Privacy notice

This notice explains what personal data MyFarmHub ("we", "us") collects, why, who we share it with, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, "DPDP law"). For DPDP law, we are the Data Fiduciary and you are the Data Principal.

1. Summary

• We collect only what is needed to run your farm journal.
• Your farm records are private to your account. We do not sell your data.
• We do not show ads and do not use advertising or tracking cookies.
• Voice, photos and questions you choose to send to AI features are processed by our AI service provider only to answer that request.
• You can download your data or delete your account at any time from Settings, Privacy and your data.

2. Personal data we collect and why

We process each item below only for the purpose listed next to it.

• Account details (email address, mobile number, password stored only as a secure hash, and your name and email from Google or Facebook if you sign in with them): to create your account, sign you in, keep it secure and contact you about it.
• Profile (display name, language, time zone): to show the app in your language and to date your records correctly.
• Farm records (farm name, location and area, plots, crops, activities, inputs, stock, expenses, harvests, sales, tasks and notes): to provide the journal, summaries and reports you ask for.
• Voice recordings and transcripts: to turn what you say into a draft record. The recording is deleted once it has been transcribed. The transcript is kept with the record so you can check it later.
• Photos and AI observations: to store photos of your crops and, when you ask, to describe what the AI sees in them.
• Assistant questions: to answer questions about your own records. We use your question and the relevant records to answer it.
• Usage counts (how many AI requests you made and when): to apply plan limits and prevent abuse.
• Technical data (IP address, device and browser type, security logs, sign-in cookies): to keep the service running and secure. See the cookie policy.
• Your consent record (which version of this notice you accepted and when): to prove your consent, as DPDP law requires.

We do not knowingly collect sensitive data such as health, caste, religion or financial account numbers. Please do not enter them in free-text notes.

3. Legal basis

We process your personal data on the basis of your consent, which you give when you first open the app by ticking the consent box, and for the legitimate uses allowed by section 7 of the DPDP Act (for example, to comply with law or a court order). Giving consent is voluntary, but we cannot provide the service without the data listed above.

4. Who we share it with

We never sell or rent your personal data. We share it only with service providers (Data Processors) that process it on our instructions, under contract, to run MyFarmHub:

• Supabase: database, sign-in and file storage.
• OpenAI: speech to text, turning your words into draft records, photo analysis and assistant answers. Data sent through the OpenAI API is not used by OpenAI to train its models under its API terms.
• Our hosting provider: to run the website and app servers.
• SMS provider: to send one-time sign-in codes to your phone.
• Google or Facebook: only if you choose to sign in with them.

We may also disclose data where law requires it, for example to a court, a government authority or the Data Protection Board of India.

5. Transfers outside India

Some of our service providers store or process data outside India. We transfer data only to countries not restricted by the Central Government under section 16 of the DPDP Act, and only to providers bound by security and confidentiality obligations.

6. How long we keep it

• Account, profile and farm records: while your account is active.
• Voice recordings: deleted once transcribed.
• When you delete your account, we erase your account, profile, farm records, photos and usage counts straight away.
• Security and access logs are kept for one year, as the DPDP Rules 2025 require, then deleted.
• Backups held by our providers are overwritten within their normal cycle.

7. Security

We protect your data with reasonable security safeguards, including encryption in transit (HTTPS) and at rest, access controls that keep each account's records separate, private file storage, access logging and regular backups. If a personal data breach happens, we will inform affected users and the Data Protection Board of India as DPDP law requires, with what happened, the likely impact and what you can do.

8. Your rights

Under DPDP law you have the right to:

• Access: get a summary of your personal data and how we process it. Download a copy any time from Settings, Privacy and your data.
• Correction and completion: edit your profile and records in the app, or ask us to correct them.
• Erasure: delete your account and all your data from Settings, Privacy and your data.
• Withdraw consent: as easily as you gave it. Deleting your account withdraws your consent and stops all processing. Withdrawal does not affect processing done before it.
• Grievance redressal: complain to our Grievance Officer (below).
• Nominate: name a person to exercise your rights if you die or become unable to. Email us with their name and contact details.

We will answer requests and grievances within 30 days, and never later than the 90 days allowed by the DPDP Rules 2025. We may ask you to confirm your identity first.

9. Children

MyFarmHub is for people aged 18 and over. We do not knowingly process personal data of children, and we do not track, monitor or target advertising at children. If you believe a child has made an account, contact us and we will delete it.

10. Grievance Officer and contact

Grievance Officer, MyFarmHub
Email: grievance@myfarmhub.in
Other privacy questions: privacy@myfarmhub.in

If you are not satisfied with our answer, you may complain to the Data Protection Board of India. DPDP law asks you to use our grievance process first.

11. Changes to this notice

If we change this notice in a way that matters, we will show you the new version in the app and ask for your consent again before continuing.