Privacy Policy
This privacy statements explains the Information PoultryTap collects, processes it, why, and what you can do about it.
Last updated: August 23, 2026
1. What we collect
1.1 Information about you
| What | Why we have it |
|---|---|
| Name, email address, phone number, avatar | Your account and how we contact you |
| Username (staff accounts) | How staff sign in |
| Password | Stored only as a cryptographic hash, never in readable form |
| Two-factor secrets and backup codes | Encrypted or hashed, so a second factor can be checked |
| Business name, farm names, location and currency | Setting up your workspace |
If you sign in with Google, Google gives us your email address and name. We never see your Google password.
1.2 Information you record about other people
PoultryTap is built to hold records about your customers, suppliers and staff: names, phone numbers, email addresses, delivery addresses and notes you write yourself.
This is your data about your people. We store and process it on your instructions and for no other purpose. See section 7.
1.3 Your farm records
Flocks, production, feed, treatments, weights, sales, expenses, suppliers and customers. Business information rather than personal information, but it is yours and it is treated with the same care.
1.4 Technical information
| What | Why |
|---|---|
| Device model and platform | Sent with each request so we can support and debug across devices |
| Notification token | Delivering push notifications to your device |
| A random device identifier | Remembering a trusted device so you are not asked for a second factor every time |
| IP address and request timestamps | Security and abuse prevention, held in server logs |
| Purchase and subscription identifiers | Knowing which plan you are on |
| Crash and error reports | Fixing what breaks |
1.5 What we do not collect
No location. No camera or photo access. No contacts. No microphone. No file uploads. No advertising identifiers. No analytics or product tracking software of any kind. PoultryTap does not profile you and makes no automated decisions about you.
2. Why we are allowed to use it, under UK and EU law
| What we do | Lawful basis |
|---|---|
| Running your account and the service you signed up for | Performance of a contract |
| Taking payment and managing subscriptions | Performance of a contract |
| Keeping accounts secure, blocking abuse, fixing crashes | Our legitimate interests in a safe, working service |
| Sending push notifications about your farms | Performance of a contract, and your device-level consent |
| Keeping invoices and payment records | Legal obligation under Kenyan tax law |
| Holding records about your customers, suppliers and staff | We act on your instructions as your processor. You decide the basis |
We do not rely on consent for anything except device notification permission, which you can withdraw at any time in your device settings.
3. Who else sees it
We do not sell personal information and we do not share it for advertising. We use these providers:
| Provider | What they receive | Why |
|---|---|---|
| Google Firebase Cloud Messaging | Your notification token and the message content | Delivering push notifications |
| Google Sign-In | The fact that you signed in | Confirming your identity, only if you use it |
| Sentry | Crash and error reports, with account identifiers and request contents filtered out before sending | Diagnosing faults |
| RevenueCat | Your Business identifier and purchase information | Managing subscriptions |
| Apple App Store, Google Play | Your payment details, which go to them and never to us | Taking payment |
We may also disclose information where the law requires it, to protect our rights or someone's safety, or to a buyer if our business is sold. We will tell you before a business transfer moves your data, unless the law stops us.
4. Where your data is held
Our servers are hosted outside the United Kingdom and the European Economic Area. Kenya has no adequacy decision from the UK or the EU, so where we move personal information out of those regions we rely on the Standard Contractual Clauses approved by the European Commission and the UK addendum to them.
You can ask us for a copy of the safeguards in place by writing to [email protected].
Some of our providers, including Google and Sentry, process data in other countries under their own transfer arrangements.
5. How long we keep it
| What | How long |
|---|---|
| Your account and Business data | Until you delete it. Deletion is scheduled 30 days ahead and is reversible by signing in during that window |
| Backups | Up to 30 days after deletion, then they age out |
| Invoices and payment records | 5 years, required by Kenyan tax law |
| Sessions | 30 days, or until you sign out |
| Trusted device memory | 60 days on the web |
| Data export archives | The download link works for 24 hours |
| Server and security logs | 90 days, then deleted |
6. Your rights
Wherever you live, you can:
- see what we hold about you
- correct it, from your profile or by asking us
- export it, using Data Export in My Account, which gives you an archive of everything your Business holds in a portable format
- delete your account, from My Account, if you are an account owner
If you are a staff member, your account was created by your account owner and they control it. Ask them first, and come to us if they cannot help.
Complaints. Tell us first at [email protected] and we will try to put it right.
7. When the data is about your customers, suppliers and staff
For the records you enter about other people, you are the controller and we are your processor. In plain terms: you decide what to collect and why, and we only do what you tell us with it.
That means it is on you to have a lawful reason to hold those records, to tell those people what you are doing, and to answer them if they ask to see or delete their record. You can do that yourself in the app, and our Data Processing Agreement sets out the rest of the arrangement, including our duty to help you.
8. How we protect it
- Keeping your personal information safe is very important to us. We follow accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it.
- You authorise us to transfer, store, and process your personal information in Kenya and possibly other countries. When we store information overseas or when we use a third party to store information overseas, we will ensure that the third party complies with Kenyan privacy obligations.
9. Children
PoultryTap is for business use by adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, write to [email protected] and we will safely remove it.
10. Changes
We may update this policy. If a change matters to you we will tell you in the app or by email before it takes effect.
11. Contact
PoultryTap
Nairobi, Kenya
[email protected]