FarmAro Privacy Policy

Last updated: November 5, 2026

FarmAro ("we", "our", "the app") helps farmers rent, buy and sell tractors, equipment and animals with people nearby. This policy explains what data we collect and why.

Information We Collect

Location is obtained only after you select or search for a place, or grant location permission and choose to use your current location. FarmAro uses Google Places on Android and Apple Maps/Core Location on iOS to obtain location and address information.

How We Use Information

We do not sell your personal data to third parties. Account, profile, listing, location, and image data may be stored using Google Firebase services, including Authentication, Firestore, and Storage.

Sharing

Listing information—including listing photos, owner name, contact number, and listing location—is available to other signed-in users so they can evaluate a listing and contact its owner. Profile location metadata is used by the app and is not intentionally displayed as separate profile fields.

Google Firebase—including Firebase Analytics and Firebase Crashlytics—Google Gemini, MSG91, Google Places, Apple Maps/Core Location, Google Mobile Ads, and Meta on Android process data as service providers where needed to operate the app. We may also disclose information when required by law or to protect users, the service, or the public.

Data Retention and Security

We retain account, profile, and listing information while the account or listing remains active, or as needed to operate and secure the service. Crash and diagnostic reports are retained according to Firebase Crashlytics retention practices. Agri Assistant requests are sent with Gemini interaction storage disabled by FarmAro, but Google may process and retain request data according to the Gemini API terms applicable to our account. We use reasonable technical and organizational safeguards, but no electronic storage or transmission method is completely secure.

Your Choices

Shop Profiles and Subscriptions

When enabled, approved shops with active subscriptions publish their business name, photos, address/map location, products, brands, hours, and contact phone publicly. Profiles, moderation, and reports use PostgreSQL; photos use Firebase Storage or Cloudflare R2. Apple or Google handles payments; we do not receive card or banking details. RevenueCat processes your Firebase account identifier, purchase/transaction identifiers, subscription status and expiry, and purchase-related device information to verify and restore subscriptions and prevent fraud.

Store transaction identifiers and their account association may be retained after account deletion to prevent purchase reuse and meet payment/audit obligations. Contact us for retention/deletion requests. Deleting your shop or account does not cancel store renewal. Cancel in Apple or Google subscription settings.

Human Agri Expert Consultations

Experts may optionally save a practice location using place search or current location. We store the selected address, place identifier, geographic coordinates and available locality components with the expert profile. Only the applicant and authorized administrators can access the exact stored location. Farmers see locality and approximate straight-line distance calculated from the farmer's supplied location, not the expert's exact address or map pin. This is a saved location, not live tracking. Consultation access requests use the farmer's profile name and require no issue description; approval covers one 15-minute consultation.

Experts may optionally upload a public profile photo. It appears in the expert directory, profile and consultation screens and is stored separately from private qualification certificates using our marketplace image storage. A photo is not required for application or approval and is not proof of qualifications. Experts can replace or remove it from Manage expert profile.

When enabled, we store expert applications, account identifiers, qualifications, languages, experience, district/state, private verification references, consent and moderation status in PostgreSQL. Only approved profiles are public; verification references and moderation notes are private to the applicant and authorized administrators. New applicants upload 1-3 qualification certificates (PDF/JPG/PNG, up to 5 MB each), stored in a dedicated private Google Cloud Storage bucket and accessed only through authenticated applicant/admin requests, not public links. Do not upload government identity documents.

Existing appointment times and working hours are retained; new clients use consultation requests. We store request/booking status, consultation participants, farmer name and issue, consent version, private text messages, shared chat photos and reports. Participants access their own chat; authorized administrators review submitted reports. Chat photos are compressed, stripped of embedded metadata and stored privately in PostgreSQL with the consultation, not as public marketplace images. Only authenticated participants can retrieve them through the app; they remain readable in history and are removed with related consultation data on account deletion. Do not include unrelated sensitive information.

With microphone permission, Agora processes live audio, session channel/user identifiers and connection/device information for one-to-one calls. FarmAro does not enable recording or video. Agora processes technical data under its privacy policy. Supported new clients can continue explicitly initiated or answered calls while navigating or in the background, using system or in-app hang-up controls. Legacy clients remain foreground-only. Invitations alone do not publish microphone audio. Call status and timestamps are retained with history. Profile district/state orders local experts, not precise GPS distance. New clients use requests rather than new bookings; existing appointments remain stored.

If allowed, Firebase Cloud Messaging processes an account-linked device token for request/acceptance alerts. Incoming calls additionally use Android call notifications or Apple PushKit/CallKit, processing device/VoIP tokens, call/session identifiers and the caller's display name, not farm issue, messages or certificate contents. Delivery depends on device/OS settings and network availability. Revoke permission in device settings. Device registration is removed on sign-out.

Applications, certificates and consultation history are retained while needed to operate the service or review complaints, or until account deletion or an applicable deletion request is fulfilled. Account deletion removes private certificates, consultation device registrations, the expert application and related sessions/messages/reports, including the other participant's access. Unused uploaded certificates can be removed in the application form; contact soniapp0091@gmail.com to correct submitted documents or request deletion. No consultation payment or banking details are collected during the free pilot.

When paid consultations launch, payments are processed by our authorised payment gateway. We receive payment status, amount and transaction references, not your card, UPI PIN or bank login details. Experts who accept paid consultations provide PAN and bank account details for payouts and tax compliance; these are shared only with the payment gateway and authorities as required by law. See our Terms of Service and Refund & Cancellation Policy.

Children

FarmAro is intended for users 18 years and older.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected here with a new update date.

Contact

For privacy questions, email soniapp0091@gmail.com.