Privacy Policy

How MifugoApp collects, uses, and protects your information.

1. Introduction

This Privacy Policy explains how MifugoApp ("we", "us", or "our") collects, uses, and protects your personal information when you use the Mifugo platform ("Service"), including our website at app.mifugo.app, mobile applications, and related services.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Effective date: July 25, 2026

2. Information We Collect

Information you provide directly:

Account information — email address, full name, and password (or Google OAuth profile data if you sign in with Google)

Profile data — phone number, language preference, and theme preference

Farm data — farm names, locations, and coordinates (if you use the location picker)

Livestock data — batch/group records, pen information, feed types, production logs (eggs, milk), mortality events, sales, and expenses

Payment information — processed securely by Paystack. We do not store credit card numbers or bank details on our servers

Communications — messages you send us via the contact form or support emails

Information collected automatically:

Usage data — pages visited, features used, time spent, and interaction patterns
Device information — browser type, operating system, device type, and screen resolution
Log data — IP address, access times, and error logs
Cookies — essential session cookies for authentication and preference cookies for language and theme

Information from third parties:

Google OAuth — if you sign in with Google, we receive your name, email, and profile photo
Paystack — payment confirmation, subscription status, and transaction references

3. How We Use Your Information

We use your information for the following purposes:

Providing the Service — creating your account, managing your farm data, generating reports, and processing payments

Customer support — responding to your questions and resolving issues

Product improvement — analysing usage patterns to identify features that users find confusing and prioritise improvements

Analytics — understanding how the platform is used to guide development decisions

Security — detecting and preventing fraud, abuse, and unauthorised access

Communications — sending transactional emails (invoices, account notifications, password resets) and, with your consent, product updates

Legal compliance — meeting our obligations under applicable laws

4. Legal Basis for Processing

If you are in the European Economic Area (EEA) or United Kingdom (UK), we process your data under the following legal bases:

Contract — processing is necessary to provide the Service you have requested (account management, farm tracking, billing)

Legitimate interests — improving the product, ensuring security, and understanding usage patterns

Consent — for marketing communications and non-essential cookies. You can withdraw consent at any time

Legal obligation — retaining records as required by law (e.g. financial records for tax purposes)

5. Data Sharing & Third Parties

We do not sell your personal data. We share information only with the following service providers who assist in operating our platform:

Supabase — database hosting, authentication, and real-time subscriptions. Data is stored in Supabase's infrastructure.

Paystack — payment processing. Paystack handles all credit card and bank details; we only receive confirmation codes and transaction references.

Resend — transactional email delivery (invoices, notifications, password resets). We share your email address and email content.

PostHog — product analytics. Usage data (page views, feature interactions) is sent to help us improve the product. PostHog is configured to not create person profiles for anonymous users.

Sentry — error tracking. Error reports may include your IP address and browser details to help us diagnose and fix issues.

Google Maps — farm location picker. Search queries are sent to Google's Places API when you use the location feature.

Cloudflare R2 — image storage for the Mifugo Inspire gallery submissions.

Vercel — hosting and deployment infrastructure.

We may also share information if required by law, in response to legal process, or to protect the rights and safety of MifugoApp, our users, or the public.

6. International Data Transfer

Your data may be processed in countries outside your country of residence. Our service providers (Supabase, Vercel, Paystack, and others) operate globally. We ensure that appropriate safeguards are in place, including standard contractual clauses where required by applicable data protection laws.

7. Data Retention

We retain your information for as long as necessary to provide the Service and fulfil the purposes described in this policy:

Account data — retained while your account is active. After deletion, we retain data for up to 30 days to allow recovery, then permanently delete it. Backup copies are removed within 90 days.

Farm and livestock data — deleted along with your account

Financial records — retained for up to 7 years as required by Kenyan tax law

Usage analytics — retained in anonymised form indefinitely

Support communications — retained for up to 2 years after the last interaction

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — request a copy of the personal data we hold about you

Correction — request that we correct inaccurate or incomplete data

Deletion — request that we delete your personal data

Portability — request a copy of your data in a structured, machine-readable format

Restriction — request that we limit how we process your data

Objection — object to our processing of your data for certain purposes

Withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

9. Cookies & Tracking

We use the following cookies:

Essential cookies — authentication session cookies managed by Supabase, and the mifugo_auth flag cookie for cross-subdomain single sign-on

Preference cookies — NEXT_LOCALE (language preference)

Analytics — PostHog captures usage events to help us understand how the platform is used

You can control cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

10. Security

We take reasonable measures to protect your personal information, including:

Encryption in transit (HTTPS/TLS) for all data transmitted between your device and our servers

Row Level Security (RLS) on our database ensuring users can only access their own data

Access controls and authentication to limit who can access user data

Regular security monitoring and error tracking

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Our Service is not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice on the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

Email: [email protected]

Web: mifugo.app/contact

Also see our