Privacy Policy
Last updated: 4 October 2026
This Privacy Policy explains how we collect, use, share and protect personal data when you use the Trakterás app, the trakteras.com website and the related services. It also explains your choices and your rights.
1. Data controller
The data controller is Trakteras E.E., with its registered office in Chalkida, Greece, VAT number (AFM) 803137442, Chalkida tax office (DOY), General Commercial Registry (GEMI) number 190440222000. For any matter concerning personal data, you can write to info@trakteras.com.
2. What data we collect
2.1 Account and profile details
- Email, an encrypted sign-in credential and technical account identifiers.
- The name, email and profile-picture address (URL) we receive from Google, Facebook or Apple, if you choose to sign in with that provider — depending on what each one sends us. We do not receive your password for any of them. Apple may give us a private relay address instead of your real email, if you choose that.
- Optional details, such as your full name, region, crops and farm size.
2.2 Farm content
- Fields, crops, field locations, machinery, tractors and implements.
- Tasks, diary, reminders and activity history.
- Income, expenses, amounts, categories and photos or files of receipts.
- Messages to the assistant, answers, searches and the related conversation history, as well as what the assistant has remembered about you.
2.3 Voice, camera, photos and location
- Audio clips when you use voice input, to convert speech to text. Recording starts when you tap the microphone button and stops when you tap it again. In a voice conversation with successive turns, the microphone reopens automatically after each answer, until you stop it.
- The audio of a live voice conversation, for as long as it is open (see section 6).
- Photos or files you choose to upload, such as receipts.
- Location, only when you choose to mark the position of a field or use a feature that requires it. If you have granted location permission, the app also uses the device's current position to show you the local weather; we do not store it in your account. We do not collect location in the background without a related feature and your permission.
2.4 Usage and device data
- IP address, device type, operating system, app version, language, sign-in dates and technical logs.
- Use of features, such as creating records, questions, voice or text use, scans, reminders and subscription status.
- A device identifier or push token for notifications.
- Your device's advertising identifier, only if advertising measurement is enabled in the app and you give your consent (see section 5).
2.5 Subscription and payments
- Subscription status, plan, start, renewal and cancellation dates, amount and transaction identifier.
- For earlier payments through Viva Wallet: the details on the receipts or invoices issued, namely your name, your email and, if you provided them, your company name, VAT number (AFM), tax office (DOY) and address.
Payment and renewal of the Premium subscription take place through the Apple App Store or the Google Play Store, depending on your device. Earlier subscriptions through the website were charged through Viva Wallet and no longer renew. We do not receive or store your full card details.
2.6 Communications and support
- Communication preferences, information about the notice shown when your email was collected, and any objection, unsubscribe or withdrawal of consent regarding informational and promotional communications.
- Whatever you send us for support or feedback, by email or in the app (for example, a rating of one of the assistant's answers).
3. Why we use data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating your account and providing features | Performance of a contract |
| Premium subscription, payment, cancellation and support | Performance of a contract and legal obligations |
| AI answers, voice input and live voice conversation, OCR and personalisation based on your own data | Performance of a contract; device permission where required |
| Reminders and notifications you asked for | Performance of a contract and device consent |
| Security, fraud prevention, error diagnosis and protection of our systems | Legitimate interest and legal obligations |
| Improving the product using aggregated or pseudonymised usage data | Legitimate interest, balanced against your rights |
| Google Analytics and non-essential cookies on the website | Consent |
| Meta Pixel or Conversions API on the website, only if enabled | Consent |
| Measuring app installs, sign-ups and subscriptions that come from ads, with the Meta SDK in the app, only if enabled | Consent in the app and, on iPhone, the system “App Tracking Transparency” permission |
| Emails with user guides, educational videos, tips and news | Consent, unless a specific legal exemption applies (section 4.2) |
| Keeping tax and accounting records | Legal obligation |
Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal. Where we rely on legitimate interest, you can object, as described in section 11.
4. Email and other communications
4.1 Essential service communications
We may send you emails that are necessary for your account or subscription, such as sign-up confirmation, security, password changes, receipts, payment status, important changes to the service or replies to support requests. You cannot opt out of strictly necessary communications while you keep an active account.
4.2 Onboarding and marketing
When we lawfully obtain your email in the course of signing up or another transaction with Trakterás, we may use it to send you user guides, educational videos, tips, news and updates about our own similar services, subject to the conditions of applicable law.
When your email is collected, you are given a clear, easy and free way to say that you do not wish to receive these communications. If you do not object at that point, you can do so at any time via the unsubscribe link included in every such email or by contacting info@trakteras.com. Where the legal conditions for this use are not met, such communications are sent only if you have given your prior consent.
Specifically: every such email contains a one-click unsubscribe link. From version 1.8 of the app, sign-up includes the option “I do not wish to receive these updates” («Δεν επιθυμώ να λαμβάνω αυτές τις ενημερώσεις») (when you sign in with Google, Facebook or Apple, it is shown once, after your first sign-in), and your profile has a switch to turn these emails off or back on.
Unsubscribing from informational and promotional communications does not affect the essential communications about your account, security, subscription or support.
5. Cookies, analytics and advertising technologies
On trakteras.com we use cookies and similar technologies. Non-essential tools are enabled only after you give consent through the cookie settings, which group them into three categories:
- Essential (always on): they maintain basic functions, security, sign-in and preferences, such as your language and your cookie choice. They do not require consent where they are strictly necessary.
- Analytics: Google Analytics measures visits, pages and events, such as clicks to the App Store or Google Play, only after you consent.
- Marketing: if the Meta Pixel or the Meta Conversions API is enabled, it will be used only after valid consent, to measure campaigns, build audiences and assess conversions. The related choices and providers will be shown in the cookie settings.
Separately from these categories, Vercel, which hosts the website, measures its traffic and performance (Vercel Web Analytics and Speed Insights) without cookies and without identifying you individually, which is why it does not appear in the cookie settings. It also processes technical data for the security and operation of the website.
Until you give consent, no Google or Meta script is loaded (not even Google Tag Manager) and no analytics or marketing cookie is stored. Your choice is kept for 12 months, after which we ask you again.
You can change or withdraw your choices at any time via the “Cookie settings” link on every page of the website. Rejecting non-essential cookies does not prevent the website's basic functions from working.
In the mobile app: once the Meta SDK is enabled, it will measure app installs, sign-ups and subscriptions that come from ads only if you agree in the app and, on iPhone, only if you also allow tracking in the system “App Tracking Transparency” prompt. As part of this measurement, subscription events (for example a purchase or a renewal) may be sent to Meta through RevenueCat. If you do not agree, the app works normally, and you can change your choice at any time in the app or in your device settings.
6. Artificial intelligence and automated processing
So that the assistant can answer you, we may send AI providers your message and the necessary relevant context, such as selected profile details, fields, machinery, previous entries or a photo of a receipt. For voice use, an audio clip may be sent to be converted to text, and the text of the answer to be read aloud.
In a live voice conversation, the sound from your microphone is streamed directly to OpenAI for as long as the conversation is open, and the answer comes back as audio. You start and stop the conversation yourself, with a tap.
The AI providers (OpenAI and ElevenLabs) act as data processors on our behalf. Neither OpenAI nor ElevenLabs uses the data it receives through its API to train its models.
We do not make decisions with legal or similarly significant effects on you based solely on automated processing. The assistant's answers are informational and call for human judgement.
7. Who we share data with
| Provider | Role | Typical data |
|---|---|---|
| Supabase | Database, account sign-in and file storage, on servers in the EU | Account details and app content, including photos and files of receipts |
| Vercel | Hosting of the website and of the app's server; cookieless traffic and performance measurement (Web Analytics, Speed Insights) | IP, technical logs and performance data; the app's requests pass through its servers |
| OpenAI | Conversation models, reading receipts, web search and live voice conversation | Messages, relevant context, selected images/files, search queries and the audio of live voice conversations |
| ElevenLabs | Speech-to-text and speech output | Audio clips and answer text |
| Sign-in with Google; Google Analytics and Google Tag Manager on the website, only with consent; Google Maps in the Android app | Sign-in details, traffic data after consent, technical device data and the map area being displayed | |
| Meta Platforms Ireland (Facebook Login) | Sign-in with Facebook, only if you choose it; separate from the Meta advertising measurement described below, which takes place only with consent | Sign-in details: the name, email and profile picture that Facebook returns to us (not your password) |
| Apple Distribution International (Sign in with Apple) | Sign in with Apple on iPhone, only if you choose it | Sign-in details: name and email — or Apple's private relay address, if you choose to hide your email (not your password) |
| Apple and Google | App distribution, in-app purchases (subscription billing) and delivery of push notifications; on iPhone, also maps (Apple Maps) | Transaction and payment details, device identifier, notification content and technical data |
| Expo | Sending push notifications and app updates (EAS Update) | Push token and technical device data, notification content, app version |
| RevenueCat | Managing the subscriptions bought in the app | Account identifier, purchase and subscription details, technical device data |
| Viva Wallet | Charges for earlier subscriptions through the website (these no longer renew) | Transaction details; card details are handled only by Viva Wallet |
| Elorus and AADE (myDATA) | Issuing receipts or invoices for earlier payments through Viva Wallet and transmitting them to the Greek tax authority (AADE) via myDATA, as the law requires | Name, email, payment amount and date and, if you provided them, company name, VAT number (AFM), tax office (DOY) and address |
| Resend | Sending emails: service emails (e.g. sign-in, password change, receipts) and informational or marketing emails | Email, name, message content and sending and delivery data |
| Open-Meteo | Weather forecasts and finding places by name (geocoding) | Only coordinates or place names, without identity details |
| OpenStreetMap (Nominatim) | Matching field locations to a regional unit, for internal aggregated statistics | Only coordinates, without identity details |
| Meta Platforms Ireland | Meta Pixel and Conversions API on the website, Meta SDK in the app — once enabled, only with consent | Website or app events (e.g. visit, click to a store, sign-up, subscription) and identifiers, only after consent |
We may also disclose data to professional advisers bound by confidentiality, to competent authorities where the law requires it, or to a successor entity in the event of a corporate restructuring, with the required safeguards. We do not sell personal data.
8. International transfers
Our main database is hosted within the European Union. Some providers may process data outside the EEA. Where required, we use an appropriate transfer mechanism, such as an adequacy decision, the EU–US Data Privacy Framework for certified organisations or the European Commission's Standard Contractual Clauses, together with supplementary measures where needed.
9. How long we keep data
| Category | Retention period or criterion |
|---|---|
| Account and content | For as long as the account is active and until deletion is complete |
| Backups | Until the next backup rotation cycle |
| Subscription payments, receipts/invoices and other tax records | For as long as tax, accounting and commercial law requires — receipts and invoices are kept even after the account is deleted |
| Support requests | For as long as needed to reply, keep records and establish, exercise or defend legal claims |
| Marketing consent | Until withdrawn; proof of consent may be kept for as long as needed for compliance |
| Cookies and analytics | Your cookie choice: 12 months (localStorage and the “trakteras_consent” cookie). Google Analytics (“_ga”, “_ga_…”): up to 2 years. Meta Pixel (“_fbp”, “_fbc”), if enabled: up to 90 days. Analytics and marketing cookies are deleted when you withdraw the related consent. |
When you delete your account, active data is deleted or anonymised, unless limited retention is required by law, for security, or to establish, exercise or defend legal claims. In particular, the receipts and invoices we have issued for your payments are kept for as long as tax law requires. You will find details on the Delete your account page.
10. Security
We apply appropriate technical and organisational measures, such as encryption in transit, access control, private file storage, event logging and incident-response procedures. No system is completely secure. If you notice a problem, contact us immediately at info@trakteras.com.
11. Your rights
Subject to the conditions of the GDPR, you have the right:
- to access your data;
- to have inaccurate or incomplete data corrected;
- to erasure — you can also delete your account yourself, see Delete your account;
- to restrict processing;
- to data portability;
- to object to processing based on legitimate interest and, at any time, to direct marketing;
- to withdraw your consent at any time;
- to lodge a complaint with the Hellenic Data Protection Authority, www.dpa.gr.
To exercise a right, write to info@trakteras.com. We may ask for reasonable proof of identity. We respond within the time limits set by law, usually within one month.
12. Deleting your account
You can delete your account from the app, following the instructions on the Delete your account page; if you cannot access your account, you can request deletion at info@trakteras.com. Deleting your account is permanent for active data and should not be confused with cancelling Premium, which simply stops future charges and returns the account to the free plan.
After deletion we keep the receipts and invoices we have issued for your payments, for as long as tax law requires (section 9). Deleting your account does not cancel a subscription bought through the App Store or Google Play; cancel it first in the store's subscription settings.
13. Children
The service is aimed at professionals in the agricultural sector and is not intended for children under 16. We do not knowingly collect data from children below that age. If you believe such an account has been created, please let us know.
14. Changes to this Policy
We may update this Policy when our features, providers or the law change. We will post the date of the new version and, for material changes, we will give appropriate notice through the app, by email or on the website before they take effect, where required.
15. Contact
Email for privacy matters: info@trakteras.com
This is a translation provided for convenience. In the event of any discrepancy, the Greek version of this policy prevails.