1. Who we are
FarmIQ is operated by AppCross Company Limited, a private limited company registered in Kenya (Company No. PVT-5JUZ2J2D), P.O. Box 25216, G.P.O Nairobi, Kenya. We are the data controller for personal data processed through FarmIQ under the Kenya Data Protection Act, 2019. Contact: info@farmiq.solutions. This policy should be read with our Terms of Service.
2. What we collect
Account details
- Your name, email address and (optionally) phone number, your language and theme preference, and the time you accepted our Terms and Privacy Policy.
Farm details and records
- Your farm's name, county and location (and the coordinates we derive from it), plus the records you or your team enter: blocks and plot boundaries, herd and health records, milk, feeding, crops, inventory, tasks and finance.
- Details of team members you invite (name, email, role) and their activity in the app.
Scores and predictions
- Milk-yield predictions and the farm credit score, which we calculate from your records.
Notifications and devices
- Your notification preferences; a WhatsApp number if you turn WhatsApp notifications on; and a device push subscription if you allow browser or device notifications.
Technical data
- Session, security, theme and language cookies, and standard server logs (such as IP address and browser type) used to keep the Service secure and working.
3. How and why we use it
- To provide the Service (contract): create and secure your account, send one-time login codes, store and display your farm records, produce predictions, reports, weather and advisories, and send the notifications you choose.
- With your consent: sharing your farm's credit score and related data with a specific lender or partner, and WhatsApp and device notifications. You can withdraw consent at any time.
- Legitimate interests: keeping the Service safe, preventing abuse, fixing bugs, improving features, and sending you service and product-update emails.
- Legal obligations: where the law requires us to keep or disclose information.
We do not sell your personal data, and we do not use it for advertising.
4. Who we share it with
We use service providers ("processors") who handle data only on our instructions:
- Hosting and database: Vercel (application hosting) and Neon (managed Postgres database).
- Email: Resend (with ZeptoMail by Zoho as a backup provider), to send login codes, welcome messages and reports.
- Media storage: Amazon Web Services (S3), for uploaded files.
- WhatsApp: Meta's WhatsApp Cloud API, only if you enable WhatsApp notifications (your number and the message are sent to Meta).
- Weather and location lookup: Open-Meteo, which receives your farm's location text or coordinates to return coordinates and forecasts, without your name or contact details.
- Blockchain: the Hedera public network, which receives cryptographic hashes of predictions and limited public token details (cow tag ID, breed, farm name; harvest crop, quantity, date and farm name). Public blockchain entries cannot be edited or deleted.
- Lenders and data partners: only those you have expressly authorised, and only what that partner's access allows. You can revoke access in the app at any time.
Pages you view load fonts and scripts from third-party content networks (for example Google Fonts, the Tailwind CDN and unpkg), which can see your IP address and browser details when they do. We may also disclose information where required by law or to protect rights and safety, or to a successor if the business is transferred, with the same protections.
5. Transfers outside Kenya
Some of our providers process data outside Kenya. Where personal data is transferred abroad we rely on the safeguards allowed by the Data Protection Act, 2019, such as contractual protections with the provider, or your consent.
6. How long we keep it
- Account and farm records are kept while your account is active.
- One-time login codes are kept only briefly.
- When you delete your account we delete your personal data and, for a farm you own, that farm's records, subject to short backup cycles and anything we must keep by law. Records already written to a public blockchain cannot be removed.
- A record of data-sharing consents you gave or revoked may be kept so there is an audit trail.
7. Your rights
Under the Data Protection Act, 2019 you have the right to be informed about how your data is used, to access it, to object to processing, to have inaccurate data corrected, to have data deleted, to receive your data in a portable format, and to withdraw consent. You can edit your details and notification preferences and delete your account in Settings, and export records from the app. For anything else, email info@farmiq.solutions. We will respond within the time the law allows.
If you are unhappy with how we handle your data you can complain to the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke).
8. Security
We use passwordless sign-in with one-time codes, encrypted connections (HTTPS), role-based access so people only see what their role needs, and per-farm data separation. No system is perfectly secure. If a breach is likely to harm you, we will notify you and the regulator as the law requires.
9. Cookies and local storage
We use only essential cookies and similar storage: to keep you signed in, protect forms from forgery (CSRF), and remember your theme and language. The app's service worker stores the app icons and an offline page on your device so it can open without a connection. We do not currently use advertising cookies or third-party analytics.
10. Children
FarmIQ is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy. When we make a material change we will update the version shown above and notify you in the app or by email.
12. Contact
AppCross Company Limited (FarmIQ), P.O. Box 25216, G.P.O Nairobi, Kenya · info@farmiq.solutions