Legal

Privacy
Policy.

Version 1.0 · Effective May 3, 2026 · Version française

Kessel Agritech ("Kessel", "we") is committed to protecting the privacy of users of our mobile application and related services (the "Service"). This policy explains what personal data we collect, why, how we use it, and what your rights are.

1. Data Controller

Kessel Agritech (RCCM registration in progress)

Represented by: Atine Mvom Philippe André, Founder and Director

Address: Ebome, Kribi, Cameroon

Email: contact@kesselagritech.com

Given the size of our organization, the Data Controller also serves as the Data Protection Officer (DPO).

2. Data we collect

We only collect data strictly necessary for the operation of the Service. No data is sold to third parties.

CategoryDataPurpose
IdentityPhone number, first name, last name (optional), languageAccount creation and management
LocationGPS coordinates when capturing field photosGeolocate agricultural reports
PhotosImages captured via camera (field evidence)Document project reports
BusinessProjects, tasks, expenses, revenues, reportsAgricultural management service
TechnicalPush notification token, session IDs, device modelNotifications, security, support
LogsCrashes, anonymized technical IDsDiagnostics via Sentry

2.1 What we do NOT collect

  • Phone contact list
  • Browsing history outside the application
  • Photos or files on your phone (other than those captured via Kessel)
  • Biometric data
  • Credit card numbers or other payment data (no payment is required to use the Service)

3. Legal basis for processing

In compliance with Cameroonian Law No. 2010/012 of December 21, 2010 and GDPR principles which we apply by alignment, each processing operation is based on one of the following grounds:

  • Performance of contract (account, projects, reports).
  • Explicit consent (GPS location, camera access).
  • Legitimate interest (security, technical diagnostics).
  • Legal obligation (financial operations, fraud prevention).

4. App permissions

PermissionWhyRefusable?
CameraCapture field evidenceYes
Precise locationGeolocate photosYes
NotificationsReminders, messages, price alertsYes
Local storageOffline modeNo (essential)
InternetServer synchronizationNo (essential)

5. Hosting and processors

Your data is hosted by the following providers, all contractually committed to high security standards:

ProcessorServiceLocation
Supabase Inc.Database, auth, file storageUnited States (us-west-2, Oregon)
Expo (EAS)Push notificationsUnited States
Vercel Inc.Website and admin toolsUnited States / EU (global CDN)
SentryCrash diagnosticsEuropean Union
Google FCMNotification deliveryUnited States

Some processors are located outside Cameroon (United States, European Union). To ensure adequate protection, these transfers are governed by the Standard Contractual Clauses of the European Commission and the providers' compliance policies.

6. Retention period

Data typeDuration
Account (active)As long as the account is active
Account (after deletion)Immediate and permanent erasure
Photos and reportsAs long as the project is active, or until manual deletion
Technical logs90 days maximum

7. Your rights

  • Right of access: obtain a copy of all data we hold about you.
  • Right to rectification: correct inaccurate data.
  • Right to erasure: request deletion of your account.
  • Right to portability: receive your data in a structured format.
  • Right to object: object to a particular processing operation.
  • Right to withdraw consent: at any time.

To exercise these rights, write to contact@kesselagritech.com. We will respond within 30 days maximum.

If you disagree, you may file a complaint with the National Agency for Information and Communication Technologies (ANTIC) in Cameroon, or any competent authority in your country.

8. Security

  • End-to-end encrypted communications (HTTPS/TLS 1.3).
  • Passwords stored as hashes (PBKDF2 with unique salt).
  • Strict database access policies (Row Level Security).
  • Multi-factor authentication for the technical team.
  • Encrypted and redundant backups.

In the event of a data breach affecting your rights, we commit to notifying you within a maximum of 72 hours.

9. Minors

The Service is not intended for persons under 18. We do not knowingly collect data from minors. If you believe a child has provided us with data, contact us for immediate deletion.

10. Cookies and local storage

The mobile app does not use web cookies. However, it stores locally on your device:

  • Session tokens (encrypted via iOS SecureStore / Android Keystore).
  • Encrypted local copy of your data for offline mode.
  • Your preferences (language, notification settings).

11. Changes to this policy

We may update this policy. Substantial changes will be notified via in-app notification and email at least 30 days before the effective date.

12. Applicable law

This policy is governed by Cameroonian law. Disputes shall fall under the exclusive jurisdiction of the courts of Kribi, Cameroon.

13. Contact

📧 contact@kesselagritech.com
📱 WhatsApp: +237 659 374 501
🏢 Kessel Agritech, Ebome, Kribi, Cameroon

Last updated: May 3, 2026 · Version 1.0