Last updated · January 15, 2025

Your Privacy
Matters to Us

At IcoFarm, we build tools that empower farmers and agribusinesses. This policy explains what data we collect, why we collect it, and exactly how we protect it. We believe in complete transparency.

0
Data sold to
third parties
256-bit
AES encryption
at rest & transit
30 days
Data deletion
on request

This Privacy Policy applies to IcoFarm ("we", "our", or "us"), including our mobile application, web platform, and all related services. By using IcoFarm, you agree to the collection and use of information as described in this policy.

If you have questions, contact us at privacy@icofarm.com.

01 — Collection
Information We Collect

We collect information you provide directly and information generated through your use of IcoFarm services. All collection is purposeful — we do not collect data we do not need.

Category Examples Purpose
Account Data Name, email, phone, password hash Authentication & account management
Farm Data Animal records, batch info, health logs, housing data Core farm management features
Usage Data Feature interactions, session duration, screen views Product improvement & analytics
Device Data OS version, device model, app version, crash logs Technical support & stability
Location Data Farm GPS coordinates (when permitted) Mapping & farm boundary features
Financial Data Transaction references, cost records Financial management features
🔒
Important Notice
We never collect payment card numbers, bank account credentials, or sensitive financial authentication data through IcoFarm.
02 — Usage
How We Use Your Information

Your data is used exclusively to operate, maintain, and improve the IcoFarm platform. We use a minimum-data principle — if we can accomplish a task with less data, we will.

  • Provide, operate, and maintain the IcoFarm platform and all its features
  • Process and display your farm, animal, poultry, and livestock records
  • Send transactional notifications such as alerts, health reminders, and reports
  • Analyse aggregated, anonymised usage patterns to improve product features
  • Respond to your customer support inquiries and troubleshoot technical issues
  • Detect, prevent, and investigate fraud, abuse, or security incidents
  • Comply with applicable laws, regulations, and legal obligations in Kenya and beyond
⚠️
What We Do NOT Do
We do not sell, rent, or trade your personal information or farm data to any third party for marketing or commercial purposes. Ever.
03 — Sharing
Data Sharing & Disclosure

We share your information only in the limited circumstances described below. In all cases, sharing is governed by data processing agreements that require the same standard of protection.

Recipient Reason Safeguard
Cloud Infrastructure
AWS / Azure
Hosting, storage, compute DPA, encryption, access controls
Analytics
Anonymised only
Product usage insights No PII transmitted
Support Tools Customer support ticketing DPA, role-based access
Legal Authorities Court order or legal obligation Minimum disclosure, user notification where lawful
04 — Security
Data Security

We implement industry-standard and beyond-standard security measures to protect your data at every layer of our infrastructure.

🔐
AES-256 Encryption
All data encrypted at rest and in transit using TLS 1.3.
🔑
Role-Based Access
Strict least-privilege access controls for all staff.
📋
Audit Logging
Every data access event is logged and monitored.
🛡️
Penetration Testing
Regular third-party security assessments conducted.
🔄
Backups
Automated daily backups with point-in-time recovery.
🚨
Breach Response
72-hour breach notification to affected users & authorities.

Despite our best efforts, no method of transmission over the Internet is 100% secure. If you believe your account has been compromised, contact us immediately at security@icofarm.com.

05 — Rights
Your Rights & Choices

You have meaningful control over your data. The following rights are available to all IcoFarm users, regardless of jurisdiction.

👁️
Right to Access
Request a copy of all personal data we hold about you.
✏️
Right to Rectify
Correct inaccurate or incomplete personal data.
🗑️
Right to Erasure
Request deletion of your data (subject to legal holds).
📦
Right to Portability
Export your data in a machine-readable format (JSON/CSV).
⏸️
Right to Restrict
Limit how we process your data in certain circumstances.
🚫
Right to Object
Object to processing based on legitimate interests.
📧
Exercising Your Rights
Submit a request to privacy@icofarm.com with subject "Data Rights Request". We respond within 30 days. Identity verification may be required.
06 — Retention
Data Retention

We retain your data only for as long as necessary to provide the service and comply with legal obligations.

Data TypeRetention PeriodBasis
Account DataDuration of account + 90 daysService provision
Farm & Animal RecordsDuration of account + 1 yearAgricultural compliance
Financial Records7 yearsTax / legal obligation
Usage Logs12 monthsSecurity & debugging
Support Tickets3 yearsDispute resolution
Deleted account data30 days (purge)Recovery window
07 — Cookies
Cookies & Tracking

The IcoFarm web platform uses cookies and similar technologies to maintain sessions and improve performance. Our mobile application does not use browser cookies.

Cookie TypePurposeDuration
EssentialAuthentication, session managementSession
PreferenceUI settings, language, theme1 year
AnalyticsAnonymous usage statistics6 months

You can control cookies through your browser settings. Disabling essential cookies will impair platform functionality.

08 — Children
Children's Privacy

IcoFarm is not directed at or intended for use by children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately and we will delete it promptly.

09 — International
International Data Transfers

IcoFarm operates primarily in East Africa. Your data may be processed in data centers located in Kenya, or other jurisdictions where our cloud providers operate. In all cases, we ensure adequate protections are in place through:

  • Standard contractual clauses with cloud providers
  • Compliance with Kenya's Data Protection Act, 2019
  • Alignment with GDPR principles for users in the EU
10 — Updates
Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Sending an email notification to your registered address
  • Displaying a prominent notice within the application
  • Updating the "Last Updated" date at the top of this page

Continued use of IcoFarm after the effective date of any changes constitutes acceptance of the updated policy.

11 — Contact Us

Questions About Your Privacy?

Our dedicated privacy team is here to help. Reach out through any of the channels below and we will respond within 2 business days.

📧
Email
privacy@icofarm.com
📍
Address
Nairobi, Kenya
⏱️
Response Time
Within 2 business days
IcoFarm
Privacy Policy v2.1.0 · January 15, 2025