1. Introduction
DairiQ ("we", "us", "our") operates the DairiQ dairy farm management platform. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our service. By creating an account and using DairiQ, you agree to the practices described in this policy.
2. Data We Collect
We collect the following types of data:
- Account data: Your name, email address, and password (encrypted). Used for authentication and communication.
- Farm data: Information you enter about your farm, animals, milk production, health records, breeding records, and finances. This is your data — you own it.
- Usage data: How you interact with the app (pages visited, features used, session duration). Used to improve the product.
- Payment data: Transaction records for subscription payments. We do not store full card numbers — payment processing is handled by our payment providers (Stripe, M-Pesa/Safaricom).
- Device data: Device type, browser, and approximate location (country-level). Used for security and compatibility.
3. How We Use Your Data
- To provide and maintain the DairiQ service — storing your farm records and making them accessible across devices.
- To provide AI-powered insights and daily briefings based on your farm data.
- To process subscription payments and manage your plan.
- To send you important notifications about your account, such as trial expiry or payment receipts.
- To improve our features, fix bugs, and develop new capabilities based on aggregate usage patterns.
- To detect and prevent fraud, abuse, and unauthorised access.
4. Data Sharing
We do not sell your personal data or farm data to anyone. We share data only in these circumstances:
- Service providers: We use Supabase (database hosting), and payment providers (Stripe, Safaricom M-Pesa). These providers process data on our behalf under strict data processing agreements.
- Organisation members: If you invite team members to your organisation, they can access farm data based on their assigned role.
- Legal compliance: If required by law, court order, or government regulation, we may disclose data to authorities. We will notify you unless legally prohibited.
5. Data Security
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production data is restricted to authorised engineers and is logged. We use row-level security in our database to ensure each organisation can only access its own data. Passwords are hashed using bcrypt. We undergo regular security reviews and never store full card numbers or M-Pesa PINs.
6. Data Retention
We retain your farm data for as long as your account is active. If you cancel your subscription, your data is preserved for 90 days in case you return. After 90 days of inactivity on a cancelled account, all farm data is permanently deleted. You can request immediate deletion at any time by contacting hello@dairiq.com. Audit logs are retained for 2 years for security and compliance.
7. Your Rights
- Access: You can view all your data through the app at any time.
- Export: You can export your farm data in CSV format from the Settings page.
- Correction: You can edit any of your farm data at any time.
- Deletion: You can delete individual records or your entire account. Account deletion is irreversible.
- Opt-out: You can opt out of non-essential communications (e.g. product updates) from Settings.
8. Offline Data
When you use DairiQ offline, data is stored locally on your device in an encrypted local database. This data is synced to our servers when you reconnect. If you uninstall the app before syncing, unsynced local data may be lost. We are not responsible for data loss on devices that was never synced to the cloud.
9. Children's Privacy
DairiQ is not intended for use by children under 16. We do not knowingly collect data from anyone under 16. If you believe a minor has created an account, please contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notification at least 30 days before they take effect. Continued use of DairiQ after the effective date constitutes acceptance of the updated policy.
11. Contact
Questions about this Privacy Policy? Contact us at privacy@dairiq.com or write to us at Ngong Lane Plaza, Ngong Road, Nairobi, Kenya.