Privacy Policy
Effective Date: Dec 20, 2025 — Last Updated: May 20, 2026
At Filahi ("we," "our," or "us"), we are committed to building the "Flywheel of Trust & Trade" in African agriculture. Trust begins with transparency and enterprise-grade data protection. This Privacy Policy outlines how we collect, use, process, and safeguard user, crop, and device data within the Filahi SuperApp ecosystem, covering our agronomic advisory, digital marketplace, fintech bridges, and crop traceability passport services.
1. Information We Collect
To power our unified digital ecosystem, Filahi collects information across three primary pillars:
A. Information You Provide Voluntarily
- Account Registration & Community Profile: Name, contact details (phone number, email address), location, and specific agricultural roles (e.g., smallholder farmer, aggregator, input provider, or cooperative manager).
- Voice-to-Insight Interactions: Audio recordings of Darija voice notes submitted to our Generative AI voice interface to receive immediate technical agronomic recommendations.
- Marketplace Transactions: Payment information, transaction history, crop listings on our digital "Souk," and data regarding procurement of agricultural inputs or rental services.
B. Automated Agronomic, Spatial & Environmental Data
- Spatial & Telemetry Data: Remote sensing data, satellite imagery, drone mapping coordinates, and precise geographical boundaries (GPS) of your managed land plots.
- IoT & Sensor Telemetry: Real-time metrics regarding soil moisture, irrigation/fertigation rates, and local weather patterns collected directly via field hardware.
- Crop & Farm Imagery: Photos or video uploads analyzed by our localized Convolutional Neural Networks (CNNs) for automatic crop strain and plant disease diagnosis.
C. Financial & Verification Data (Fintech & Export Bridges)
- Living Collateral Documentation: Third-party verified crop health status, field validation metrics, and operational performance logs compiled to build an alternative credit score.
- Secure Traceability Logs: Verified records of input usage and phytosanitaire applications compiled to build compliance documentation required for international export.
2. How We Use Your Information
Filahi processes data solely to deliver, enhance, and secure our ecosystem operations, notably for:
- Precision Agronomic Advisory: Translating environmental field telemetry and Darija voice inquiries into actionable, hyper-localized farming insights.
- De-Risking Financial Capital: Structuring immutable, verified field data into "Living Collateral" profiles shared with financial institutions and networks (such as Al Filahi Cash) to unlock micro-loans upon your explicit, manual consent.
- Supply Chain Certification: Generating verifiable digital passports that prove compliance with food safety and phytosanitaire thresholds required by premium retailers and EU import standards.
- B2B2C Supply Chain Management: Enabling agro-industrial aggregators (e.g., dairy or sugar factories) to optimize operational oversight and yield forecasting of their contracted smallholder supply networks.
3. Data Sharing & Third-Party Disclosure
We do not sell your personal data. Information is shared exclusively under strict contractual guardrails and data processing agreements in the following scenarios:
- Financial Partners: If you explicitly opt-in to request a credit product, your verified crop performance analytics are securely shared with certified partner banks or microfinance networks via protected APIs.
- Supply Chain Aggregators: If you operate within an out-grower network, your aggregated yield forecasts and production timelines are shared with your designated industrial hub to guarantee commercial pickup.
- Strategic Infrastructure Providers: Operational telemetry may be securely processed through authorized enterprise partners—such as secure cellular IoT networks, payment processors, and Orange Cloud infrastructure—to sustain remote rural connectivity.
4. Data Security & Storage Architecture
Filahi implements enterprise-grade security protocols to protect your agricultural and personal data assets:
- Advanced Access Controls: Secure API tokens protect all dynamic data sharing across our deep-tech stack, ensuring encrypted pathways between GenAI modules, CNN engines, and IoT field routers.
- End-to-End Encryption: Applied to all financial ledger entries, personal identifiers (PII), and mobile marketplace transactions.
- Immutable Audit Trail: Our core database relies on an automated, tamper-resistant system architecture where historical crop truth events (e.g., "Plot X passed pesticide residue verification") form permanent proof states to protect international trade integrity.
- Rigorous Infrastructure Monitoring: Cybersecurity infrastructure matched to the strict data governance standards required by international enterprise clients and multinational partners.
5. Your Rights & International Export Compliance
To satisfy both regional data regulations and global thresholds (such as the EU General Data Protection Regulation - GDPR) required for global market access, Filahi provides users with comprehensive data rights:
- Access and Rectification: The right to inspect, correct, or modify account profile fields at any time through your Command Center settings.
- Data Portability: The right to export your historical crop yield logs, soil analytics, and digital passport scores into open formats.
- Consent Withdrawal: The right to instantly revoke data sharing privileges with third-party banking entities or credit scoring frameworks, freezing dynamic external API access.
6. Target Audience & Children's Privacy
Our platform is engineered exclusively for adult agricultural operators, commercial managers, and industry stakeholders. We do not knowingly target, collect, or store data from individuals under the age of 13.
7. Changes to This Privacy Policy
We may periodically update this policy to reflect new app modules, technical modifications, or shifting regional compliance frameworks. Users will receive immediate push notifications regarding any significant updates directly through the Filahi SuperApp interface.
8. Contact Our Data Protection Team
For any data requests, compliance inquiries, or to exercise your privacy rights, contact our data protection officer directly at: legal@filahi.com.