Effective date: May 19, 2026

Last updated: May 19, 2026

This Privacy Policy explains what data AgroNorm ("we," "us") collects when you use the AgroNorm mobile apps (Android and iOS) and the AgroNorm backend at agronorm-portal-5cab69404919.herokuapp.com, why we collect it, who we share it with, and what you can do about it.

1. Who runs AgroNorm

AgroNorm is operated by Kamagram, contactable at agronorm@kamagram.com.

2. What we collect

2.1 Account information (you give us)

When you sign up:

• Name (required)
• Email address (required, used as your login identifier)
• Password (stored hashed with bcrypt — we never see the plaintext)
• Phone number (optional)
• Location (optional — a free-text label like "Musanze, Northern Province")
• Preferred language (English, French, or Kinyarwanda)

2.2 Farm data (you give us)

When you use the app, you can:

• Draw your farm boundary on a map. We store: the polygon vertices (lat/lng pairs), the polygon's geometric center, and the computed area in square meters.
• Log farm activities ("planting", "harvest", "fertilizing", etc.). Each log has a date, an optional cash amount, free-text description and notes, and optionally its own sub-polygon for activity location.
• Attach photos to farm logs. Photos for farm logs are stored only on your device — they are never uploaded to our servers.
• Ask the AI assistant questions. Your questions, the AI's responses, and any photo you attach to a question are sent to our servers (see §2.4 and §4).

2.3 Device-side data (stays on your device)

The following data lives on your phone and is not transmitted to our servers:

• Photos attached to farm logs (stored under the app's private Documents/FarmLogs directory)
• Your chat history (we keep it locally so you can scroll back)
• Cached knowledge-base articles
• Your authentication token (encrypted at rest via iOS Keychain / Android EncryptedSharedPreferences)

2.4 AI assistant queries (sent to third parties)

When you ask the AI assistant a question, we send the following to OpenAI (or Anthropic Claude as a failover) over an encrypted HTTPS connection:

• Your question text
• The photo you attached, if any (base64-encoded in the request body)
• Your preferred language code
• A short summary of your last 10 farm logs and last 5 prior chat questions, so the AI can give answers specific to your farm
• Your farm size and center coordinates, if you've drawn a farm boundary

We do not send your email, password, phone number, or admin notes about your account to the AI providers.

OpenAI and Anthropic process these requests according to their own privacy and data-retention terms. As of this writing, both providers state they do not use API content for training their models.

2.5 Server-side records

On our backend (Postgres database hosted on Heroku) we keep:

• A row per farmer (the account fields in §2.1, plus your account status — pending, active, or suspended)
• A row per farm log you create (the fields in §2.2, without the photo)
• A row per AI interaction (your question text, the AI's response text, which provider answered, when, how many tokens it used, and the approximate cost in cents — used for billing and abuse monitoring)
• Standard web-server logs (IP address, timestamp, request path) retained for up to 30 days for security and debugging

2.6 Information we do not collect

• We do not use third-party advertising or analytics SDKs. There is no tracking pixel, no marketing attribution.
• We do not access your contacts, microphone, or background location.
• We do not collect your precise GPS location continuously — we ask for location permission only to center the map when you draw your farm boundary.

3. How we use your data

We do not sell your data. We do not share it with advertisers. We do not use it to train any AI model.

4. Third parties we share data with

The minimum necessary:

• OpenAI (api.openai.com) — receives your AI question, attached photo (if any), and the farm context described in §2.4.
• Anthropic (api.anthropic.com) — same, when our primary provider is unavailable.
• Heroku (heroku.com) — hosts our database and web servers.
• Apple and Google — distribute the app and provide push notification, crash-report, and operating-system services. We have not enabled crash reporting that includes user content as of the effective date above.

Each of these providers operates under its own privacy terms.

5. How long we keep it

6. Your rights

You can, at any time, by writing to agronorm@kamagram.com:

• Access the data we hold about you (we'll send you a JSON export)
• Correct any inaccurate data
• Delete your account and all associated farm logs and AI interactions
• Withdraw consent for AI features — log out and stop using the chat tab
• Object to specific processing — tell us which

You can also do most of this in the app:

• Edit or delete farm logs from the Farm Logs tab
• Clear chat history from Profile → Clear chat history
• Update your farm boundary from Profile → Mark my farm
• Log out from Profile → Log out

7. Account approval

New accounts are created in a pending state. An AgroNorm administrator reviews each signup before approving access. While your account is pending or suspended, you can still log in and view this policy and the pending screen, but you cannot log farm activity or chat with the AI. Approval is at our discretion; we may decline or suspend accounts that appear to be spam, fraudulent, or used outside the intended purpose.

8. Security

• All traffic between the apps and our servers is over HTTPS (TLS).
• Passwords are hashed with bcrypt before storage; we never store plaintext passwords.
• Authentication tokens (JWTs) are stored in encrypted device storage (iOS Keychain / Android EncryptedSharedPreferences) and expire after 24 hours. Logging out revokes the token server-side.
• Our database is hosted on Heroku Postgres with encryption at rest.

No system is perfectly secure. If we discover a breach affecting your data, we will notify you by email within 72 hours of confirming it.

9. Children

AgroNorm is intended for adult farmers (18+). If you believe a child has registered an account, please email agronorm@kamagram.com and we'll remove it.

10. International users

Our servers are operated by Heroku and are physically located in the United States. By using AgroNorm you consent to your data being processed in the US, with the safeguards described in this policy.

11. Changes to this policy

If we change this policy materially, we'll bump the Effective date at the top, post the new version in the app and on this URL, and notify approved farmers by email at least 14 days before the change takes effect.

12. Contact

Questions, requests, complaints:

Email: agronorm@kamagram.com

We aim to respond within 5 business days.

This document is written to be plain and accurate. It is not legal advice. If your jurisdiction has stricter requirements than what's described above, those requirements take precedence.

See also: AgroNorm Terms of Use