Privacy Policy

Last updated: April 12, 2026

This Privacy Policy explains how Codefarm Technologies Pvt Ltd ("we", "us", "our") collects, uses, stores, and shares your information when you use the Divisi app and website (collectively, the "Service"). It also describes your rights under applicable data protection laws, including South Africa's Protection of Personal Information Act (POPIA).

By using the Service you agree to this policy. If you do not agree, please stop using the Service.


What We Collect

Account information

When you register we collect:

  • Phone number — your primary login identifier (digits only, international format)
  • First name, middle name, last name
  • Email address (optional)
  • Date of birth and gender (optional, used for personalisation)
  • Profile picture (optional, stored securely in the cloud)
  • Country, timezone, preferred language and measurement units
  • A unique referral code generated for your account (for attribution tracking)
  • Clan or family totem (optional, used to personalise username suggestions)

Farm & field data

To provide crop advice and planning tools we collect:

  • Farm GPS coordinates (latitude/longitude) — used to fetch localised weather, determine your growing season, and generate crop recommendations
  • Farm name, physical address, size, soil type, and water source
  • Individual field boundaries and areas
  • Crops planted, planting dates, and current crop stages
  • Activity logs (e.g. planting, spraying, harvesting events you record)
  • Crop observations (pest sightings, disease notes, photos)

Social features (Hive)

When you use the Hive community feed we collect:

  • Posts, comments, and reactions you create (publicly visible to other users)
  • Follow/connection relationships
  • Block relationships (kept private)
  • Share link visit events (for attribution and analytics)

Device & usage data

  • Push notification tokens — your device token is stored with our notification service provider (Google LLC) to send you farming tips and alerts.
  • Analytics events — we use a self-hosted analytics service to track page views, feature usage, and in-app interactions. IP addresses are anonymised before storage — your raw IP is never saved.
  • Standard server log data: browser type, referring URL, and timestamps

Cookies

We use the following cookies:

  • Session cookie — keeps you logged in during your browser session
  • Security cookie — protects form submissions from cross-site attacks
  • Analytics cookie — distinguishes unique visitors across sessions so we can measure feature usage. You can opt out via your browser's cookie settings.

We do not use advertising cookies or sell your data to ad networks.


How We Use Your Information

  • Provide, operate, and improve the Service
  • Generate personalised crop recommendations, planting calendars, and farming tips
  • Fetch localised weather data for your farm using your GPS coordinates
  • Send push notifications, daily farming tips, and important account alerts
  • Enable social features (Hive feed, comments, follows)
  • Analyse usage trends to fix bugs and improve features
  • Detect fraud and enforce our Terms of Service
  • Comply with legal obligations

Who We Share Data With

Recipient Purpose Data shared
Cloud File Storage Provider File storage Profile pictures, farm media files
Meta / WhatsApp One-time passcode (OTP) delivery Phone number, message metadata
Push Notification Service (Google LLC) Push notifications Device push token, notification content
Weather Data Provider Localised weather forecasts Farm GPS coordinates
Analytics Service Provider Usage analytics Anonymised usage events (no PII)
Email Service Provider Transactional email Your email address and notification content
OpenStreetMap contributors Map tiles (in-app maps) Your IP address (standard web request)

We do not sell your personal information. We do not share your farm data with agricultural companies, insurers, or governments without your explicit consent.


How Long We Keep Your Data

  • Account data — retained while your account is active and for 3 years after deletion, unless a longer period is required by law
  • Farm and activity data — retained for the life of your account
  • Analytics data — anonymised; retained indefinitely
  • Server logs — retained for 90 days

Your Rights (POPIA)

Under South Africa's Protection of Personal Information Act (POPIA) you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your account and personal data (see below)
  • Object to the processing of your information for direct marketing
  • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at developers@codefarm.africa. We will respond within 30 days.

Deleting your account

You can delete your account from within the Divisi app (Settings → Account → Delete Account). This permanently removes your personal data and farm records. Some data may be retained in anonymised or aggregated form for analytics. Certain records may also be retained for legal compliance.

Accessing your data

You can view and edit most of your personal and farm data directly within the app. A full machine-readable data export feature is on our roadmap. Until then, email us at developers@codefarm.africa to request a copy of your data — we will provide it within 30 days.


Security & Authentication

We do not use passwords. Authentication is via a one-time passcode (OTP) delivered to your registered WhatsApp number. Authenticated sessions use secure tokens with per-device tracking — you can see and revoke active devices in your account settings.

We use encrypted connections (HTTPS), access controls, and hashed token identifiers. No system is 100% secure; in the event of a data breach we will notify affected users and the Information Regulator within the timeframes required by law.


Children

Divisi is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has registered, contact us and we will delete the account.


Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via the app or by email. The "last updated" date at the top of this page always reflects the current version. Continued use of the Service after changes constitutes acceptance.


Contact Us

For privacy questions, data access requests, or to exercise your POPIA rights:

Information Officer: developers@codefarm.africa (as required by POPIA s55)