferences, and (b) the authentication tokens that Firebase Authentication issues so we can recognize you when you sign back in.

5. How do we handle sign-in?

In Short: You can sign in with Google or with your email and password. If you sign in with Google, we receive limited profile information from Google.

Our Services support two sign-in methods: Google sign-in, and email and password (with email verification). Where you choose to sign in with Google, we will receive certain profile information about you from Google, including your name, email address, and Google profile picture.

We will use the information we receive only for the purposes described in this Privacy Notice or otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by Google. We recommend that you review Google’s privacy notice to understand how it collects, uses, and shares your information, and how you can set your privacy preferences.

6. Is your information transferred internationally?

In Short: We transfer, store, and process your information in the United States.

Our servers are located in the United States. Regardless of your location, your information is transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we share your personal information (see When and with whom do we share your personal information? above). Most of our service providers operate in the United States. The Nominatim reverse-geocoding service, operated by the OpenStreetMap Foundation, may process your coordinates on servers located in the European Union or the United Kingdom.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.

7. How long do we keep your information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

8. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of such a minor and consent to that minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we have collected from children under age 18, please contact us at apps@baseninestudios.com.

9. What are your privacy rights?

In Short: You can review, change, or delete your account at any time. Depending on where you live, you may also have additional rights under U.S. state privacy laws or the laws of your country.

Withdrawing your consent

If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. The simplest ways to do that are to revoke the App’s location and camera permissions in your operating system settings (which immediately stops location and photo capture), or to delete your account from inside the App (which removes your account and the data we hold about you from our active databases). You can also contact us using the details in How can you contact us about this notice? below.

Withdrawing your consent does not affect the lawfulness of any processing we carried out before you withdrew it, nor does it affect processing that has another lawful basis.

Account information

If you would at any time like to review, update, or terminate your account, you can:

• Log in to the App and update your profile from the Settings screen.
• Delete your account directly from within the App using the in-app “Delete account” option in Settings. This removes your account and the data associated with it from our active databases.
• Contact us using the details below.

When you delete your account, we deactivate or delete the data we hold about you from our active databases. We retain limited information in offline backups, audit logs, and fraud-prevention records for as long as required by law or for legitimate business purposes; that retained information is isolated from further processing and deleted when no longer needed. If you have an active subscription at the time you delete your account, you will also need to cancel it through Google Play or the Apple App Store separately to stop further billing.

California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), gives you the following rights with respect to the personal information we process about you:

• Right to know and access. You can request a copy of the personal information we have collected about you, the categories of sources we collected it from, the business purposes for which we processed it, and the categories of third parties (if any) with whom we shared it.
• Right to delete. You can request that we delete the personal information we have collected from you. The fastest way to exercise this right is the in-app “Delete account” option in Settings.
• Right to correct. You can request that we correct inaccurate personal information we maintain about you.
• Right to data portability. You can request a copy of the personal information you have provided to us in a portable, machine-readable format.
• Right to opt out of sale and sharing. California defines “sale” and “sharing” broadly to include disclosing personal information for cross-context behavioral advertising. We do not sell or share your personal information for cross-context behavioral advertising and have no knowledge of sales or sharing involving the personal information of consumers under 16. Because this activity is not occurring, there is no “Do Not Sell or Share My Personal Information” link to display.
• Right to limit the use and disclosure of sensitive personal information. California treats precise geolocation as sensitive personal information. We process your precise geolocation only for the specific purposes that allow the App to function as a foraging journal (recording where you made a find, plotting trips on a map, displaying current local weather, and resolving coordinates to a city and state name), and only when you have granted location permission through your operating system. We do not use precise geolocation to infer characteristics about you and do not retain it beyond what is necessary to operate the App. We disclose precise coordinates only to the service providers we use to deliver the App’s core functions — Google Firebase (data storage), Google Maps Platform (map tiles), Nominatim (reverse geocoding), and Visual Crossing (weather) — and only to the extent necessary for each to return the requested result. These providers may not use your coordinates for their own independent purposes. Because our use of sensitive personal information is already limited to providing the service you requested, there is no separate “Limit the Use of My Sensitive Personal Information” toggle to expose.
• Right to non-discrimination. We will not deny services, charge different prices, or provide a different level or quality of service because you exercised any of these rights.

How to exercise these rights. Email us at apps@baseninestudios.com from the email address associated with your account, or follow the instructions on our Account & data page. We will verify your identity (typically by confirming control of the account email) before fulfilling the request, and we will respond within the time periods required by California law. You can designate an authorized agent to make a request on your behalf; we will require proof of your authorization.

Other U.S. state privacy rights

If you are a resident of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, your state’s consumer privacy law gives you most or all of the following rights, depending on the state:

• The right to confirm whether we process your personal information and to access it.
• The right to delete personal information we hold about you.
• The right to correct inaccurate personal information.
• The right to obtain a portable copy of your personal information.
• The right to opt out of (i) the sale of personal information, (ii) targeted advertising, and (iii) certain types of profiling that produce legal or similarly significant effects.
• In some states, the right to appeal our decision on a request you have made.

We do not sell personal information, do not engage in cross-context behavioral advertising, and do not use your information for profiling that produces legal or similarly significant effects. Because precise geolocation may qualify as sensitive personal information under several of these laws, we limit our processing of it to the purposes described in this notice and require your operating-system-level permission before collecting it.

To exercise any of these rights, email us at apps@baseninestudios.com. We will respond within the time period required by your state’s law. If we deny your request and your state recognizes an appeal right, you may appeal by replying to our response within 30 days; if we do not resolve the appeal to your satisfaction, you may contact your state attorney general.

EEA, UK, and Switzerland residents

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the GDPR or its local equivalent, including the rights of access, rectification, erasure, restriction of processing, data portability, and to object to processing. You also have the right to lodge a complaint with your local data protection authority. The legal bases on which we rely include your consent (for processing of precise geolocation), performance of a contract (for operating your account and providing the Services you sign up for), and our legitimate interests (for fraud prevention and infrastructure security). To exercise these rights, email us at apps@baseninestudios.com.

10. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

11. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We update this Privacy Notice when needed. The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Notice. When we make material changes to this Privacy Notice, we will notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

12. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at apps@baseninestudios.com or contact us by post at:

OSIT Inc.
27554 W 33rd St.
Lake Linden, MI 49945-1398
United States

13. How can you review, update, or delete the data we collect from you?

The fastest way to delete your account and the data we hold about you is the in-app “Delete account” option in the App’s Settings screen. To exercise any of your other rights — access, correction, portability, or anything else covered in What are your privacy rights? above — see our Account & data page or email us at apps@baseninestudios.com from the address associated with your account. We will respond within the time period required by applicable law.