Privacy Policy for Shambah Assistant

Last updated: March 20, 2026

This Privacy Policy explains how Ycenter Shambah Solutions Limited collects, uses, stores, and protects your information when you use the Shambah Assistant Android application available on Google Play Store.

This policy applies only to Shambah Assistant and related account services. It does not apply to third-party apps or services because Shambah Assistant does not use third-party analytics SDKs, advertising SDKs, or social login providers.

1. Introduction and Scope

1. App name: Shambah Assistant (Android / Google Play Store).
2. Data controller/developer: Ycenter Shambah Solutions Limited.
3. Country of operation: Kenya.
4. Hosted policy URL: http://ai.ycenterssl.com/privacy-policy
5. Contact email for privacy requests: ycentersslbusiness@gmail.com

2. What Information We Collect and Why

We collect only the information required to run core app features.

1. National ID (used as your unique login identifier) to authenticate and identify your account.
2. Phone number and email address to contact you about account activity, support, and updates.
3. Location details (county, sub-county, ward) to support agricultural context, service delivery, and report association.
4. User designation (owner, agent, or farmer) to assign correct role permissions in the app.
5. Subscription/package information to manage access levels and paid plan features.
6. Authentication tokens are stored locally on your device to maintain secure sign-in sessions.

We use this data to:

1. Authenticate and identify users within the app.
2. Manage subscription plans and access levels.
3. Associate soil test reports with the correct farmer or agent.
4. Allow profile updates and account management.

App permissions and why they are needed:

1. USB device access is used only to communicate with external soil sensor hardware for soil analysis.
2. File system/storage access is used only to save generated PDF soil analysis reports to the device Downloads folder or another user-selected directory.

3. How We Store and Protect Your Data

1. Local device storage: authentication tokens and profile details are stored on your Android device using AsyncStorage.
2. Server storage: account and operational data are stored on our backend server at shambahassitant.ycenterssl.com.
3. We use reasonable technical and organizational safeguards to protect your data from unauthorized access, misuse, loss, or disclosure.
4. We keep data only as long as your account is active or as needed for legal and operational obligations, then delete or anonymize it when no longer required.

4. Data Sharing

1. We do not sell your personal data.
2. We do not share data with advertising providers, analytics providers, or social login providers.
3. We may share limited data when required by law, regulation, court order, or to protect legal rights and security.
4. Where service providers are used for secure infrastructure operations, they are required to process data only under our instructions and applicable data protection law.

5. Legal Basis and User Rights

We process your information based on contract performance, legal obligations, legitimate interests, and where required, your consent.

Under the GDPR and Kenya Data Protection Act 2019, you may request to:

1. Access personal data we hold about you.
2. Correct inaccurate or incomplete data.
3. Delete your data, subject to legal requirements.
4. Restrict or object to certain processing in appropriate circumstances.
5. Withdraw consent where processing is based on consent.

To exercise your rights, email ycentersslbusiness@gmail.com.

6. Account Deletion Process

1. You can request permanent account deletion through our request page: /account-deletion-request
2. You can also request deletion from the in-app option (if available) or by contacting an administrator.
3. If API submission is not available, you can send your deletion request by email to ycentersslbusiness@gmail.com.
4. We may retain limited records when legally required (for example, dispute handling, compliance, and fraud prevention).

7. Children's Privacy

Shambah Assistant is intended for adults and agricultural professionals. We do not knowingly collect personal data from children. If you believe a child has provided personal information, contact us immediately for review and removal.

8. Changes to This Policy

We may update this policy from time to time. When we make changes, we will update the Last updated date and publish the revised policy at http://ai.ycenterssl.com/privacy-policy.

9. Contact Information

1. Company: Ycenter Shambah Solutions Limited
2. Email: ycentersslbusiness@gmail.com
3. Privacy policy URL: http://ai.ycenterssl.com/privacy-policy
4. Plain text version: Download .txt