Privacy Policy

Sùil, by Arbcura

Effective 11 August 2026

Sùil is a tool for arborists. It records trees, the properties they stand on, the risk assessments performed on them, and the evidence behind those assessments. This page explains what it holds, who else sees it, and what happens when you leave.

It is written so you can act on it. Where the honest answer is awkward, it is here rather than absent.

The short version

• We do not track you. We do not add an advertising identifier, analytics, crash reporting or cross-app tracking to Sùil. The Android app uses Google Play Services for AR when you start an AR feature; section 4 identifies that service.
• We hold no Social Security numbers, driver's licence numbers, card numbers or dates of birth. Card payments are handled by Stripe and never reach us.
• You can delete your account from inside the app. Signing in stops immediately, and your profile fields and the profile's links to your saved signature and photo are removed.
• Your completed assessments remain during the 30 day restore window. They keep your name and credentials on them during that period, then are deleted with the account. Section 5 explains how long they are kept while an account is live.
• You can export everything, at any time, in one file. Your professional records are yours to hold, and we would rather you had your own copy than relied on ours.
• Location is used to place a tree where you are standing. One feature, the drip-line walk, records the path you walk. Section 3 is honest about that.
• The installed app keeps working copies of unsynced field data on the device so you can work without service. They are excluded from operating-system backup and device transfer. Unsynced work is lost if the app or device is lost before it reaches us.

1. Who is responsible for what

Sùil holds two different kinds of data and they are not governed the same way.

Your account data. Your name, email, phone, company, professional credentials, profile photo and signature image. Arbcura decides what happens to this, so we are the controller and this page governs it.

Your clients' data. The names, addresses, phone numbers, property coordinates, photographs and notes you record about the people you work for. You decide what to collect and why. You are the controller and we are your processor. We hold it to provide Sùil to you and for nothing else.

That distinction matters if one of your clients asks what is held about them. The answer comes from you, not from us, and everything you need to answer it is in the app: you can find, edit, export and delete their record yourself.

2. What Sùil stores

• Your profile: name, email, phone, company, ISA credentials and their verification links, profile photo, signature image.
• Your clients: name or organisation, email, phone, postal address.
• Properties: address and coordinates.
• Trees: species, dimensions, condition, coordinates, photographs, notes.
• Assessments and reports: the TRAQ record, its findings, its photographs and the generated PDF.
• Appraisals: CTLA valuations.
• 3D captures: photographs and the models built from them.
• Scheduling and observations.
• Client portal links, which expire after 90 days.
• Administrative audit entries: account identifiers, the action taken and when it happened. Section 5 explains what survives account deletion.

Offline working copies. The installed app keeps drafts, queued record changes, selected photographs and captures on the current device so work can continue without service and uploads can retry. These copies stay through an app restart or ordinary app update, but are excluded from Android and iCloud backup and from device-to-device transfer. Sùil removes working copies when sync and cleanup no longer need them, and clears the account's copies after the server accepts account deletion. Uninstalling the app also removes them. If the device is lost or the app is removed before a copy syncs, that unsynced work is lost.

3. Location, said plainly

Sùil asks for location while you are using it. It is used to place a tree at your position and to show you where you are on a property map. It is not read when the app is closed: there is no background location permission in the app at all, so it cannot be.

One feature is different, and we would rather say so than have you find out. The drip-line walk estimates a crown by having you walk the edge of a canopy. While you do, Sùil records a sequence of your own positions with timestamps, and keeps it on the tree record as evidence of how the estimate was derived. That is a movement path. It is short, it covers one tree, you start it deliberately, and it is retained with the assessment. If you would rather not create one, do not use that feature; everything else in Sùil works without it.

The Android 3D capture and AR-assisted walk use Google Play Services for AR (ARCore) for camera motion and depth processing. You start those features deliberately. The photographs Sùil retains for a 3D capture are stored with the capture and handled as described in sections 2, 4 and 5.

4. Who else receives data

We do not sell personal data, share it with data brokers, or use it to build profiles. There is no advertising in Sùil.

Google Play Services for AR is provided by Google LLC and governed by the Google Privacy Policy.

Cloud copies are stored in the United States, in Google Cloud's us-central1 region. The offline working copies described in section 2 stay on the current device until Sùil removes them.

5. How long things are kept

Your account. Disabled and scrubbed when you ask, then deleted after the 30 day restore window. See section 7.

Your clients, properties and trees. Removed after the 30 day restore window, because closing the account is your instruction to us as your processor.

Completed assessments, their reports and the evidence behind them. While you hold an account, kept for twenty years past the end of the assessment's own time frame, with your name and credentials intact. When you close your account they go with you rather than staying with us. Section 6 explains that, and it is the part most worth reading before you leave.

Twenty years is a long time and the reason is specific. A tree risk assessment is an opinion that may have to defend the person who gave it, years after the client relationship ended. If a tree you rated fails and a claim follows, the assessment is the record that shows what you observed and concluded. The period is measured from the end of the window the assessment itself covers, so a five-year assessment is kept longer than a one-year one, and it is set to cover a claim brought by someone who was a child when the failure happened.

We keep them as a matter of practice, not as a promise. Your professional records remain yours to hold. Use the export in Settings to keep your own copy; we do not warrant that ours will always be available.

Deleted items stay restorable for 30 days, then stop appearing in Sùil.

Administrative audit entries. We keep the fact and time of an administrative or account-deletion action for security and accountability. When an account is removed permanently, its user id, recorded email and account-specific details are removed from matching entries. The remaining de-identified entries are kept without a fixed expiry as operational security and accountability records.

6. What happens to your assessments when you leave

By default, you take them with you and we keep nothing.

When you confirm deletion, Sùil builds a complete export and downloads it before the destructive action starts. If the export cannot be prepared and downloaded, the account is not deleted. Your assessments then remain available for the 30 day restore window and are deleted with the rest of the account.

We do it this way round deliberately. Your assessments are your professional work, not ours. Keeping every departed arborist's records indefinitely would make us the custodian of opinions we did not write and cannot stand behind, and would make us a place those records could be demanded from. Neither is a service to you.

Read this part before you close your account. If you leave without keeping the export, you will not have your assessments, and neither will we. If a claim about a tree you assessed arrives three years later, the record that would show what you observed and concluded is gone. That is the trade for us not holding your files, and we would rather you knew it now than found out then.

If you would rather we kept them, ask us before you close the account and we will explain what that involves. We keep an archive only for people who have asked us to, and only on terms we have agreed with them.

While you hold an account nothing here changes: assessments are kept for the period in section 5 and are available to you at any time.

7. Deleting your account

You can do it in the app, in Settings, without contacting anybody.

Immediately: signing in is disabled, refresh tokens are revoked, and server rules block the account from reading or writing data even if a previously issued token has not expired. Your profile record no longer contains your name, email, phone, company, reusable credentials, or links to your saved signature and profile photo.

For 30 days: the disabled authentication record keeps the account email so we can identify a restore request. Your remaining records, stored files and completed assessments stay in the disabled account, and assessment attribution remains intact. Write to security@arbcura.com from the address the account used. If restored, profile fields removed at the start must be entered again.

After 30 days: the account is removed permanently, along with your clients, properties, trees and completed assessments. Section 6 explains why we do not keep a copy.

If you cannot sign in, https://arbcura.com/suil/delete-account explains how to ask us to do it for you.

Export first. The export in Settings gives you everything in one file, and it is much easier to take before you go than to ask for afterwards.

8. Your rights

Depending on where you live you may have rights to access, correct, delete or export your data, and to object to how it is used.

For your own account data, write to security@arbcura.com, or use the export and delete controls in Settings, which do the same thing faster.

For data about one of your clients, they should ask the arborist who recorded it. We hold it on that arborist's behalf and they can act on it directly in the app. If a request reaches us first, we will pass it to them rather than act on it ourselves.

9. Security

Every record is tied to the account that created it, and the rules that enforce that run on the server rather than in the app. Data is encrypted in transit and at rest. Passwords are handled by Google Firebase Authentication and never reach us.

If you find a security problem, write to security@arbcura.com. We would much rather hear it from you.

10. Children

Sùil is a professional tool and is not directed at children. We do not knowingly collect data from anyone under 13.

11. Changes

If we change this page in a way that affects what we do with your data, we will tell you in the app before it takes effect. The effective date is at the top.

12. Contact

Arbcura Technology LLC 100 Newton Bridge Rd, Athens, GA 30607, United States security@arbcura.com