Privacy Policy for KashCrop

Last Updated: December 26, 2025

KashCrop ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your information is collected, used, and disclosed by KashCrop.

1. Information We Collect

A. Account Information

When you create an account, we collect your phone number for authentication purposes. We use Firebase Authentication to send you a one-time password (OTP) for secure login. Your phone number is used solely for account verification and is not shared with third parties for marketing purposes.

B. Camera and Images

Our app requests access to your device's camera. We use this to:

• Capture images of apple leaves and fruit for AI-powered disease diagnosis
• Upload marketplace listing photos

For disease diagnosis, images are processed by Google's Gemini AI service and are not permanently stored. Marketplace images are stored on Google Cloud Storage and are publicly visible as part of your listing.

C. Location Data

We collect your device's location (GPS) to provide:

• Accurate, hyper-local weather forecasts for your specific orchard
• AI-generated farming insights based on your region

This data is not shared with third-party advertising networks.

D. Financial Data (Khata)

Our "Khata" digital ledger feature allows you to record sales and expenses. If you are logged in, this data is synced to our secure cloud servers (Cloudflare D1) to provide backup and multi-device access. If you use the app without logging in, data is stored locally on your device only.

E. Marketplace Data

When you create a marketplace listing, we collect:

• Listing title, description, price, and category
• Your phone number (displayed publicly so buyers can contact you)
• Listing images (stored on Google Cloud Storage)

2. How We Use Your Information

We use the information we collect to:

• Authenticate your account and provide secure access
• Diagnose plant diseases and recommend treatments using AI
• Provide agricultural alerts and insights specific to your location
• Sync your financial records across devices
• Enable farmer-to-farmer trading through our marketplace
• Improve our AI models and app functionality

3. Third-Party Services

KashCrop uses the following third-party services:

• Firebase (Google): Phone number authentication
• Google Gemini AI: Disease diagnosis and farming insights
• OpenWeatherMap: Weather forecasts
• Government Mandi API: Real-time market prices
• Cloudflare: App hosting and database (D1)
• Google Cloud Storage: Marketplace image storage

Each of these services has their own privacy policies governing data handling.

4. Data Sharing and Disclosure

We do not sell your personal data or your farm data to third parties. We may share anonymized, aggregated data (e.g., "50% of orchards in Sopore have Apple Scab this week") with agricultural research bodies to help the community, but this will never identify you personally.

5. Data Retention

We retain your account data and synced Khata records as long as your account is active. You can request deletion of your account and associated data by contacting us at the email below.

6. Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Secure JWT token-based authentication
• Password hashing using bcrypt encryption
• Input validation to prevent injection attacks

7. Children's Privacy

KashCrop is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: hazikhussain121@gmail.com