Privacy Policy — DVA Bolivia

1. Who We Are (Data Controller)

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at [email protected].

2. Scope

This Privacy Policy applies to:

• The DVA Bolivia App (Progressive Web App and native builds via Capacitor)
• All features including account registration, community chat, AI agricultural assistance, marketplace content, push notifications, and profile management

This Policy does not apply to third-party websites or services linked from the App. Those services have their own privacy policies.

Age restriction: The Services are not directed to children under 16 (or 13 where local law sets a lower age with parental consent). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

3. Information We Collect

We collect information in the following categories:

3.1 Information You Provide Directly

3.2 Information Collected Automatically

• Device & Network Identifiers: Device model, OS version, browser type, IP address, device identifier (for push notifications via Firebase Cloud Messaging/OneSignal).
• Usage Data: Page views, feature usage, session duration, crash logs, diagnostic information.
• Location Data: Approximate or precise GPS location (only with your explicit permission) to provide location-based agricultural recommendations and weather information.

3.3 Information from Third Parties

• OAuth Providers: If you log in via Google or Apple, we receive basic profile info (email, name, profile image) based on your consent.
• Analytics Services: Aggregated diagnostic data from third-party monitoring tools.

4. How We Use Your Information

We process your data for the following legal and operational purposes:

• Service Delivery: Managing account authentication, operating AI agronomy tools, and providing platform features.
• Communication: Sending updates, security alerts, and system notification emails or push notifications.
• Service Improvement: Analyzing app performance, fixing bugs, and improving crop diagnosis machine learning models.
• Legal & Safety: Complying with applicable legal obligations, enforcing our Terms of Service, and protecting against fraud or malicious activity.

5. How We Share Your Information

We do not sell your personal data. We only share information with:

5.1 Service Providers

Trusted vendors who process data on our behalf under strict confidentiality agreements:

• Cloud Infrastructure: Cloudflare (CDN, Pages, Workers, R2), Supabase (Database & Auth).
• AI Processing: Cloud-based AI model providers for crop disease diagnosis processing.
• Push Notifications: Firebase Cloud Messaging or OneSignal.

5.2 Legal Requirements

We may disclose your information if required by law, subpoena, or government order, or if necessary to protect the rights, property, and safety of our users and platform.

6. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data:

• Encryption in transit using TLS/HTTPS.
• Encryption at rest for sensitive account credentials and databases.
• Access control mechanisms restricting employee access to production data.

7. Data Retention

We retain your personal information for as long as your account remains active or as needed to provide you with the Services. If you delete your account, we will remove or anonymize your personal data within 30 days, unless retention is required for legal compliance.

8. Your Rights and Choices

Depending on your jurisdiction, you have the following privacy rights:

8.1 Access and Rectification

You can view and update your profile information directly within the App settings.

8.2 Account Deletion & Data Removal

You have the right to request full account deletion and removal of all associated personal data at any time through either of the following methods:

• In-App Deletion: You can initiate account deletion directly inside the App by navigating to Settings → Account Management → Delete Account.
• Web / Online Request: If you have uninstalled the App or cannot log in, you may submit an online deletion request via our dedicated portal: https://legal.dva-agro.com/Delete-account or email us at [email protected] with the subject "Account Deletion Request".

Data Deleted: Profile credentials, uploaded crop diagnostic photos, AI interaction history, and community messages will be permanently removed or anonymized within 30 days.

Data Retained: Limited transaction logs or security records may be retained for up to 90 days as required solely for fraud prevention and statutory legal compliance.

8.3 Permissions Control

You can revoke access to your device camera, storage, or location at any time via your device's native settings menu.

9. Third-Party Links & Services

The App may contain links to third-party websites, distributor catalogs, or external resources. We are not responsible for the privacy practices or content of these external services.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, we will update the "Last Updated" date at the top of this page and notify users via in-app banner or push notification for material changes.

11. Contact Us

If you have any questions, concerns, or privacy requests regarding this policy, please reach out to our privacy team:

Email: [email protected]
Support Email: [email protected]
Website: https://bolivia.dva-agro.com