Privacy Policy

1. Who We Are

Millingly AS is the data controller for all personal data collected through LogPlan and millingly.com.

Registered address: Rinddalen 22, 5099 Bergen, Norway

Organisation number: 937 731 760

Contact: through our contact form

2. What Data We Collect

2.1 Account data

Email address — used to create and manage your account.
Name — used to identify your account and personalise the app.

2.2 User-generated content

Log and milling data you enter — measurements, cut plans, board counts, moisture readings, species, notes. This is the core data LogPlan exists to store and calculate with.
End-face photographs and measurement data — when you scan a log end, the photograph and the associated measurement data are uploaded to our backend, where we derive dimensions, detect the pith, and compute a fingerprint used to re-identify the log later. The photograph is stored securely and linked to your log record.

2.3 Location data

GPS coordinates when you register a log (Harvest workstation) — used to record where a log was felled or collected.
The approximate location of a drying site — used to fetch local climate data and forecast how your boards dry.

Location is only captured when you actively initiate one of these actions. It is not tracked continuously.

2.4 Subscription and device data

When you buy a subscription, our subscription provider (RevenueCat) and Apple receive the device and platform information needed to process and validate the purchase — for example a subscription identifier and your purchase history. We never receive your payment-card details.

3. How We Use Your Data

To provide the LogPlan service — storing your log records, generating cut plans, and tracking boards through drying.
To manage your subscription — validating and maintaining your Apple in-app purchase.
To communicate with you — account-related emails only, such as sign-in and password resets. No marketing emails without explicit opt-in.

Contract performance — processing your account data and user content is necessary to deliver the service you’ve signed up for (Article 6(1)(b)).
Legitimate interests — maintaining the security and integrity of the service (Article 6(1)(f)).
Consent — location data is only captured when you actively initiate a log registration or set up a drying site. You can decline at any time (Article 6(1)(a)).

5. Third-Party Services

We use the following processors. Each operates under its own privacy policy and a data processing agreement.

Service	Purpose	Data shared
Supabase	Data storage, authentication, and backend processing	All account data and user content, including end-face photographs. Hosted in the EU (eu-west-1, Ireland).
Apple (App Store / in-app purchase)	Payment processing and subscription validation	Managed entirely by Apple. We receive subscription status only.
RevenueCat	Subscription management and receipt validation	A subscription identifier, your purchase history, and device/platform data.

When you write to us through the contact form, your submission is processed by a Google Cloud function and delivered to our own support inbox by email. We keep it only as long as needed to handle your request; it is not used for any other purpose.

Your core data is stored in the European Union. Subscription processing by RevenueCat and Apple may involve transfer to the United States; these providers operate under recognised transfer safeguards such as the EU–US Data Privacy Framework and Standard Contractual Clauses.

6. Data Retention

Account and user data is retained for as long as your account is active.
If you delete your account, all personal data is deleted within 30 days, except where we are required to retain records for legal or financial compliance.
End-face photographs are retained as long as the associated log record exists. Deleting a log record deletes the associated photographs.

As a data subject under GDPR, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data (‘right to be forgotten’).
Export your data in a portable format.
Object to or restrict processing in certain circumstances.
Withdraw consent at any time (for location data).

You can export or delete your data directly from the account settings in the app. To exercise any other right, contact us through our contact form. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

8. California Users (CCPA)

We do not sell personal data. We do not share personal data with third parties for cross-context behavioural advertising. California residents may request disclosure of the categories of personal data we collect and the purposes for which it is used by contacting us at the address above.

9. Children

LogPlan is not directed at children. We do not knowingly collect personal data from children below the age of digital consent in their country (13 in Norway). If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We will notify users of material changes by email or in-app notice at least 14 days before changes take effect. Continued use of the app after that date constitutes acceptance of the updated policy.

11. Contact

Millingly AS

Rinddalen 22, 5099 Bergen, Norway