Eelj Privacy Policy

Eelj is a private harvest-queue application provided by Saifullah Ahad. This policy explains what the Android app handles when you use field records, crop checks, signed season sharing, weather or notifications.

What Eelj stores

On your device, Eelj can store the village or group name you enter, farmer and field names, crop facts, a manually drawn field boundary, readiness evidence, plans, completion events, app settings and an optional approximate location. No account, email address, phone number, identity document, public profile or searchable directory is required.

Crop and QR photographs

Photographs never leave the phone. A full-resolution photo is processed on-device to measure crop colour or read a signed QR transfer. Eelj deletes the temporary photo after processing. Only a derived crop fraction, confidence interval and evidence hash may enter a shared season.

Optional location and weather

Eelj requests only approximate foreground location, after you choose that option. Coordinates are rounded before weather lookup and are used to retrieve daily temperature and precipitation through the Eelj service and Open-Meteo. You can deny location and continue with the manual field map. Eelj never requests precise or background location.

Private season sync

If you deliberately join or create a shared season, signed plan and completion data is sent over HTTPS to Eelj's Cloudflare-hosted season service. This can include farmer and field labels present in the plan. A season is identified by an unlisted random identifier and is not publicly searchable. Cloudflare processes this data only to operate the service.

Notifications

If you enable harvest updates, Eelj registers a Firebase Cloud Messaging token and the app-generated signing public key. Google Firebase delivers private update notifications. Notification content is generic and does not include a farmer name, field name, boundary or crop photo.

Security

• Network transport uses HTTPS or secure WebSockets.
• Plan and machine events use P-256 device signatures generated in Android Keystore.
• The optional app PIN is stored only as a salted SHA-256 hash.
• Biometric templates and results remain inside Android's biometric system and are not collected by Eelj.

Deletion and retention

“Delete all local data” removes seasons, fields, boundaries, evidence, plans, events and pending sync rows from the device. For a shared season, the owner’s phone first creates a signed deletion tombstone. When online, the service deletes messages, invites and push tokens and the app verifies that a following snapshot is empty. If offline, WorkManager retains that tombstone outside the cleared database and retries when connectivity returns. Clearing Android app storage or uninstalling removes remaining local settings.

Sharing, advertising and analytics

We do not sell personal data. Eelj contains no advertising SDK, analytics SDK, advertising ID access, payment, subscription or third-party behavioral tracking. Cloudflare, Firebase Cloud Messaging and Open-Meteo act as service providers for the functions described above.

Children

Eelj is an agricultural work utility for adults and is not directed to children. It has no chat, public posts or user-generated content visible to strangers.

Your choices

You may deny camera, approximate-location or notification permission in Android Settings. Core field records and the last saved queue remain usable offline. To request help with data or privacy, email [email protected].

Changes

Updates will be posted at https://privacy.saifullah.ai/eelj.html with a revised effective date.

Developer

Saifullah Ahad
Dhaka, Bangladesh
https://saifullah.ai
[email protected]