Privacy Policy

Account information: Your phone number and, optionally, your name and email address when you register.

Farm data: Your county, the crops you grow, farm size, and soil analysis results (pH, nitrogen, phosphorus, potassium levels, health scores).

Diagnosis history: Photos you upload to Plant Doctor and the AI-generated diagnosis results. Photos are processed by Google Gemini AI and are not stored on our servers after analysis.

Chat history: Conversations with Shamba Mshauri (Ask Agronomist) are stored in your browser session only. They are not saved to our servers.

Usage data: Pages visited, features used, and general device information (browser type, screen size). We do not use third-party advertising trackers.

Session cookies: A single session cookie (shambaiq_session) keeps you logged in. It contains your name and a secure token — not your password.

To provide the service: Soil reports, fertilizer recommendations, and AI diagnosis require your county and crop data to be accurate and locally relevant.

To personalise your experience: Your farm profile lets Ask Agronomist answer questions without you having to repeat your location and crop every time.

To improve the platform: Aggregated, anonymous usage data helps us understand which features are most useful. We never sell individual data.

To contact you: We may send important service updates by SMS to your registered number. We will not send marketing messages without your explicit consent.

ShambaIQ uses Google Gemini AI to power Plant Doctor and Ask Agronomist. When you submit a photo or chat message, it is sent to Google's API for processing. Google's use of this data is governed by their privacy policy. We send only the minimum data needed — we do not send your phone number or personal identifiers to the AI.

Soil analysis recommendations are generated using satellite data and agronomic models — no personal data is shared with satellite data providers.

We do not sell your personal data to anyone.

We may share data with:

• Google (Gemini AI): For AI diagnosis and chat processing.
• Railway: Our cloud hosting provider, where your data is stored on servers in the European Union.
• Law enforcement: Only if required by a valid court order under Kenyan law.

Your account and farm data are kept for as long as your account is active. Soil reports and diagnosis history are kept indefinitely so you can track your farm's progress over time.

If you delete your account, all your personal data is permanently deleted within 30 days.

As a data subject under the DPA 2019, you have the right to:

• Access: Request a copy of all personal data we hold about you.
• Correction: Ask us to correct inaccurate data.
• Erasure: Ask us to delete your account and all associated data.
• Objection: Object to how we use your data.
• Portability: Request your farm data in a machine-readable format (CSV).

To exercise any of these rights, email us at info@shambaiq.com. We will respond within 21 days as required by the DPA 2019.

All data is transmitted over HTTPS. Passwords are never stored — we use phone-number-based OTP authentication. Your session token is cryptographically signed. Farm data is stored in a secured PostgreSQL database with access controls and regular backups.

If we become aware of a data breach that affects your personal data, we will notify you and the Office of the Data Protection Commissioner (ODPC) within 72 hours, as required by the DPA 2019.

ShambaIQ is intended for adult farmers. We do not knowingly collect data from anyone under 18. If you believe a child has registered, please contact us and we will delete the account immediately.

We may update this policy as the platform grows. We will notify registered users by SMS or email before any material changes take effect. The effective date at the top of this page will always show the latest version.

For privacy questions or data requests, contact us at info@shambaiq.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.