Privacy policy

Last updated 9 September 2026

This page explains what information the Coltiva app collects, how it’s used, and how you can have it removed.

The service is operated by Eflix AB (org.nr 559301-8251), Krokslätts Parkgata 63 C, 431 68 Mölndal, Sweden, which is the data controller for the personal data described below.

What we collect

When you create a Coltiva account in the app, we store your email address.

Sensor readings and device settings from your Coltiva hardware are stored against your account so the app can show your system’s history and control it remotely.

Push notifications. If you allow notifications, your device is issued a notification token, which we store against your account so we can send you alerts about your grower, for example when a sensor reading moves outside its target range. The token is created by Apple (on iPhone and iPad) or Google (on Android) and is used only to deliver these notifications. You can turn notifications off at any time in your device settings; if you do, we stop using the token.

Diagnostics. The app can show a summary of your app and account details on screen to help with troubleshooting. It stays on your phone, and only reaches us if you choose to email it to contact@coltiva.eu yourself.

Setting up your grower

When you add a new grower to your account, the app asks for two permissions:

• Camera: to scan the QR code printed on the unit. The image is processed on your phone and is never stored or sent anywhere.
• Local network: so your phone can connect to the grower’s own temporary Wi-Fi hotspot and hand it your home Wi-Fi details.

Your home Wi-Fi name and password are sent directly from your phone to the grower unit over that local connection. They are never sent to Coltiva, and we never see them.

How we use it

We use your email address to give you access to our services and to contact you about important information regarding your account. We don’t share your email address with any third parties, and we don’t use it for anything else.

We process your account details and your grower’s data in order to provide the service you have asked for (performance of a contract). We process notification tokens on the basis of your consent, which you give by allowing notifications and can withdraw at any time.

We do not track you. Coltiva contains no analytics, no advertising, and no third-party tracking of any kind. We do not build profiles, we do not sell or share your data, and we do not use it for advertising. The only third parties involved are the infrastructure providers listed below, acting on our instructions.

Who else processes your data

We use a small number of service providers who process data on our behalf, under contract and on our instructions only:

• Amazon Web Services: hosting for your account and your grower’s data. Your data is stored in AWS’s Europe (Stockholm) region, in Sweden, and does not leave the EU.
• Google (Firebase Cloud Messaging) and Apple (APNs): delivery of push notifications. These receive the notification token and the notification itself, and may process it outside the EU under the European Commission’s standard contractual clauses.

We do not sell your data or share it with anyone else.

How long we keep it

We keep your account data for as long as you’re actively using the app. If an account is inactive for more than two years, we delete it.

Deleting your account and data

You can ask us to delete your Coltiva account and the data attached to it at any time, and you don’t need to give a reason.

You can delete your account directly in the app: open the ⋮ menu in the top-right corner of the main screen and choose Delete account. Deletion is immediate and permanent. If you are the last member of your group, deleting your account also deletes the group (its grow systems and automation are removed and its devices are unpaired), and the app asks you to type the group name to confirm.

You can also ask us by email: write to contact@coltiva.eu from the address you used to create the account, and say that you want your account deleted. If you can’t write from that address, tell us which account you mean and we’ll verify it another way before deleting anything. We confirm the request by email and complete the deletion within 30 days.

What gets deleted: your account, your email address, and the sensor readings, device settings, and history associated with your account. Once it’s done, the account is gone and you won’t be able to log in to it again.

What we keep: if you have bought hardware from us, Swedish accounting law requires us to keep the invoice and order records for seven years. Those records are kept for that purpose only and are not linked back to a deleted app account.

Full instructions are on the account deletion page.

Your rights

Under the GDPR you have the right to:

• Access: ask what personal data we hold about you, and receive a copy
• Rectification: have inaccurate data corrected
• Erasure: have your data deleted (see Deleting your account and data above)
• Portability: receive your data in a machine-readable format, or have it sent to another provider
• Restriction and objection: ask us to limit or stop certain processing

To exercise any of these, email contact@coltiva.eu and we will respond within one month.

If you believe we have handled your data improperly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se, or to the data protection authority in your own country.

Changes to this policy

We may update this policy from time to time. If we make a significant change, we’ll let you know by email or in the app.

Children’s privacy

Coltiva is intended for users aged 16 and over. We don’t knowingly collect data from anyone under 16, and if we discover that we have, we delete it immediately.

Contact

Questions about your data or this policy? Email contact@coltiva.eu , or write to Eflix AB, Krokslätts Parkgata 63 C, 431 68 Mölndal, Sweden.