Privacy Policy — Fakataha

1. Who provides Fakataha

Fakataha is provided by Saifullah Ahad (“we”, “us”). Contact [email protected] or visit saifullah.ai.

2. What the app does

Fakataha lets smallholder farmers form a sealed crop pool, verify one another’s crop grades, receive whole-lot bids, and see a deterministic payout allocation. The app does not provide payment processing, lending, credit, insurance, logistics, weather forecasts, or price predictions.

3. Data we process

• Account and profile: an anonymous authentication identifier, farmer display name, general area, blocked-account list, and notification token. No phone number, email address, contacts, or precise location is requested.
• Crop pool activity: pool name and code, crop type, sealed commitment hash, opened quantity and grade claim, peer grades, bids and acceptance, delivery quantity, allocation results, status, timestamps, and abuse-prevention audit events.
• User content: crop-sack evidence photos you choose to capture, plus reports made about a photo. Photos should show crops only and must not include people or identifying documents.
• Security and recovery: a one-way verifier derived from your 12-word recovery phrase. The phrase itself and the commitment opening secret are encrypted on your device. The opening secret may also be stored as an encrypted backup that only the recovery phrase can open.
• Technical data: ordinary service logs such as request time, response status, and security signals needed to operate and protect the service. Fakataha contains no advertising or analytics SDK.

4. Permissions

Fakataha uses internet access to synchronize a pool. Notification permission is optional and is used for pool-stage updates. Crop photos are captured through the device’s camera app; Fakataha does not request continuous camera access. The app does not request contacts, microphone, storage, payment, or location permissions.

5. Why data is used

We use the data above to authenticate a farmer, synchronize a shared pool, hide sealed quantities until reveal, assign peer grading, calculate and display allocation results, deliver stage notifications, recover an account when requested, prevent duplicate or manipulated actions, respond to reports, and provide export or deletion controls.

6. Service providers and sharing

Data is processed by Google Firebase Authentication, Cloud Firestore, Firebase Cloud Messaging, and Firebase App Check; and by Cloudflare Workers and R2 object storage. These providers process data only to deliver the service and protect it. A buyer sees only the crop-pool bidding page and whole-lot information needed to submit a bid; buyers do not receive farmer contact details or private opening secrets.

We do not sell personal data, show targeted advertising, or share data with data brokers. We may disclose information when legally required or necessary to protect a person from serious harm.

7. Visibility and user-generated content

Farmers in the same pool can see pool status, disclosed quantities after reveal, peer-grading assignments, bids, delivery state, and allocation results. Assigned graders can see relevant crop evidence. Every displayed crop photo has report, child-safety-report, and block controls. A report immediately quarantines the photo from the pool while the crop process can continue.

See the separate Fakataha Child Safety Standards.

8. Retention and deletion

Account, pool, and evidence data is retained while needed to operate the active pool and preserve its settlement record. In Safety → Delete my account, deletion removes the authentication account, profile, private recovery record, notification data, and stored evidence photos. An existing shared-pool record keeps only a pseudonymized “Deleted farmer” entry and non-secret transaction facts needed so other members’ totals and audit trail remain correct. Reports or security records may be retained when necessary for safety, fraud prevention, or legal obligations.

9. Your choices

• Use Safety → Export my data for a readable copy of your profile and current pool record.
• Use Safety → Delete my account to delete your account and private data without contacting us.
• Revoke notifications in Android Settings at any time.
• Report or block crop-photo content from the Grade screen.
• Email [email protected] for a privacy request.

10. Security

Fakataha uses encrypted HTTPS transport, Firebase access rules, server-authoritative state changes, cryptographic commit-and-reveal records, Android Keystore encryption, an app lock, replay-resistant request identifiers, and access controls. No service can guarantee absolute security; keep the recovery phrase private and never place it in a crop photo.

11. Children

Fakataha is a business tool for farmers and is not directed to children under 13 (or the minimum digital-consent age in their country). We do not knowingly collect a child’s personal information. Child sexual abuse and exploitation is strictly prohibited. Report any concern through the photo controls or to our child-safety contact.

12. International processing

The service is global. Data may be processed outside your country where our providers operate, subject to their safeguards and applicable law.

13. Changes and contact

We may update this policy as the service changes. The current version and effective date will remain at this address. Questions or requests: Saifullah Ahad, Dhaka, Bangladesh; [email protected].