Privacy Policy — Arboreal Forest

Last updated: 22 October 2026

This policy describes how Arboreal AB ("Arboreal", "we", "us") handles personal data when you use the Arboreal Forest app (called Arboreal Skog in Sweden) and the web portal on arboreal.se where you view your measurements (together, the "Service").

1. Data controller

Arboreal AB is the controller of the personal data described here.

Arboreal AB
Strandvägen 2C, 922 63 Tavelsjö, Sweden
support@arboreal.se

2. The data we process

Account data

When you create an account we process:

  • Email address (also used as your username)
  • Name
  • Password. It is stored protected in our sign-in service (Amazon Cognito) and cannot be read by us.
  • The company you are linked to, if your company has an agreement with Arboreal

Measurement data

When you measure we store:

  • Tree data: diameter, height, species, coordinates and time
  • Plot data: basal area, volume, stems per hectare, mean diameter, heights, notes, coordinates, time and who measured

Coordinates are location data. The app only uses your location while you measure, to place trees and plots on the map.

Images of the trees

In the app you choose how many images may be saved:

  • 0 %: no images are saved or sent.
  • 10 %: roughly every tenth tree, plus the trees the app finds hard to measure or recognise.
  • 100 %: all trees.

You can change your choice at any time under Settings in the app. The app works just as well whatever you choose.

Subscription

Purchases and subscriptions are made through the App Store or Google Play. We learn which subscription you have and when it expires, but never your payment details.

Sign-ins

When you sign in we record the time and which platform you use (iOS, Android or the web).

What we do not collect

  • We use no analytics, advertising or tracking tools in the app.
  • We use no tools that send crash reports to third parties.
  • We never sell your personal data.

3. Why we process the data and on what legal basis

  • Create and maintain your account, store and show your measurements in the app and the web portal. Contract (to provide the Service).
  • Manage subscriptions and company licences. Contract.
  • Share your measurements with your company when the company has an agreement with Arboreal. Contract and our legitimate interest in delivering the company agreement you are covered by.
  • Save images to train and improve the recognition of tree species and tree edges. Consent (your choice of 0, 10 or 100 %).
  • Send information about Arboreal's products and tips on using the app. Legitimate interest. You can opt out at any time.
  • Provide support, find and fix errors and protect the Service against misuse. Legitimate interest.
  • Meet legal requirements. Legal obligation.

4. Images and training

The images are used to train and improve Arboreal's own recognition of, for example, tree species and tree edges. We do not share the images with anyone else for training.

If you switch to 0 %, no new images are saved. If you want images that have already been sent to be deleted, email support@arboreal.se.

5. Emails

We use your email address to send information about Arboreal's products and advice on how to use the app. You can unsubscribe at any time through the link in the email or by emailing support@arboreal.se. You will still receive messages your account needs, such as verification codes.

6. Who receives the data

Your company

If your company has an agreement with Arboreal, the company's administrator can add your email address. Your account is then linked to the company, and the company's administrators can see your name, email address and measurements in the web portal, export them and fetch them with the company's API keys.

The company is itself responsible for how it uses the data. If you no longer want to share your measurements, contact the company's administrator or us.

API keys you create

You can create your own API keys in the web portal. Anyone holding a key can fetch your measurements, so only share it with people and systems you trust. You can delete a key at any time.

Service providers

We use Amazon Web Services (AWS) for hosting, sign-in and storage. AWS processes the data on our behalf and may not use it for its own purposes.

Apple and Google

Apple and Google handle downloads, payments and subscriptions under their own terms and privacy policies.

Authorities

We only disclose data to authorities when the law requires it.

7. Where the data is stored

All data is stored with Amazon Web Services within the EU:

  • Images: in Sweden
  • Account and measurement data: in Germany

AWS is a US company. Any transfers to the US are protected by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.

8. How long we keep the data

We keep your account, measurement and image data for as long as you have your account. When you delete your account, we remove the data.

Measurements that have already been shared with your company remain with the company, which is responsible for them.

Data we are required by law to keep, for example for bookkeeping, is kept for as long as the law requires.

9. Deleting your account

You can delete your account directly in the app. You can also email support@arboreal.se with the subject "Delete Arboreal Forest account". More information is on the page Delete account — Arboreal Forest.

Deleting your account does not cancel a subscription. You cancel it in the App Store or Google Play.

10. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

  • know what data we hold about you and get a copy of it
  • have incorrect data corrected
  • have your data deleted
  • restrict the processing
  • receive your data in a machine-readable format (data portability)
  • object to processing based on legitimate interest, such as emails
  • withdraw consent at any time, for example by choosing 0 % images

Email support@arboreal.se to exercise any of these rights.

If you are not satisfied with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or to the data protection authority in your country.

11. Security

The data is sent encrypted and stored with AWS under access control. Only you, your company (if you are linked to one) and holders of an API key you have created can see your measurements. No system is completely secure, but we work to protect your data.

12. Children

The Service is intended for people aged 18 or over. If you are younger, you need permission from a parent or guardian. If we learn that we hold data about a child without such permission, we delete it.

13. Changes to this policy

We may update this policy, for example when the Service changes. We announce significant changes in the app or by email before they take effect. The date at the top shows when the policy was last changed.

14. Contact

Questions about how we handle your data? Contact us:

Arboreal AB
Strandvägen 2C, 922 63 Tavelsjö, Sweden
support@arboreal.se

See also the Terms of Use for Arboreal Forest.