Privacy Notice

Last updated: 1 July 2026

1. Who we are

OrigAfric Softwares ("OrigAfric", "we", "us", "our") operates the MkulimaOS farm management platform. This notice explains what personal data we collect, why we collect it, and the choices you have. For the personal data you provide to us to use the Service, OrigAfric Softwares acts as the data controller.

2. Personal data we collect

Account data: name, email address, password (hashed), phone number, farm and organisation details.
Farm operational data: livestock, crops, inventory, labour, equipment, finance, and compliance records you enter.
Support data: messages, screenshots, and diagnostics you send us.
Usage & device data: log data, IP address, browser type, pages visited, actions taken, timestamps.
Billing metadata: subscription plan, order identifiers, and country. Full payment card data is collected and stored by Paddle, not by us.

3. Why we use it and legal basis

Provide the Service (contract): create your account, run farm management features, sync data.
Billing and subscriptions (contract / legal obligation): via Paddle as our Merchant of Record.
Security & fraud prevention (legitimate interests): detect abuse, protect accounts and data.
Product improvement (legitimate interests): understand how features are used and fix bugs.
Customer support (contract / legitimate interests): respond to your requests.
Marketing (consent, where required): send product news you can unsubscribe from at any time.

4. Who we share data with

Service providers / subprocessors that help us run the platform: cloud hosting, database, email delivery, error monitoring, and analytics.
Paddle.com Market Ltd as our Merchant of Record for the sale of subscriptions, subscription management, payment processing, tax compliance, and invoicing.
Professional advisers (legal, accounting) where necessary.
Public authorities where required by law or to protect our rights.

We do not sell your personal data.

5. International transfers

Some of our subprocessors are located outside Kenya. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses and provider certifications.

6. Data retention

We keep personal data for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, row-level security in our database, and regular vulnerability scanning. No system is perfectly secure, so we also ask you to protect your account credentials.

8. Your rights

Subject to applicable law (including the Kenya Data Protection Act, 2019, and, where relevant, the UK/EU GDPR), you have the right to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You may also lodge a complaint with a supervisory authority such as the Office of the Data Protection Commissioner (Kenya).

To exercise these rights, contact us through the support channel in MkulimaOS. We will respond within one month.

9. Cookies

We use strictly-necessary cookies to keep you signed in and to keep the Service secure. We may use limited analytics cookies to understand aggregate usage. You can manage cookies through your browser settings.

10. Changes to this notice

We may update this notice from time to time. Material changes will be notified through the Service or by email.

11. Contact

For privacy questions, contact OrigAfric Softwares via the support channel inside MkulimaOS.