Privacy Policy

1. Introduction

Farmojo ("the Service") is operated by Mubangizi Moses ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our farm management platform.

We are committed to protecting the privacy of smallholder farmers and their teams. We only collect data necessary to operate the Service and never sell your personal information to third parties.

2. Information We Collect

Account Information

• Name, email address, and phone number (provided during registration)
• Farm name and role (owner, partner, worker, or veterinarian)
• Account credentials (passwords are hashed and never stored in plain text)

Farm Data

• Livestock records (animals, breeding, health, weights)
• Crop records (plots, stages, harvests, sales)
• Task assignments and worker performance
• Financial transactions and purchase requests
• Chat messages and voice notes within your farm team
• Photos uploaded for AI analysis (crop/animal health)

Automatically Collected

• Device type and browser information
• IP address (used for rate limiting and security)
• Service usage patterns (pages visited, features used)

Payment Information

Payment details (mobile money numbers, card information) are processed directly by Flutterwave. We do not store your full payment credentials. We retain transaction references and amounts for billing records.

3. How We Use Your Information

• Operating the farm management platform and syncing data across your devices
• Providing AI-powered features (briefings, health analysis, market intelligence)
• Processing payments and managing subscriptions
• Sending service-related notifications (weekly plans, morning briefings)
• Protecting the security of your account and preventing abuse
• Improving the Service based on aggregated, anonymized usage patterns

4. AI Data Processing

When you use AI features, your farm data (context about crops, animals, finances) is sent to our AI provider (Groq) to generate responses. This includes:

• Chat messages when you mention @Farmojo
• Photos submitted for crop or animal health analysis
• Voice notes submitted for transcription
• Farm context data used to personalize AI responses

We do not send passwords, payment details, or authentication tokens to AI providers. AI providers process data according to their own privacy policies and do not use your data to train their models.

5. Data Storage and Security

Your data is stored using the following infrastructure:

• Database: Supabase (PostgreSQL) with row-level security policies ensuring users can only access their own farm's data
• File storage: Supabase Storage for photos, voice notes, and documents
• Hosting: Vercel with HTTPS encryption in transit
• Offline cache: IndexedDB on your device for offline access (data stays on your device)

We implement security measures including encrypted connections (TLS), row-level security, rate limiting, and regular security audits to protect your data.

6. Data Sharing

We share your data only in the following circumstances:

• Within your farm: Team members you invite can see shared farm data according to their role permissions
• Service providers: Supabase (database), Vercel (hosting), Groq (AI), Flutterwave (payments) — only as needed to operate the Service
• Legal requirements: If required by law, court order, or government request

We never sell your personal information or farm data to third parties.

7. Data Retention

• Active accounts: Data is retained for as long as your account is active
• Closed accounts: Data is retained for 30 days after account closure to allow export, then permanently deleted
• Payment records: Transaction records are retained for 7 years as required for tax and legal compliance

8. Your Rights

You have the right to:

• Access: Request a copy of all data we hold about you and your farm
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Download your farm data in a standard format
• Restriction: Request that we limit how we process your data

To exercise any of these rights, contact us at hello@mosematic.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us to have it removed.

10. Cookies and Local Storage

We use essential cookies for authentication session management. We use IndexedDB for offline data caching. We do not use tracking cookies or third-party analytics that track you across websites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the Service or email. The "last updated" date at the top of this page indicates the most recent revision.

12. Contact

For privacy questions or data requests, contact:

Mubangizi Moses
Email: hello@mosematic.com