FarmWise Privacy Policy

FarmWise ("we", "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and the rights you have over your data.

By using FarmWise, you agree to the practices described in this policy. If you do not agree, you must not use the Service.

A. Account Data

When you create an account: name, email address, phone number, country, currency. This data is required to provide the Service.

B. Farm Data

Data you enter about your farm: animal records, vaccination schedules, health records, financial data, photos you upload. You own this data.

C. Usage Data

Anonymous data on how you use the Service: pages visited, events (symptom checker, article shares, searches), session duration. Collected via Google Analytics 4 and Microsoft Clarity.

D. Technical Data

IP address (anonymized), browser type, device type, operating system. Used for security and Service improvement.

We use your data to:

• Provide and maintain the Service (records, tasks, etc.)
• Improve existing features
• Develop new features based on usage
• Detect and prevent fraud, abuse, and illegal activities
• Send you important notifications (security, account)
• Respond to your support requests
• Comply with our legal obligations

We DO NOT use your data to: sell your information to third parties, send you spam marketing without consent, or share your farm records with other users without your permission.

We use cookies and similar technologies to:

• Maintain your session (essential cookie)
• Remember your preferred language (essential cookie)
• Measure Service usage (analytical cookie)
• Remember your cookie consent choice

Essential cookies are required for the Service to function. Analytical cookies are only set after your consent (consent banner).

We use the following third-party services. Each has its own privacy policy that we encourage you to review.

A. Supabase (database + authentication)

Hosts your account and farm data in a Postgres database. Policy: https://supabase.com/privacy

B. Vercel (web hosting)

Hosts the application code and serves pages to visitors. Policy: https://vercel.com/legal/privacy-policy

C. Google Analytics 4

Measures Service usage (page views, events, traffic sources). Sets cookies after consent. Data is aggregated and anonymized. Policy: https://policies.google.com/privacy

D. Microsoft Clarity

Records user sessions and generates heatmaps to understand usage. Cookieless — does not set cookies. Policy: https://privacy.microsoft.com/en-us/privacystatement

E. Google Search Console

Receives indexing and search data from Google. Does not set cookies on your site. Policy: https://policies.google.com/privacy

• Account data: kept until account deletion.
• Farm data: kept until account deletion.
• Usage data (GA4): kept for 14 months, then anonymized.
• Clarity recordings: kept for 3 months, then deleted.
• After account deletion: all data is erased within 30 days.

We take technical and organizational measures to protect your data:

• HTTPS/TLS encryption for all communications
• Passwords hashed with bcrypt (never stored in plaintext)
• HTTP-only cookie authentication (resistant to XSS)
• Daily automatic backups (Supabase/AWS)
• Offline mode — your data also stays on your phone
• Role-based permissions — a worker cannot see your finances

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we do our best.

You have the following rights regarding your data:

• Right of access: request a copy of all your data.
• Right to rectification: correct inaccurate data.
• Right to erasure: delete your account and all your data.
• Right to portability: export your data in CSV format.
• Right to object: object to processing of your data for marketing purposes.
• Right to withdraw consent: withdraw your consent for analytical cookies at any time.

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Your data is processed by:

• Supabase (AWS) — servers in the United States and Europe
• Vercel — global servers (closest to visitor)
• Google Analytics — servers in the United States (anonymized data)
• Microsoft Clarity — servers in the United States (pseudonymized data)

If you are in the European Economic Area (EEA), UK, or Switzerland, your data will only be transferred with appropriate safeguards (standard contractual clauses, adequacy decision).

The Service is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will delete it.

We may modify this Privacy Policy at any time. We will notify you of material changes by email or in-app notification at least 30 days before they take effect.

The "last updated" date at the top of this page indicates the latest revision.

For any questions about this Privacy Policy or your data, contact us at:

[email protected]

For official requests (GDPR, data subject rights):

FarmWise
Cameroon