Privacy Policy for ForestLink Collect

Last Updated: May 11, 2026

1. Introduction

This Privacy Policy explains how the Rainforest Foundation UK ("we," "us," or "our") collects, uses, and shares information when you use ForestLink Collect (the “App”). We are committed to protecting your privacy and ensuring the security of the data you collect in the field.

Rainforest Foundation UK (RFUK) is a registered charity in England and Wales (Charity No. 1138287) and a registered company (No. 7391285).
Address: Suite 201, Pill Box Studios, 115 Coventry Road, London E2 6GG, United Kingdom.

2. Information We Collect

RFUK relies on explicit user consent to collect and process personal data. Consent is obtained when you register and use the ForestLink platform.

We collect the following categories of information:

Account Information

• Email Address: Required to register and authenticate your account. Stored securely in our user database.

Media Capture Data

• Camera (Photos and Videos): We use android.permission.CAMERA to allow you to capture photos and videos as part of form responses.
• Audio Recordings: The app may allow you to record audio as part of a report.

All media (photos, videos, and audio recordings) are:

• Captured only through user action.
• Stored locally on your device until submission.
• Only uploaded to our servers when you explicitly submit a report.

Location Data

• GPS Coordinates: Used to georeference reports and improve data accuracy. Location is collected only during user-initiated actions.

Form Responses

• Any text, numerical input, selections, or attachments entered into forms.
• Includes locally stored drafts saved on your device.

Analytics and Usage Data

We collect limited analytics data to improve the app and monitor usage, including:

• Last login date and time.
• App usage activity (e.g., session duration, feature usage).
• Device and technical information (e.g., app version, operating system).
• Error logs and crash reports.

This data is used solely for performance monitoring, security, and service improvement. It is not used for advertising.

3. Use of Permissions

The app requests only the permissions necessary for its core functionality:

Camera

• Used to capture photos and videos for form submissions
• Never operates without user interaction
• Not used in the background

Microphone (Audio Recording)

• Used to record audio as part of reports
• Activated only by user action
• Not used in the background

Storage / Media Access

• Used to temporarily store and retrieve photos, videos, and audio files on your device
• Files are only accessed for app functionality (e.g., preview, upload)

Location

• Used to capture GPS coordinates for reports
• Only collected during active use and user-triggered events

We do not use permissions for tracking, advertising, or unrelated purposes.

4. Data Storage and Security

Local Storage

• Reports, drafts, and media files (photos, videos, audio) are stored securely on your device until submission.

Transmission

• Data is transmitted using secure, encrypted HTTPS connections.

Backend Storage

• Submitted data is stored in a secure PostgreSQL database hosted by trusted infrastructure providers.

We implement appropriate technical and organisational measures to protect your data against loss, misuse, or unauthorised access.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Partner organisations using ForestLink as part of their projects
• Service providers supporting app infrastructure (under strict data protection agreements) to support the operation, security, and performance of the app

All shared data is used solely for project-related purposes.

6. Your Rights

You have the right to

• Delete local data: Remove drafts directly within the app
Withdraw permissions: Via Android system settings (this may limit functionality)
• Withdraw consent: At any time by contacting us or using unsubscribe/opt-out options
• Access your data
• Request correction or deletion of your personal data
• Restrict or object to processing
• Request data portability

We will comply with applicable data protection laws (including UK GDPR).

7. International Data Transfers

Your data may be transferred to, stored, or processed outside the European Economic Area (EEA), including by our service providers.

We ensure appropriate safeguards are in place, such as contractual protections, to maintain data security and compliance with applicable laws.

8. Changes to This Policy

We review this Privacy Policy regularly and may update it from time to time. Updates will be published within the app or on our website.

9. Contact Us

10. How to Request Access to or Deletion of Your Data

You can request access to, correction of, or deletion of your personal data at any time.

To do so, please contact us using the details below and include sufficient information to identify your account (such as your registered email address):

When you contact us, please specify the type of request, such as:

• Access to the personal data we hold about you
• Correction of inaccurate or incomplete data
• Deletion of your account or personal data
• Restriction or objection to data processing
• Export of your data in a portable format

We may need to verify your identity before processing your request to protect your personal data.

We aim to respond to all legitimate requests within one month, in accordance with applicable data protection laws. In certain cases, where requests are complex or numerous, this period may be extended as permitted by law.

Please note that some data may be retained where required for legal, security, or legitimate operational purposes.