This Privacy Policy explains how Vinfarm Solutions ("we", "us", "our") collects, uses, stores and protects personal data on our website (vinfarm.co.ke), the AgriPlan farm-management app (app.vinfarm.co.ke and the AgriPlan Android app), the Shop, the Marketplace, our farm guides and training bookings. We follow the Kenya Data Protection Act, 2019 and its Regulations. If you use our services from another country, section 11 explains the extra rights you may have there.
Vinfarm Solutions is a farm and agri-technology business based in Eldoret, Uasin Gishu County, Kenya. We run a working livestock and crop farm, the Shop and Marketplace, training and farm tours, and the AgriPlan farm-management app.
We are the data controller for the personal data described in this policy. For the farm records you keep in AgriPlan about your own workers, customers, suppliers and visitors, you are the controller of that data and we process it for you, only to run the app.
Contact: info@vinfarm.co.ke · +254 720 336 363
| Category | Data | Source |
|---|---|---|
| Newsletter | Email address, name (optional) | You, through the subscribe form |
| Contact form, Shop and training enquiries | Name, phone / WhatsApp number, email, your message, delivery details | You, through our forms or WhatsApp (WhatsApp's own privacy policy also applies) |
| Shop and guide orders | Name, phone, email, items bought, delivery location, payment reference | You, and our payment provider |
| AgriPlan account | Name, email, phone, farm name and location, plan and payment history; if you sign in with Google, your Google name and email | You, when you register and use the app |
| Farm records in AgriPlan | Animals, crops, finances, sales, workers, customers, suppliers, visitors, photos and notes you choose to enter | You and the people you invite to your farm account |
| AI requests | Questions you type, and photos or videos you send to the AI Scanner | You, when you use an AI feature |
| Technical data | IP address, browser and device type, app version, sign-in times, error reports | Your device, automatically |
We do not receive or store your M-Pesa PIN or full card numbers. Payments are handled by our payment providers (see section 5).
We do not sell your personal data. We do not use it for advertising profiles, and we make no decisions about you that have legal or similar effects based only on automated processing.
| Processing activity | Legal basis |
|---|---|
| Running your AgriPlan account, Shop and guide orders, training bookings | Contract (providing the service you asked for) |
| Newsletter and offers to people who are not yet customers | Consent (you subscribed; you can withdraw at any time) |
| Farm tips and offers to existing customers | Legitimate interest, with an easy opt-out in every message |
| AI features | Contract (you choose to use them) |
| Security, fraud prevention, error reports, website statistics | Legitimate interest |
| Tax, accounting and other legal records | Legal obligation |
Some of the providers above store or process data outside Kenya (for example in the European Union and the United States). When we transfer personal data out of Kenya we use providers with strong security and data-protection commitments, as required by sections 48 to 50 of the Kenya Data Protection Act, and where available we rely on their standard data-protection terms. You can ask us for more details of these safeguards.
| Data | Retention period |
|---|---|
| Newsletter emails | Until you unsubscribe or ask us to delete them |
| AgriPlan account and farm records | While your account is open (on any plan, including Free). If you delete your account, we delete them as explained on our Delete Account page. |
| Payment and invoice records | Up to 7 years, as required for Kenyan tax and accounting records |
| Sign-in activity logs | Up to 90 days |
| Enquiries, orders and WhatsApp messages | Up to 24 months after the order or enquiry is closed |
| AI question log (text only) | Up to 12 months. AI answers you report as wrong: up to 24 months. Photos and videos sent to the AI Scanner are kept only if you save them to a record. |
| Marketplace requests and enquiries (completed) | As long as needed for the deal, delivery and any dispute, then up to 24 months as a business record |
| Marketplace requests that were cancelled, and logged WhatsApp messages from sellers | Up to 12 months |
After the retention period, data is securely deleted or permanently anonymised.
The Vinfarm Marketplace connects customers with farmers and suppliers through Vinfarm. Vinfarm stays in the middle: customers deal with Vinfarm, and Vinfarm deals with the supplier.
What we collect. When you use Find It for Me, Ask Vinfarm or the Shop's Source for Me form we collect your name, phone/WhatsApp number, location, what you need (product, quantity, breed, age, sex, delivery needs) and, if you give it, your budget. When a farmer or supplier sends products to Vinfarm on WhatsApp we record their name, phone number, location, the products offered, their price, and the photos and videos they send. If you pay Vinfarm's sourcing fee or transport by M-Pesa, we record the phone number, amount and M-Pesa reference (processed by our payment provider, IntaSend). The price of the item itself is paid by you directly to the seller; Vinfarm does not handle it.
Why. To search our network for what you asked for, to send you options and an offer, to arrange collection or delivery, to handle any dispute, and to keep a record of the deal.
What we do not share.
Who can see it at Vinfarm. Only the Vinfarm staff who run the Marketplace can see Marketplace requests, supplier details, prices and budgets.
How long we keep it. See the retention table in section 7. You can ask us at any time to see, correct or delete your Marketplace information (section 11).
Ask AgriPlan, the AI Scanner (animal health, crop and plant photos) and AI help in the Business Planner send the question, photo or video you choose, together with the farm details needed to answer it, to Google's Gemini AI service through our own server. Google processes it to produce the answer under its Gemini API terms and privacy policy. While we use Google's free Gemini service, Google's terms allow it to keep and review what is sent and use it to improve its products, so do not put anything private in AI questions or photos. We keep a log of the questions asked (not the photos) to apply daily limits and fix problems (see section 7). Only use these features with information you are happy to share for this purpose, and do not include other people's personal details in AI questions or photos.
AI answers can be wrong. They are general guidance, not a diagnosis or professional advice (see our Terms).
We send farm tips and offers only to people who subscribed or who are our customers. Every such email has an unsubscribe link, and you can also write "Unsubscribe" to info@vinfarm.co.ke or tell us on WhatsApp. Unsubscribing does not stop service messages that we must send to run your account (for example sign-in links and receipts).
Under the Kenya Data Protection Act you have the right to:
If you live outside Kenya (for example in Uganda, Tanzania, Rwanda, the European Union, the United Kingdom or the United States), you also have the data-protection rights given by the law where you live, and you may complain to your local data-protection authority. We will honour access, correction, deletion and opt-out requests from any user, wherever they live. We do not sell or "share" personal data for cross-context advertising as those terms are used in California law.
We protect your data with recognised security measures:
No online service is 100% secure. If we learn of a breach that is likely to put you at risk, we will tell the Data Protection Commissioner and affected users as the law requires. If you suspect a problem, contact us immediately at info@vinfarm.co.ke.
Our services are for adults. You must be 18 or older to create an AgriPlan account or buy from us. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it promptly.
We may update this policy from time to time. We will change the "Last updated" date at the top and, for important changes, tell account holders and subscribers by email or in the app before the change takes effect.
Data Controller — Vinfarm Solutions
Email: info@vinfarm.co.ke
Phone / WhatsApp: +254 720 336 363
Address: Eldoret, Uasin Gishu County, Kenya
For data-related complaints you may also contact the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.