Divisi
This Privacy Policy explains how Codefarm Technologies Pvt Ltd ("we", "us", "our") collects, uses, stores, and shares your information when you use the Divisi app and website (collectively, the "Service"). It also describes your rights under applicable data protection laws, including South Africa's Protection of Personal Information Act (POPIA).
By using the Service you agree to this policy. If you do not agree, please stop using the Service.
What We Collect
Account information
When you register we collect:
- Phone number — your primary login identifier (digits only, international format)
- First name, middle name, last name
- Email address (optional)
- Date of birth and gender (optional, used for personalisation)
- Profile picture (optional, stored securely in the cloud)
- Country, timezone, preferred language and measurement units
- A unique referral code generated for your account (for attribution tracking)
- Clan or family totem (optional, used to personalise username suggestions)
Farm & field data
To provide crop advice and planning tools we collect:
- Farm GPS coordinates (latitude/longitude) — used to fetch localised weather, determine your growing season, and generate crop recommendations
- Farm name, physical address, size, soil type, and water source
- Individual field boundaries and areas
- Crops planted, planting dates, and current crop stages
- Activity logs (e.g. planting, spraying, harvesting events you record)
- Crop observations (pest sightings, disease notes, photos)
AI chatbot (Taurai) conversations
When you interact with our WhatsApp chatbot, Taurai:
- Your messages and the chatbot's replies are stored in our database
- Message content is processed by our AI inference service to generate responses. That service may use third-party language models. Our AI Disclaimer has more detail.
- If you share your location via WhatsApp, that GPS point is used to improve recommendations
- Taurai is an AI assistant, not a human agronomist
WhatsApp messages
Our chatbot is delivered via WhatsApp (Meta Platforms, Inc.). When you message Taurai on WhatsApp, Meta processes your phone number and message metadata in accordance with WhatsApp's Privacy Policy. We receive and store your message content to operate the chatbot.
Social features (Hive)
When you use the Hive community feed we collect:
- Posts, comments, and reactions you create (publicly visible to other users)
- Follow/connection relationships
- Block relationships (kept private)
- Share link visit events (for attribution and analytics)
Device & usage data
- Push notification tokens — your device token is stored with our notification service provider (Google LLC) to send you farming tips and alerts.
- Analytics events — we use a self-hosted analytics service to track page views, feature usage, and in-app interactions. IP addresses are anonymised before storage — your raw IP is never saved.
- Standard server log data: browser type, referring URL, and timestamps
Cookies
We use the following cookies:
- Session cookie — keeps you logged in during your browser session
- Security cookie — protects form submissions from cross-site attacks
- Analytics cookie — distinguishes unique visitors across sessions so we can measure feature usage. You can opt out via your browser's cookie settings.
We do not use advertising cookies or sell your data to ad networks.
How We Use Your Information
- Provide, operate, and improve the Service
- Generate personalised crop recommendations, planting calendars, and farming tips
- Fetch localised weather data for your farm using your GPS coordinates
- Operate the Taurai AI chatbot and generate responses via our AI inference service
- Send push notifications, daily farming tips, and important account alerts
- Enable social features (Hive feed, comments, follows)
- Analyse usage trends to fix bugs and improve features
- Detect fraud and enforce our Terms of Service
- Comply with legal obligations
Who We Share Data With
| Recipient | Purpose | Data shared |
|---|---|---|
| Cloud File Storage Provider | File storage | Profile pictures, farm media files |
| AI Inference Service | AI response generation | Chatbot message content (no name or phone number) |
| Meta / WhatsApp | Chatbot message delivery | Phone number, message metadata |
| Push Notification Service (Google LLC) | Push notifications | Device push token, notification content |
| Weather Data Provider | Localised weather forecasts | Farm GPS coordinates |
| Analytics Service Provider | Usage analytics | Anonymised usage events (no PII) |
| Email Service Provider | Transactional email | Your email address and notification content |
| OpenStreetMap contributors | Map tiles (in-app maps) | Your IP address (standard web request) |
We do not sell your personal information. We do not share your farm data with agricultural companies, insurers, or governments without your explicit consent.
AI-Generated Content & Advice
The Taurai chatbot and our editorial content use AI language models to generate farming advice, crop recommendations, and agricultural information. This content is for informational purposes only and is not a substitute for professional agronomist advice. Farming outcomes depend on many local factors that AI cannot fully account for. Always consult a qualified agronomist or extension officer before making significant farming decisions.
How Long We Keep Your Data
- Account data — retained while your account is active and for 3 years after deletion, unless a longer period is required by law
- Farm and activity data — retained for the life of your account
- Chatbot conversation history — retained for 12 months, then deleted
- Analytics data — anonymised; retained indefinitely
- Server logs — retained for 90 days
Your Rights (POPIA)
Under South Africa's Protection of Personal Information Act (POPIA) you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your account and personal data (see below)
- Object to the processing of your information for direct marketing
- Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, email us at developers@codefarm.africa. We will respond within 30 days.
Deleting your account
You can delete your account from within the Divisi app (Settings → Account → Delete Account). This permanently removes your personal data, farm records, and chatbot history. Some data may be retained in anonymised or aggregated form for analytics. Certain records may also be retained for legal compliance.
Accessing your data
You can view and edit most of your personal and farm data directly within the app. A full machine-readable data export feature is on our roadmap. Until then, email us at developers@codefarm.africa to request a copy of your data — we will provide it within 30 days.
Security & Authentication
We do not use passwords. Authentication is via a one-time passcode (OTP) delivered to your registered WhatsApp number. Authenticated sessions use secure tokens with per-device tracking — you can see and revoke active devices in your account settings.
We use encrypted connections (HTTPS), access controls, and hashed token identifiers. No system is 100% secure; in the event of a data breach we will notify affected users and the Information Regulator within the timeframes required by law.
Children
Divisi is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has registered, contact us and we will delete the account.
Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via the app or by email. The "last updated" date at the top of this page always reflects the current version. Continued use of the Service after changes constitutes acceptance.
Contact Us
For privacy questions, data access requests, or to exercise your POPIA rights:
- Email: developers@codefarm.africa
- Post: Codefarm Technologies Pvt Ltd, 26 Derrick Drive, Somerset West, Cape Town, 7130, South Africa
- Or use our contact form
Information Officer: developers@codefarm.africa (as required by POPIA s55)