Privacy Policy

1. Information we collect

We collect information you provide, information created as you use kiliMoja, and limited technical information needed to operate and secure the service.

• Account and profile information: name, email address, phone number, account role, preferred language, county, sub-county, ward and profile details.
• Farm records: crops, animals, seasons, milk records, animal-health notes, expenses, sales and other records you choose to keep in kiliMoja.
• Doctor information: crop or livestock photographs, selected symptoms, descriptions, diagnostic results and feedback about whether guidance was helpful.
• Community and learning activity: posts, replies, uploaded photographs, event responses, livestream messages, reminders and other content you submit.
• Marketplace and payment information: listings, group-buy commitments, orders, seller or buyer details, payment phone number, transaction status and M-PESA receipt reference. kiliMoja does not ask for or store your M-PESA PIN.
• Device and usage information: IP address, browser or device type, app version, timestamps, security events, diagnostics and basic usage information produced by our service providers.
• Local app information: some drafts, queues and learning content may be stored on your device to support unreliable connections and offline use.

2. How we use information

We use information to:

• create and secure your account;
• provide farm records, crop and livestock guidance, learning, community, alerts and marketplace services;
• process orders and confirm payment status;
• personalise content by language, location, farm activity or interests;
• send reminders and service communications you request;
• moderate content, prevent fraud and protect users and the platform;
• analyse performance, troubleshoot errors and improve kiliMoja; and
• comply with applicable law and enforce our agreements.

We do not sell personal information. We do not use private farm records or diagnostic photographs to advertise another user's products to you without an appropriate legal basis or permission.

3. AI-assisted guidance

The Crop Doctor and Livestock Doctor may send the photograph, crop or animal type, symptoms and description you submit to an artificial-intelligence service through OpenRouter. The service uses that information to produce an assessment grounded in kiliMoja's agricultural knowledge base.

AI results can be incomplete or wrong. They are practical first steps, not a guaranteed diagnosis or a substitute for a qualified agronomist, veterinary professional or emergency service. Avoid including people, identification documents or unrelated personal information in diagnostic photographs.

4. When we share information

We disclose information only as needed to operate kiliMoja, complete a transaction, follow your instructions or meet legal and safety obligations. Recipients may include:

• Supabase for authentication, database, storage, realtime features and server functions;
• OpenRouter and its model providers for AI-assisted crop and livestock guidance;
• Backblaze for community image storage;
• YouTube/Google when you play embedded learning videos or livestreams;
• KCB and M-PESA participants when you initiate or complete a supported payment;
• sellers, buyers, group organisers, experts or organisations where that is necessary for a feature or transaction you request;
• professional advisers, authorities or other parties where required by law, to protect rights and safety, or in connection with a business reorganisation.

Community posts, replies and profile details you intentionally publish may be visible to other kiliMoja users. Do not publish information you want to keep private.

5. Storage and international transfers

kiliMoja and its service providers may process information on servers outside Kenya. Where information crosses borders, we use service providers and contractual or technical safeguards intended to protect it in accordance with applicable data-protection law. Some offline information remains on your device until it is synchronised or removed.

6. How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes described here. Account and farm information is generally retained while your account is active. We may retain transaction, payment, fraud-prevention, dispute or legal records for longer where reasonably required. Public content may remain visible until it is deleted or moderated, subject to backups and legal retention obligations.

7. Your choices and rights

Depending on applicable law, including Kenya's Data Protection Act, you may ask to access, correct, update, object to certain processing, restrict processing, receive a portable copy of, or delete your personal information. You may also withdraw consent where our processing relies on consent.

You can edit some profile information in kiliMoja. To make another privacy or account-deletion request, contact us using the details below. We may need to verify your identity. We may retain limited information where the law permits or requires it, including for completed transactions, fraud prevention, disputes and security.

You may also raise a concern with Kenya's Office of the Data Protection Commissioner.

8. Security

We use measures designed to protect information, including encrypted network connections, authentication, access controls and database row-level security. No internet service is completely secure, so we cannot guarantee absolute security. Keep your password and verification codes private and tell us if you suspect unauthorised account use.

9. Children

kiliMoja is intended for adults involved in farming and agricultural services. It is not directed to children under 18, and we do not knowingly collect personal information from a child without appropriate authorisation. Contact us if you believe a child has provided personal information improperly.

10. Changes to this policy

We may update this policy as kiliMoja changes. We will publish the revised policy here, update the date above and provide additional notice where a change materially affects your rights or how we use personal information.