ThermalChart-Swine Privacy Policy

Version: 2026-11-15 Effective date: 15 November 2026

Summary

• The records and infrared images you create stay on your tablet. The App never uploads them and we cannot see them.
• To run your account and your license we keep your e-mail address, your username, a one-way hash of your tablet's ID and the details of your license.
• We do not sell your data. The App has no advertising, analytics or tracking.
• You can delete your account in the App at any time, under About, then Delete account.

1. Who we are

ThermalChart-Swine, called the App in this policy, is provided by Little Curl Studio. In this policy "we" and "us" mean Little Curl Studio.

We are the data controller for the personal data described here under Thailand's Personal Data Protection Act B.E. 2562, called the PDPA.

Contact: support@thermalchart.com

2. Data that stays on your tablet

The records you create in the App are stored only on your tablet. That means the animal number, status, location, notes, the body regions you mark, their temperature readings and the infrared images you attach. The App never sends them to us or to anyone else, and we have no way to reach them.

They leave the tablet only when you use Export, or when you save or share a record as a PDF. An export file is a plain .zip file and it is not encrypted. A PDF is not protected either. Anyone who gets one of these files can read the records in it, so where you keep or send those files is up to you.

The App also keeps an activity log on the tablet, which you can read under About, then Activity. It shows when records were added, changed or deleted, named by animal number and date but without their contents. It also shows when data was exported, saved or shared, sign-ins, wrong PINs, log-outs and changes to your license. The log never leaves the tablet, is kept for one year, and is deleted with your account.

Your PIN is stored on the tablet only as a salted hash. It is never sent to us.

The App keeps this data out of Android and iCloud backups. If you uninstall the App or lose the tablet, anything you have not exported is gone, and we cannot recover it.

3. Personal data we collect

• E-mail address. You give it when you register. We use it to send you one-time codes when you register, reset your PIN or delete your account, and to contact you about your account and license.
• Username. You choose it when you register. We keep it so we can tell accounts apart. You also use it to open the App on your tablet.
• Device identifier. The App makes a one-way SHA-256 hash of your tablet's ID. On Android that ID is ANDROID_ID, and on iOS it is a random ID the App creates. We use the hash to tie a license or the free trial to one tablet. We never receive the ID itself.
• License details. These are your activation code, the date it is paid until, when you activated it, when your tablet last checked it, and whether it has been cancelled. We use them to issue and check your license. We also keep a log of each change to a key, an account, a purchase or a free trial, showing what changed and when. In that log your e-mail address, username and hashes appear only as "set", never as their values. We use the log to answer questions about your license and to confirm that nobody changed it who should not have.
• Free trial record. When your free trial starts we keep a one-way SHA-256 hash of your e-mail address, the device identifier, and the dates the trial starts and ends. We use it to give each e-mail address and each tablet one free trial.
• Free license record. When you get a free license from the Buy license page, we keep a one-way SHA-256 hash of your e-mail address, the device identifier, the key it gave you and when. We use it to give each e-mail address and each tablet one free license.
• Acceptance of our terms. We record which version of this policy and of the Terms of Service you accepted, and when.
• Purchase details. When you buy a license in the App, Google Play takes the payment and the App passes us the purchase token, which we check with Google. We keep the Google Play order number, the term you chose, the key we issued, and whether the purchase was later refunded. To tie a purchase to your account the App gives Google Play a one-way SHA-256 hash of your account ID, never your e-mail address. We use these details to issue your license, to end it if the purchase is refunded, to know who a key belongs to and for our accounts. We never see your Google account, card or bank details.
• Messages you send us. When you use Help and feedback in the App, we receive what you write, the kind of message you chose, the App's version, your tablet's model and Android version, and your account's e-mail address. When you e-mail us, we receive what you send and your address. We use these to fix problems, to answer you and to improve the App. No records or images are attached by the App.
• Technical logs. Our service providers automatically record the IP address, time and type of each request, such as a sign-in or a license check. These logs are used for security, to prevent abuse and to fix problems.

We do not collect your location, contacts, advertising ID or photos outside the App. The App contains no analytics, crash-reporting, advertising or tracking software.

4. Why we use your data and our legal basis

• To provide the App under our agreement with you: your account, sign-in codes and license. This is necessary to perform a contract, under PDPA section 24, item 3. Without your e-mail address and device identifier we cannot create your account or activate a license.
• To keep the service secure with technical logs. This is our legitimate interest, under PDPA section 24, item 5.
• To give each e-mail address and each tablet one free trial and one free license, with the free trial and free license records. This is our legitimate interest, under PDPA section 24, item 5.
• To answer your messages and fix the problems you report. This is our legitimate interest, under PDPA section 24, item 5.
• To keep payment records. This is a legal obligation under Thai accounting and tax law, under PDPA section 24, item 6.

We do not use your data for marketing and we do not make automated decisions about you. A license ends on its paid-until date, when its purchase is refunded, or when we cancel it under the Terms of Service.

5. Who we share it with

We do not sell or rent your personal data. We use these service providers, who process it only for us:

• Supabase Inc. runs our database, sign-in and server functions. Data is stored in Tokyo, Japan.
• Brevo, run by Sendinblue SAS in France, sends the e-mails that carry your one-time codes and our replies to you, so it receives your e-mail address.
• Cloudflare Inc. in the USA passes on e-mail sent to support@thermalchart.com.
• Google runs Google Play and takes the payment when you buy a license, under the Google Play terms and Google's own privacy policy. We ask Google whether a purchase made in the App was paid or refunded, and receive its order number. Google also hosts the mailbox that receives e-mail sent to us.
• Discord Inc. in the USA carries notices to a private channel that only we read. When an account is created or deleted, it carries the e-mail address and the state of the license or free trial. When a license is bought or refunded, or a free license is given, it carries that e-mail address. It also carries the messages you send from Help and feedback, with the kind you chose, the App's version and your tablet's model, but without your e-mail address. Activation codes and order numbers are never sent to Discord.

We may also disclose personal data when the law requires it, or to protect our rights or the safety of others.

6. International transfers

Our service providers store or process your data outside Thailand, in the countries named in section 5. These transfers are needed to perform our contract with you, under PDPA section 28. Our providers protect the data under their data processing agreements.

7. How long we keep it

• Account, username, device hash, license details and acceptance records: kept while you have an account and deleted when you delete it. A key stays in our records with the e-mail address and tablet it is locked to, so that nobody else can use it.
• Free trial record: kept after you delete your account, as hashes and dates only, so that deleting the account and registering again does not start a second trial.
• Free license record: kept after you delete your account, as hashes, the key and the date only, so that registering again does not give a second free license.
• Our backups of the license database: deleted after 90 days.
• Technical logs: kept by our service providers for a limited period under their retention policies.
• Messages you send us: kept until we have dealt with them, for at most 12 months. Messages sent from the App are deleted when you delete your account.
• Log of changes to keys, accounts, purchases and trials: 12 months.
• Notices in our Discord channel: deleted when we have dealt with them, and after 12 months at most, also for accounts that have since been deleted.
• Payment records: 5 years, as Thai accounting and tax law requires.
• Data on your tablet: kept until you delete it or uninstall the App.

8. How we protect it

• All traffic between the App and our server is encrypted with HTTPS.
• The license database cannot be reached from the public API. It is reached only through our server function, after your sign-in has been checked.
• Admin access is limited to us and protected by multi-factor authentication.
• Licenses are digitally signed, so the App checks them offline without sending your records anywhere.
• On the tablet, your account and license are kept in the system's secure storage, which is Android Keystore or iOS Keychain, and the App locks after 5 minutes in the background.

No system is perfectly secure. If a breach affects your personal data, we will notify the Office of the Personal Data Protection Committee within 72 hours where the PDPA requires it. If there is a high risk to you, we will also tell you without undue delay.

9. Your rights

Under the PDPA you have these rights:

• to access your personal data and get a copy of it
• to receive it in a machine-readable format or have it sent to another controller
• to object to its use
• to have it deleted or anonymised
• to restrict its use
• to have it corrected
• to withdraw consent where we rely on consent
• to complain to the Office of the Personal Data Protection Committee at www.pdpc.or.th

To use these rights, e-mail support@thermalchart.com from the address you registered with. We will reply within 30 days.

The data on your tablet is always under your control. You can view, correct and delete it in the App at any time. Exporting it needs a license.

10. Deleting your account

In the App, go to About, then Delete account, enter the code we e-mail you, then confirm. This does four things:

• deletes your account from our server, with the messages you sent us from the App
• unlinks your keys from the account. Each key stays locked to your e-mail address and tablet, so registering again with the same address gets it back
• deletes every record and image on the tablet, and its activity log
• deletes your account and license from the tablet

Export first if you want to keep your records.

Without the App, e-mail support@thermalchart.com from the address you registered with, using the subject "Delete my ThermalChart-Swine account". We will delete your account within 30 days and confirm by e-mail. Records on the tablet can only be removed on the tablet itself, by deleting them in the App or uninstalling it.

Payment records are kept as described in section 7.

11. Children

The App is a work tool for farm and veterinary staff. It is not directed at children, and we do not knowingly collect personal data from children.

12. Changes to this policy

The version and date at the top of this policy change whenever we update it. We will publish the new version on the web and in the App. If a change is significant, we will also tell you by e-mail.

13. Contact us

Little Curl Studio, support@thermalchart.com