Smallholdr Privacy Policy

Effective Date: October 1, 2026
Last Updated: October 1, 2026
Website: https://smallholdr.com
Contact: privacy@smallholdr.com

1. Introduction

Smallholdr (“we”, “our”, or “us”) provides enterprise mobile and cloud software designed for agricultural data collection, smallholder farm and plot mapping, supply chain traceability, and field survey operations.

This Privacy Policy explains how our mobile application (Smallholdr, package name com.smallholdr.android) collects, uses, stores, processes, and protects your personal and operational information when you use the app. It also outlines your rights regarding your data and how you can contact us.

Smallholdr is built to operate primarily as an enterprise business-to-business (B2B) application used by field agents, enumerators, agronomists, buying officers, and organizational administrators (“Users”) on behalf of deploying organizations (“Clients” or “Data Controllers”).

2. Information We Collect and Why

We collect only the minimum necessary data required to deliver reliable field surveying, geospatial mapping, and offline synchronization.

A. Geolocation Data (Precise and Approximate)

  • What We Collect: GPS latitude, longitude, altitude, and horizontal accuracy.
  • Purpose & Use:
  • Mapping farm boundaries, field plots, and agricultural polygons.
  • Geotagging survey submissions, crop health assessments, and inspection reports.
  • Geospatial verification of field activities and agricultural supply chain traceability.
  • Collection Method: Geolocation is accessed only while the app is actively open and in use (foreground) when a user initiates a survey question, GPS point capture, or plot polygon mapping tool. Smallholdr does not track or collect location data in the background when the app is closed or inactive.
  • Permissions Used: ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION.

B. Camera, Photos, and Visual Data

  • What We Collect: Photographs taken directly within the app and scanned barcode/QR code data.
  • Purpose & Use:
  • Attaching visual evidence to survey responses (e.g., crop condition, receipt images, farm infrastructure, farmer documentation).
  • Scanning QR codes or barcodes to quickly look up farmer profiles, worker identity cards, or physical inventory tags.
  • Storage & Privacy: Photos are stored strictly within the app’s private, sandboxed application directory and uploaded directly to the client’s designated Smallholdr server during sync. The app does not access your personal photo library or unrelated device media.

C. Account and Authentication Information

  • What We Collect: Usernames, passwords, authentication session tokens, and designated server URLs.
  • Purpose & Use:
  • Authenticating authorized users to their deploying organization’s Smallholdr server.
  • Maintaining session security and managing role-based data access permissions.

D. Device and Technical Identifiers

  • What We Collect:
  • A randomly generated unique Installation ID (UUID) created on first launch.
  • Device hardware model, manufacturer, Android OS version, and Smallholdr app version.
  • Purpose & Use:
  • Managing data synchronization sessions, ensuring data consistency across intermittent network connections, and registering field handsets with the backend fleet manager.
  • Checking application version compatibility and notifying users when a required update is available on Google Play.
  • What We Do NOT Collect: We do not collect persistent hardware identifiers such as IMEI numbers, IMSI numbers, phone numbers, MAC addresses, or SIM serial numbers.

E. Operational and Survey Data

  • What We Collect: Farmer profile information, farm plot dimensions, crop yields, input distribution records, transaction receipts, and custom survey responses configured by your organization.
  • Purpose & Use: Fulfilling the operational, agronomic, and commercial workflows configured by the deploying organization.

F. Bluetooth Peripheral Data

  • What We Collect: Bluetooth connection metadata for paired portable thermal receipt printers.
  • Purpose & Use: Printing paper receipts and transaction summaries directly in the field.
  • Permissions Used: BLUETOOTH_CONNECT, BLUETOOTH_SCAN (declared with neverForLocation to ensure Bluetooth is never used for location inference).

3. Data Storage, Security, and Transmission

We prioritize the security and integrity of all data collected through the Smallholdr application:

  • Encryption in Transit: All network communication between the Smallholdr mobile app and backend servers is encrypted using modern Transport Layer Security (HTTPS/TLS). Cleartext (unencrypted HTTP) communication is strictly prohibited in production builds.
  • Local Data at Rest: While offline in the field, data is stored locally in the application’s isolated SQLite database and private storage sandbox on the Android device.
  • Access Controls: Access to backend data is restricted to authenticated users authorized by the deploying organization.

4. Third-Party Services and SDKs

To provide mapping functionality, Smallholdr integrates the following third-party service:

  • Mapbox Maps SDK: Used to render vector base maps, satellite imagery, and farm plot polygons on the device. Mapbox may collect technical telemetry and diagnostics in accordance with the Mapbox Privacy Policy.

Advertising and Tracking: Smallholdr does not contain third-party advertising SDKs, commercial ad trackers, or data monetization brokers. We do not sell or trade user data.

5. Data Sharing and Disclosure

Data collected by the Smallholdr application is processed solely to provide services to the deploying organization:

  • With the Deploying Organization (Data Controller): Survey responses, photos, and location data are synchronized directly to the server designated by your organization or employer.
  • Legal Requirements: We do not disclose personal information to external parties except when required to comply with applicable laws, legal processes, or government requests.

6. Data Retention and Account Deletion

Data Retention

  • On Device: Synced records and local cache remain on the handset until cleared by the user, uninstalled, or refreshed during synchronized operational cycles.
  • On Server: Server-side retention periods for survey records, farmer data, and user accounts are determined by the deploying organization in accordance with their regulatory and operational requirements.

Account and Data Deletion Requests

Google Play policy provides users with the right to request deletion of their account and associated data:

  • Users Managed by an Organization: If your account was provisioned by your employer or enterprise administrator, please contact your organization’s system administrator directly to request account deactivation and removal of your personal information from their server instance.
  • Direct Deletion Requests: You may also submit an account or data deletion request directly to Smallholdr by emailing privacy@smallholdr.com or support@smallholdr.com with the subject line “Data Deletion Request”. Please provide your registered username, organization name, and server URL so we can coordinate data deletion with the appropriate administrator.

7. Children’s Privacy

The Smallholdr application is designed and intended strictly for commercial and enterprise agricultural operations. It is not directed to children under 13 years of age (or under 16 in applicable jurisdictions), and we do not knowingly collect personal data from children.

8. International Data Transfers

Depending on your organization’s deployment configuration, data collected through Smallholdr may be transferred to and processed on secure cloud servers located outside your country of residence. All transfers adhere to recognized data protection standards and encryption protocols.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our app functionality, legal obligations, or Google Play policy requirements. When updates occur, the updated policy will be posted on this page with a revised “Last Updated” date. Continued use of the application after changes are posted constitutes acceptance of the revised policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at: