MultiAccess Commerce Kit · Controller: Ashland Farm Enterprises LLC (“we,” “us”)
Effective date: [add date before publishing] · Contact: [privacy@yourdomain]

1. What we collect

• Account information (via Sign in with Apple): a stable Apple user identifier, and — only if you choose to share them on first sign-in — your name and an email address (which may be an Apple private-relay address). We never receive your Apple password, and we do not collect a phone number.
• Authentication data: sign-in events and security tokens needed to keep your account secure.
• Organization entitlements (optional): if you enter an organization join code, we record your membership in that organization’s library to show you the right content.
• Usage & diagnostics: basic app/event and crash/diagnostic data to keep the app working (collected only with your consent where required).
• We practice data minimization — we ask only for what the app needs to function.

2. What we do NOT do

• We do not sell your personal information.
• We do not use your data for third-party advertising.
• We do not collect data from sources other than you and your use of the app.

3. How we use it

• To create and secure your account (via Sign in with Apple).
• To deliver the content library you’re entitled to and keep it in sync when you refresh.
• To operate, maintain, troubleshoot, and improve the app.
• To comply with law.

4. Where it’s stored

Your data is stored on Google Cloud infrastructure (Firestore, Cloud Storage) in [region]. Data is encrypted in transit (TLS) and at rest.

5. Sharing

We share personal data only with service providers that run the app for us (e.g., Google Cloud/Firebase, and Apple’s Sign in with Apple), under terms that require equivalent protection; and with authorities where required by law. Organizations that grant you a private library can see that you are a member of their library, but not your personal account credentials.

6. Your choices & rights

• Delete your account and data at any time, inside the app (Account → Delete Account). You may also email us to request deletion.
• Withdraw consent for optional data collection in Settings.
• Depending on where you live (e.g., California/CCPA, EU/UK GDPR), you may have rights to access, correct, port, or delete your data.

7. Data retention

We keep account data while your account is active and delete it after account deletion, except where we must retain limited records to comply with law.

8. Children

The app is not directed to children under 13 (or under the age of digital consent in your region). We do not knowingly collect their data.

9. Security

We use TLS, encryption at rest, least-privilege access, and other measures. No method is 100% secure, but we work to protect your information.

10. Changes

We may update this policy; we’ll post the new effective date and, for material changes, notify you in-app.

11. Contact

[privacy@yourdomain] · Ashland Farm Enterprises LLC · [mailing address]