Privacy Policy

Who Is Responsible for Your Data

Pedigree Agri App, based in Botswana, is the data controller for account administration, platform security, subscriptions, service communications, and product analytics. When a farm owner enters information about workers, customers, suppliers, or other people for the farm's own purposes, the farm owner determines that use and Pedigree provides the hosted processing service. Questions and rights requests can be sent to the contact address in section 11.

1. Information We Collect

We collect information that you provide directly and information generated automatically through your use of the app.

Account information

• Full name, email address, and phone number (provided during registration)
• Password (stored securely via Firebase Authentication; we never have access to plaintext passwords)
• User profile data and display name

Farm and operational data

• Farm name, location, type, size, and employee count
• Animal records, crop records, and inventory data
• Financial records, task logs, and compliance documentation
• Photos and media uploaded for farm records (e.g., animal images, crop photos)
• Reports and export history

Subscription and payment data

• Subscription plan, status, renewal date, and payment history for your farm
• Payment method (for example EFT, cash, or mobile money) and the payment reference you enter when you submit a payment for verification
• Pro-forma invoices and receipts generated for your farm

Payments are made outside the app to Pedigree directly and are verified manually by our team. We never collect or store your card number, bank account number, PIN, or any other payment credentials.

Automatically collected data

• Device information and app usage analytics (via Firebase Analytics)
• We do not collect the Android advertising ID. The permission that would allow it is removed from every build we ship, so your usage is never linked to an advertising profile
• Crash reports and performance data (via Firebase Crashlytics)
• Push notification tokens (via Firebase Cloud Messaging)
• Network connectivity status
• Aggregate interaction counts for partner spotlight messages shown in the app (how many times a message was viewed or marked as interesting)

2. How We Use Your Information

We use your information for the following purposes:

• Account management: To create and manage your account, authenticate your identity, and process password resets
• Farm operations: To enable you to record, manage, and track animals, crops, inventory, finances, tasks, and compliance across your farms
• Team collaboration: To facilitate farm invitations, role-based access control (owner, admin, manager, worker), and team member management
• Notifications: To send you push notifications about tasks, alerts, and important farm updates
• Analytics and reporting: To generate farm performance reports, analytics dashboards, and exportable documents
• App improvement: To analyze usage patterns, diagnose crashes, and improve app performance and features
• Offline sync: To enable offline data access and synchronize your records when connectivity is restored
• Subscriptions and billing: To activate and renew your farm's subscription, verify payments you submit, and issue invoices and receipts
• Partner spotlights: To show agricultural supplier and service messages inside the app and to count, in aggregate, how many users found a given message useful

Our lawful bases

• Contract: Account administration, farm operations, collaboration, subscriptions, support, and requested exports
• Legitimate interests: Service security, fraud prevention, essential diagnostics, and aggregate service improvement, after considering your rights
• Legal obligation: Records we must keep under accounting, tax, regulatory, or lawful authority requirements
• Consent: Optional notifications or any new use for which the law requires consent; consent may be withdrawn without affecting earlier lawful processing

3. Data Storage and Security

Your data is stored on Google Firebase infrastructure, including Cloud Firestore in Google's United States nam5 multi-region and Cloud Functions in us-central1. This means personal data is transferred and processed outside Botswana. Google provides encryption at rest and in transit. Specifically:

• Cloud Firestore: Stores your farm data, user profiles, and operational records with security rules that enforce role-based access
• Firebase Storage: Stores uploaded media files (photos, documents) with access rules tied to your farm membership
• Firebase Authentication: Manages your credentials using industry-standard security practices
• Offline persistence: A local copy may remain in the app's protected device storage for offline access. Signing out removes access but does not guarantee immediate erasure of the device cache; clearing app storage or uninstalling removes that local copy

We implement Firestore security rules and Cloud Functions to ensure that users can only access data belonging to farms they are members of, according to their assigned role.

4. Data Sharing

We do not sell your personal information. We may share data in these limited circumstances:

• Farm team members: Your name, email, and role are visible to other members of farms you belong to, as required for collaboration
• Service providers: We use Google Firebase and EmailJS to operate the app and send service emails (see Third-Party Services below)
• Partner spotlight advertisers: Advertisers see only aggregate counts of how many users viewed or expressed interest in their message. They do not receive your name, email, phone number, or farm data. Tapping through to an advertiser's website takes you to a third party governed by its own privacy policy
• Legal requirements: We may disclose information if required by law, regulation, or legal process
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

5. App Permissions

Pedigree requests the following permissions on your device:

• Internet access: Required to sync data with Firebase and operate the app
• Push notifications: Used to deliver task reminders, alerts, and farm updates. You can disable this in your device settings
• Camera and photo library: Used only when you choose to upload photos for animal records, crop documentation, or farm profiles

We do not access your contacts, location services, microphone, or any other device features beyond those listed above.

6. Third-Party Services

Pedigree uses the following third-party services operated by Google:

• Firebase Authentication: Manages user sign-in and registration
• Cloud Firestore: Stores and synchronizes app data
• Firebase Storage: Stores uploaded media files
• Firebase Cloud Messaging: Delivers push notifications
• Firebase Analytics: Collects usage statistics to help improve the app. We ship it with the advertising ID permission removed, so it cannot read or transmit your advertising ID
• Firebase Crashlytics: Collects crash reports and diagnostics
• Cloud Functions for Firebase: Executes server-side logic such as invitation handling and data aggregation
• EmailJS: Sends invitations, password-reset messages, subscription reminders, and receipts using the recipient's email address and the content required for that message

These services are governed by Google's Privacy Policy and Firebase Data Processing Terms. These international transfers are subject to Botswana's cross-border transfer requirements. You may contact us for information about the safeguards applicable to your data.

7. Data Retention

We retain your data for as long as your account is active and as needed to provide you with our services. Specifically:

• Account data: Retained while the account is active, then deleted when account deletion completes
• Farm data: Retained while the farm exists. Deleted records remain recoverable in the recycle bin for 30 days and are then automatically purged
• Payment and accounting records: Retained only for the period required by applicable accounting, tax, fraud-prevention, or dispute obligations; direct account identifiers are removed when the account is deleted unless the law requires otherwise
• Invitations and service logs: Reviewed and removed when no longer needed for access, security, or support
• Analytics data: Retained according to Firebase Analytics default retention policies (typically 14 months)
• Crash reports: Retained for 90 days

8. Your Rights

You have the following rights regarding your personal data:

• Access: You can access your personal data at any time through the app
• Correction: You can update your profile information, farm details, and records through the app
• Deletion: You can request deletion of your account and associated data by contacting us or using the in-app settings. See our Data Deletion Policy
• Export: You can export your farm data through the Reports feature in the app
• Withdraw consent: You can disable push notifications through your device settings and stop using the app at any time
• Restriction and objection: You may ask us to restrict processing or object where the applicable legal conditions are met
• Portability: You may request personal data you provided in a structured, commonly used format where this right applies
• Complaint: You may raise a concern with Botswana's Information and Data Protection Commission

9. Children's Privacy

Pedigree is designed for farm management professionals. A person must be at least 16 years old to create an account. We do not knowingly permit younger children to register. If we learn that an account was created by a child under 16 without valid parental authorisation, we will restrict and delete it as required.

10. Changes to This Policy

We may update this privacy policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we may notify you through the app or via email. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this privacy policy, your data, or wish to exercise your rights, please contact us:

• Controller: Pedigree Agri App, Botswana
• Privacy and rights email: kidandlambfarms@gmail.com
• Website: pedigreeapp.web.app