Shambah Assistant Privacy Policy
Last updated: March 20, 2026

1. Introduction and Scope
- App: Shambah Assistant (Android, Google Play Store)
- Company/Data Controller: Ycenter Shambah Solutions Limited
- Country of operation: Kenya
- Privacy policy URL: http://ai.ycenterssl.com/privacy-policy
- Contact email: ycentersslbusiness@gmail.com

This policy explains how we collect, use, store, and protect personal data in the Shambah Assistant mobile app.

2. What Information We Collect and Why
We collect only what is needed to provide app services:
- National ID (used as unique login identifier)
- Phone number
- Email address
- Location details (county, sub-county, ward)
- User designation (owner, agent, or farmer)
- Subscription/package information
- Authentication tokens (stored locally on device)

We use this data to:
- Authenticate and identify users in the app
- Manage subscription plans and access levels
- Associate soil test reports with the correct farmer/agent
- Allow profile updates and account management

App permissions and why they are needed:
- USB device access: to communicate with external soil sensor hardware.
- File system/storage access: to save generated PDF soil analysis reports to the device Downloads folder or a user-selected directory.

3. How We Store and Protect Your Data
- Local storage: auth tokens and user profile are stored on your device via AsyncStorage.
- Server storage: account data is stored on shambahassitant.ycenterssl.com.
- Security: we apply reasonable technical and organizational safeguards to prevent unauthorized access, misuse, loss, or disclosure.
- Retention: we keep data while your account is active and for required legal/operational purposes, then delete or anonymize when no longer required.

4. Data Sharing
- We do not sell your personal data.
- No third-party advertising SDKs, analytics SDKs, or social login services are used.
- We may disclose limited data only when required by law or to protect legal rights/security.
- Infrastructure providers, where used, must process data under our instructions and applicable law.

5. Legal Basis and Your Rights (GDPR and Kenya Data Protection Act 2019)
We process data under legal bases including contract performance, legal obligation, legitimate interests, and consent where applicable.

You may request to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to certain processing where applicable
- Withdraw consent where processing depends on consent

To exercise these rights, email: ycentersslbusiness@gmail.com

6. Account Deletion Process
You can request permanent account deletion by:
- Using our deletion request page: /account-deletion-request
- Using in-app deletion option (where available)
- Contacting an administrator
- Emailing ycentersslbusiness@gmail.com

Some limited records may be retained where required by law (for example compliance, security, or dispute handling).

7. Children's Privacy
Shambah Assistant is intended for adults and agricultural professionals. We do not knowingly collect data from children.

8. Changes to This Policy
We may update this policy from time to time. Updates will be posted at:
http://ai.ycenterssl.com/privacy-policy

9. Contact Information
Ycenter Shambah Solutions Limited
Email: ycentersslbusiness@gmail.com
Privacy Policy URL: http://ai.ycenterssl.com/privacy-policy