Privacy

Privacy Policy

Naturecode. Last updated 18 September 2026.

The short version

Naturecode holds environmental measurements, not people. The personal data we process is the minimum needed to let a team work on a project together: an email address, a role, and who recorded what.

Who we are

Naturecode is an ideell förening — a non-profit association registered in Sweden — and is the data controller for the personal data described here. Contact: privacy@naturecode.ai.

What we hold

About people: your email address, your role in each project, and an audit record of which measurements you recorded or changed. That last one exists because a measurement without a provenance is not evidence.

About places: measurements, their protocol, their method, and the coordinates of monitored sites.

Site coordinates are sensitive

Precise locations of threatened species can be used to find them. Project data is private to its team by default, and we do not publish site coordinates or species detections without an explicit decision by the project owner. Where a project chooses to contribute to open biodiversity records, location precision is reduced for taxa where disclosure is a risk.

The data belongs to the project

A project outlives the people monitoring it. Access is granted through a team and can be withdrawn without the record becoming unreadable — a member leaving does not take the project's history with them, and does not retain access to it either.

Legal basis (GDPR)

We process your email address and role to perform our agreement with you (Article 6(1)(b)), and keep audit records on the basis of our legitimate interest in the integrity of environmental evidence (Article 6(1)(f)). Environmental measurements are not personal data, except where a site is a private address — in which case it is treated as such.

Sharing

We do not sell data and we do not share it for advertising. Satellite imagery comes from the Copernicus programme and is public; nothing about your project is sent back to it.

Your rights

You may access, correct, export, delete or restrict your personal data, object to processing, and complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). Note that removing a person does not remove the measurements a project recorded — those belong to the project, and deleting them would destroy the evidence the project exists to keep.

Not a regulatory instrument

Naturecode reports whether a site's own measurements changed by more than that site's own measurement error. It is not an accredited environmental assessment and does not substitute for one where a regulator requires it.