This Privacy Policy explains how [[PUBLISHER LEGAL NAME]] (“we”, “us”, “our”) processes personal data when you use the Land Layers mobile application, our website at landlayers.com and related online services (together, the “Service”).
We are the data controller for the personal data described in this policy. Our contact details are:
When you start using the app without signing in (after you accept the Terms of Use), our server creates a random guest identifier and returns it to the app, which stores it in your device’s secure storage (the iOS Keychain). This identifier is generated by us; it is not your device’s advertising identifier or a hardware identifier. We use it to keep your guest reports together and to apply the limit of one free preview report. To prevent abuse of the free preview, our server also counts free previews requested from the same network (IP address) for 24 hours; this count is kept only in the server’s memory.
If you sign in with Apple, we receive from Apple:
We also record when your account was created and when it was last used. If you were using the app as a guest, your guest reports are transferred to your new account when you sign in.
When you analyze a piece of land, we process and store:
Please note that a parcel boundary is information about a location, which may be connected to you if, for example, it is your home or property.
If you grant permission, the app uses your device’s location only while the app is open to show your position on the map and to move the map to where you are. Your live location is processed on your device and is not sent to us or stored by us. Coordinates are only sent to our server when they become part of a parcel you choose to analyze, or as the approximate map area (rounded to about 1 km) when you search for an address. The app does not access your location in the background. You can withdraw permission at any time in iOS Settings.
When you use address search, the text you type and the approximate center of the map you are looking at are sent to our server, which forwards them to a geocoding provider (see section 4) to find matching places.
Payments are processed by Apple through the App Store. We do not receive or store your card or other payment details. To grant you report credits or subscription benefits, we receive from Apple, through our subscription management provider RevenueCat, information about your transactions: your in-app user identifier, the product purchased, transaction identifiers, purchase, renewal, expiration, cancellation and refund events, the storefront country, and the price and currency.
We keep a record of credits added to and used from your account so we can answer questions such as “I paid but did not receive my report”.
You can choose to add your business details to the PDF reports you download: company name, your name, business phone number, business email address, website, professional license number, and a logo image if you add one. All fields are optional. These details and your logo never leave your device. They are stored only on your device, and the app adds them to the PDF on your device after the report has been downloaded. To leave the right amount of space on the cover, the app tells our server only the layout it needs: whether there is a logo and its width-to-height ratio, and whether there is a name or license line and a contact line. No names, contact details or images are sent to us.
To add a logo, you pick a single image with the iOS photo picker; the app does not get access to your photo library. The image is rotated, cropped, resized and converted to PNG on your device, which also removes embedded metadata such as the location where a photo was taken. It is never uploaded. You can change or remove your details at any time on the Business profile screen. Because they live only on your device, they are removed if you delete the app, and the app also deletes them when you delete your account.
If you enter someone else’s contact details (for example a colleague’s), you are responsible for having their permission to do so.
Saved parcels. Parcels you save in the app without analyzing them are stored only on your device. They are not sent to us. They are deleted when you delete them, when you delete your account in the app, or when you delete the app.
When the app communicates with our servers, we automatically process technical information necessary to deliver the Service and keep it secure, such as your IP address, the date and time of the request, the part of the Service requested, the app version, and error information. We use IP addresses to limit abusive traffic (for example, repeated sign-in attempts or repeated free previews from the same network).
Our website does not use cookies, analytics, advertising or tracking technologies, and it does not load fonts, scripts or other content from third parties. When you visit it, our web server processes your IP address, the page requested, the date and time and your browser’s user agent only to deliver the page and protect the server; this information is handled as server logs (see section 6). When you switch language, a small note that keeps your place on the page is kept in your browser for that tab only and is not sent to us. Links to other websites, such as Apple’s, are governed by those websites’ own policies.
Where the EU or UK General Data Protection Regulation (GDPR) or Türkiye’s Personal Data Protection Law No. 6698 (KVKK) applies, we rely on the following legal bases:
| Purpose | Information used | Legal basis |
|---|---|---|
| Providing the Service: running analyses, generating and storing reports, letting you open and share them again | Guest identifier, account information, parcels and reports, address searches | Performance of our contract with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Creating and managing your account, including Sign in with Apple | Account information | Performance of contract |
| Processing purchases, granting credits and subscription benefits, handling refunds | Purchase information, account information | Performance of contract; compliance with legal obligations (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) |
| Showing your position on the map | Device location (on your device) | Your permission given through iOS; performance of contract |
| Keeping the Service secure and reliable, preventing fraud and abuse of the free preview, fixing errors | Technical and security information, guest identifier, credit records, coded fingerprint of a deleted account’s Apple identifier | Our legitimate interests in operating a secure and fair service (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Establishing, exercising or defending legal claims, for example showing which version of the report terms was accepted and when | Record of your acceptance of the report terms (text version and date); after account deletion, linked only to a coded fingerprint (HMAC) of your Apple identifier | Our legitimate interests; establishment, exercise or defence of legal claims (GDPR Art. 6(1)(f) and Art. 17(3)(e); KVKK Art. 5(2)(e)) |
| Responding to your requests and support messages | Information you send us, account information | Performance of contract; legitimate interests |
| Complying with the law and establishing, exercising or defending legal claims | Any relevant information | Legal obligation; legitimate interests (KVKK Art. 5(2)(e)) |
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. Reports are generated automatically from public data, but they describe land, not you.
We share personal data only as described below. Our service providers may use the data only to provide services to us.
To build a report, our server requests information about the parcel’s location from public geographic, environmental and statistical data providers, such as government agencies, public research institutions and open-data services. These requests contain only the coordinates of the area being analyzed. They are sent from our server and do not include your name, email address, IP address or account identifier.
To display maps, your device downloads map images, aerial imagery and elevation data directly from Apple Maps and from public mapping services of U.S. government agencies (for example USGS, USFWS and USDA). As with any website or online content, these providers receive your IP address and information about the map area being displayed, and their own privacy policies apply to this data.
Our servers are located in Germany. Some of our providers, including Apple, RevenueCat, Cloudflare, Google and LocationIQ, process data in the United States or other countries. Where personal data is transferred outside the European Economic Area, the United Kingdom or Türkiye, we rely on appropriate safeguards required by applicable law, such as adequacy decisions, the EU-U.S. Data Privacy Framework and its UK extension where the recipient is certified, standard contractual clauses, or the standard contracts and other transfer mechanisms provided under Article 9 of KVKK. You can contact us for more information about these safeguards.
| Information | Retention period |
|---|---|
| Account information, parcels, reports, credit and subscription records, and the record of your acceptance of the report terms (text version and date only) | For as long as your account exists. Deleted when you delete your account. |
| Guest identifier and guest reports | Until the data is transferred to an account when you sign in, or deleted 12 months after the guest identifier was last used, or earlier at your request. |
| Purchase event records received from RevenueCat | For as long as your account exists. Apple keeps its own transaction records under its own policies. |
| Coded fingerprint (HMAC) of the Apple identifier of a deleted account that used the free preview | 12 months after the account is deleted. |
| Record of your acceptance of the report terms after your account is deleted (text version and date only, linked to a coded fingerprint (HMAC) of your Apple identifier, not to your account, reports or parcels) | 12 months after the account is deleted. |
| Server logs (including IP addresses) | Kept for a short period and overwritten automatically, normally within 30 days, unless needed longer to investigate a specific security incident. |
| Backups | Deleted data may remain in backups for up to 30 days, until those backups are deleted. |
| Support correspondence | Up to 2 years after the matter is resolved. |
We may keep information for longer where required by law or to establish, exercise or defend legal claims.
You can delete your account at any time in the app: tap the green credits badge in the top-left corner of the map to open My account, then select Delete my account. When you confirm:
If you used your free preview, we keep a one-way, keyed fingerprint (HMAC) of your Apple user identifier for 12 months after the deletion, only so that the free preview cannot be claimed again by deleting and re-creating the account. The fingerprint cannot be turned back into your identifier and is not linked to any other data.
We also keep the record of your acceptance of the report terms (which text version you accepted and when) for 12 months after the deletion, linked only to a separate one-way, keyed fingerprint (HMAC) of your Apple user identifier. We keep it only so that we can establish, exercise or defend legal claims, for example if a dispute about a report arises. It contains no account, report, parcel, device or IP information, and it is deleted automatically when the 12 months end.
Deleting your account does not cancel an active App Store subscription. Apple does not allow apps to cancel subscriptions; please cancel it in your Apple ID subscription settings to avoid being charged again. Unused credits are lost when an account is deleted.
Guest users, or anyone who cannot access the app, can request deletion by emailing privacy@landlayers.com.
We use technical and organizational measures designed to protect personal data, including encrypted connections (HTTPS) between the app and our servers, verification of Apple’s signed identity tokens, storage of session tokens in the iOS Keychain, access controls on our servers and database, and data minimization. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify affected users and authorities where required by law.
Depending on where you live, you may have the right to:
To exercise these rights, use the in-app deletion feature or email privacy@landlayers.com. We may need to verify your identity, for example by asking you to confirm details from within the app. We will respond within one month, or within the shorter period required by applicable law, and will not discriminate against you for exercising your rights.
You can lodge a complaint with the data protection authority in the country where you live or work, or where an alleged infringement took place. In the UK, this is the Information Commissioner’s Office (ICO).
Under Article 11 of KVKK you have the right to learn whether your personal data is processed, request information about it, learn the purpose of processing and whether data is used for that purpose, know the third parties to whom data is transferred in Türkiye or abroad, request correction or deletion, request that such correction or deletion be notified to recipients, object to a result against you arising exclusively from automated analysis, and claim compensation for damage caused by unlawful processing. You may submit requests to us in writing or by email in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. If your request is rejected or not answered, you may complain to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurulu). A Turkish-language version of this policy is available here.
In the past 12 months we have collected the categories of information described in section 2: identifiers (app-specific Apple user identifier, guest identifier, IP address), commercial information (purchase records), geolocation data (parcel coordinates you submit), and internet or network activity (server logs). We collect them for the purposes described in section 3 and disclose them to the service providers described in section 4. We do not sell or share personal information for cross-context behavioral advertising, and we do not knowingly sell or share the personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes other than those permitted by law. Depending on your state of residence, you may have the rights to know, access, correct and delete your personal information, and to appeal our decision on your request by replying to our response. You may use an authorized agent to make a request on your behalf.
The Service is not directed to children under 16, and we do not knowingly collect personal data from children under 16 (or under 13 in the United States). If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this Privacy Policy from time to time. We will change the “Last updated” date above, and if the changes are material, we will notify you in the app or by other appropriate means before they take effect.
If you have questions about this Privacy Policy or our handling of personal data, contact us at privacy@landlayers.com or write to [[PUBLISHER LEGAL NAME]], [[REGISTERED ADDRESS]].