Farmally
Farmally

Legal

Privacy Policy

Last updated: 21 July 2026

Owner review required.This policy is a working structure written to describe how the Farmally application handles data today. Fields tagged Owner review must be completed, verified or corrected by the operating business (legal entity, DPO contact, retention windows, subprocessors, jurisdiction) before public launch.

1. Who we are

Farmally is a phone-first farm operating system for Jamaican farmers. The service is operated by Legal entity name and registered address ("Farmally", "we", "us").

2. What data we collect

  • Account data: email address, phone number (when phone auth is enabled), full name.
  • Farm data: farm name, parish, farm types, batches, animals, crops, daily care logs, mortality, harvests, sales, expenses, inventory, customers, bills, tasks and notes that you enter.
  • Uploaded files: receipts, reports and animal / crop photos you upload. Stored in private buckets, served through signed URLs.
  • Technical data: browser type, device information and IP-derived approximate location for security and abuse prevention.

3. How we use it

  • To operate the app and provide the features you use.
  • To generate the AI recommendations and reports that you explicitly request, using only records for farms you have permission to see.
  • To secure your account and detect abuse.
  • To send transactional messages (verification, password reset, alerts you opted into).

4. Legal basis Owner review

The specific legal bases (contract, consent, legitimate interest, legal obligation) that Farmally relies on for each processing purpose must be reviewed and finalised by the operating business, in line with the Jamaican Data Protection Act, 2020 and any other law that applies to your jurisdiction.

5. Sharing and subprocessors

Farmally uses the following categories of subprocessors today:

  • Cloud hosting and database (Supabase / Lovable Cloud).
  • Weather data (Open-Meteo, no personal data shared).
  • AI provider for Farmally AI (Lovable AI Gateway), used only for records for farms you have permission to see.

A complete subprocessor list with legal entities, locations and transfer safeguards must be maintained by the operating business — Owner review.

6. Retention Owner review

Retention windows for account data, farm records, uploaded files and backups must be confirmed by the operating business. Today, data is kept for as long as your account is active and can be deleted on request.

7. Your rights

You can request access to, correction of, or deletion of your data at any time. Contact details are on the Support page.

8. Security

Farmally applies row-level security to every farm-owned table, stores uploaded files in private buckets served through signed URLs, and requires an authenticated session for privileged operations. No system is perfect — please report any suspected issue to security contact email.

9. Cookies

Farmally uses local storage for session tokens and user preferences (active farm, saved settings). We do not use third-party advertising cookies. A cookie banner will be added if local law requires one — Owner review.

10. Contact

Privacy questions: Data protection contact email. See the Support page for general help.

11. Changes

We'll update the "Last updated" date and, where meaningful, notify you inside the app.