1. Introduction
FarmGro ("we," "us," or "our") operates the FarmGro mobile application (the "App"), a farmer-to-table agricultural marketplace platform that enables farmers to manage orders, list produce, track mandi (market) prices, and coordinate drop-offs at Village Collection Points (VCPs).
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our App. By installing or using the App, you agree to the terms of this Privacy Policy.
2. Information We Collect
2.1 Personal Information You Provide
| Data Type | When Collected | Purpose |
|---|
| Phone Number | Registration (OTP login) | Account creation and identity verification via Firebase SMS OTP |
| Full Name | Profile setup | Display your identity on orders and to buyers |
| Village / Town | Profile setup | Match you with relevant VCPs and local buyers |
| District | Profile setup | Geographic categorization for produce listings |
| Profile Photo | Profile setup (camera/gallery) | Visual identification on orders |
| UPI ID | Bank/payment setup | Process payment settlements for sold produce |
| Language Preference | Onboarding | Display the App in your preferred language |
| Crop Selections | Onboarding & produce management | Build your produce catalog for buyers |
2.2 Information Collected Automatically
| Data Type | How Collected | Purpose |
|---|
| Device Location (GPS) | VCP drop-off verification | Confirm physical presence at designated collection point |
| FCM Token | Automatically on app launch | Deliver real-time push notifications for new orders |
| Device Info | Firebase services | Performance monitoring, crash diagnostics, security |
What We Do NOT Collect: We do not collect contacts, call logs, SMS content, browsing history, or audio/video recordings. We do not sell, rent, or trade your personal information.
3. Android Permissions
Each permission is used for a specific, disclosed purpose:
LOCATION
📍 ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION
Why: To verify your physical presence at Village Collection Points (VCPs) before completing a produce drop-off.
When: Only when you tap "Verify Location" on the VCP Drop-Off screen.
Storage: Coordinates are used for real-time distance calculation only and are not stored on our servers.
CAMERA
📷 CAMERA
Why: Profile photo capture during profile setup and onboarding.
When: Only when you explicitly tap the camera icon to upload or change your profile picture.
Storage: The selected profile photo is securely uploaded to Firebase Cloud Storage and is only used to identify your account.
NETWORK
🌐 INTERNET
Why: Required for authentication, syncing orders/produce, push notifications, mandi prices, and Firebase services.
When: Throughout app usage.
NOTIFICATIONS
🔔 POST_NOTIFICATIONS
Why: Real-time alerts for new customer orders, order status changes, and system announcements.
When: Permission requested on first launch (Android 13+). Can be disabled anytime.
DEVICE
📳 VIBRATE
Why: Haptic feedback for new order notifications, ensuring orders aren't missed in noisy farm environments.
DISPLAY
📲 USE_FULL_SCREEN_INTENT
Why: Display full-screen order alerts (like incoming call screens) when new orders arrive, even on locked screens.
SYSTEM
🔄 RECEIVE_BOOT_COMPLETED
Why: Restart the notification system after device reboot so you continue receiving order alerts.
OVERLAY
🪟 SYSTEM_ALERT_WINDOW
Why: Display urgent order alerts as overlay windows when the App is in the background, for time-critical orders.
4. How We Use Your Information
- Account Management — Phone-based OTP authentication.
- Order Processing — Displaying, accepting/rejecting, and tracking orders.
- Payment Settlement — Using your UPI ID for payment transfers.
- Produce Management — Maintaining your crop catalog.
- VCP Verification — GPS and QR-based drop-off confirmation.
- Market Information — Providing current mandi rates for your crops.
- Notifications — Real-time order alerts.
- Security — Firebase App Check and Play Integrity attestation.
- Improvement — Anonymized usage analysis for better features.
5. Data Storage & Security
| Service | Data Stored |
|---|
| Firebase Authentication | Phone number, user ID |
| Firebase Firestore | Profile, orders, produce, VCP data, payments, mandi prices |
| Firebase Cloud Storage | Profile photos, produce images |
| Firebase Cloud Messaging | Device FCM tokens |
Security Measures
- TLS/SSL encryption for all data in transit
- Firebase Security Rules restricting data access to authenticated users
- Firebase App Check with Play Integrity attestation
- AES-256 encrypted local storage via EncryptedSharedPreferences
- Root/tamper detection to prevent unauthorized access
- Native C++ security layer for critical integrity checks
- No cloud backups — Auto-backup is disabled
6. Third-Party Services
| Service | Purpose | Privacy Policy |
|---|
| Google Firebase | Auth, database, storage, messaging | Link |
| Google Maps SDK | VCP location display | Link |
| Google Play Services | Location, Play Integrity | Link |
7. Data Retention
| Data Type | Retention Period |
|---|
| Account Data (name, phone, village, photo) | While account is active. Deleted within 30 days of deletion request. |
| Order Records | 2 years (dispute resolution & audit) |
| Payment Records | 2 years (financial compliance) |
| Produce Listings | While account is active |
| GPS Coordinates | Not stored — real-time verification only |
8. Your Rights
- Access: View all your data within the App.
- Correction: Update your profile anytime in-app.
- Deletion & Account Removal: Request complete account deletion and data removal. You can request this in two ways:
- In-App: Go to Settings > Profile > Delete Account.
- Web-based Guide: Learn how to request account deletion in the app by visiting our dedicated account removal guide page at farmgro.co.in/account-deletion. You may also contact our support desk at support@farmgro.co.in for guidance.
All requests are processed and all personal and transactional database records are permanently deleted within 30 days.
- Withdraw Consent: Revoke permissions via device Settings at any time.
- Opt-Out: Disable notifications via Android Settings.
9. Children's Privacy
Our App is not intended for children under 18. It is a business tool for adult farmers. We do not knowingly collect data from children. If discovered, such data will be deleted immediately.
10. Data Sharing
We do NOT sell, rent, or trade your personal information.
Limited data may be shared only with:
- Buyers — Your name and produce info for order fulfillment.
- VCP Operators — Drop-off status and bag labels for logistics.
- Service Providers — Google Firebase (under data processing agreements).
- Legal Requirements — If required by law or regulation.
11. International Transfers
As we use Google Firebase, data may be processed outside India (including the US). Google complies with applicable data protection frameworks.
12. Changes to This Policy
We may update this policy periodically. Material changes will be communicated via the App or push notification. The "Last Updated" date will reflect the latest revision.
13. Contact Us
Questions or concerns? Contact us at:
Email: [support@farmgro.co.in]
Address: Ganesh Nagar 2, Kurnool,Andhra Pradesh,518002,India