Privacy Policy

Effective date: 14 June 2026 | Last updated: 14 June 2026

AfriCompliance ("we", "our") is operated by NANO AI Agency, Kenya. We are committed to protecting your personal data in accordance with the Kenya Data Protection Act 2019 (DPA) and applicable EU data protection law for users accessing our service from the EU.

1. What data we collect

• Phone number — used for account creation and OTP verification
• Farm name and location (GPS) — used to personalise your compliance records
• Spray, fertilizer and farm records — agricultural compliance data you enter
• KEPHIS registration number — optional, links to official farm records
• Readiness assessment answers — used to generate your compliance score

2. How we use your data

• To provide compliance checking, spray diary, and certification guidance services
• To generate compliance reports and certificates on your request
• To send harvest readiness alerts (if you opt in)
• We do NOT sell your data to third parties
• We do NOT share your data with buyers, packhouses, or certifiers without your consent

3. Data storage and security

Your data is stored in Neon PostgreSQL (US-East-1 region), encrypted at rest. All connections use TLS. Farm records are linked to your session token — no other user can access your farm data.

4. Your rights (Kenya DPA 2019)

• Right to access: Request a copy of all data we hold about you
• Right to correction: Request correction of inaccurate data
• Right to erasure: Request deletion of your account and all associated data
• Right to data portability: Download your farm records as CSV or PDF

To exercise any right: privacy@africompliance.com

5. Data retention

Farm records are retained for 3 years (matching GLOBALG.A.P. record-keeping requirement). Session data expires after 30 days of inactivity. You may request deletion at any time.

6. Contact

NANO AI Agency · Nairobi, Kenya · privacy@africompliance.com