<% content_for :title, "Privacy Policy | GrowKit" %>
<% content_for :description, "How GrowKit collects, uses, and deletes account data for farmers and rural sellers using the Android app in India." %>

<article>
    <p class="kicker">Legal</p>
    <h1>Privacy Policy</h1>
    <p class="updated">Last updated 20 September 2026</p>
    <p>GrowKit (“we”, “us”) is a mobile app for farmers and rural sellers in India to list animals, machines, and produce, and to connect with buyers nearby. Android package: com.growkit.app. This policy explains what personal data we collect, why, who we share it with, and how you can ask us to correct or delete it. It is meant to meet Google Play user-data rules and India’s Digital Personal Data Protection Act, 2023.</p>

    <h2>Who this app is for</h2>
    <p>GrowKit is for people 18 years or older. We do not knowingly collect data from children. If you think a child has an account, email us and we will delete it.</p>

    <h2>Information we collect</h2>
    <ul>
      <li><strong>Account.</strong> Mobile number, name, role (farmer / agent / merchant), language, and a profile photo if you add one. We create an account ID after you verify an OTP.</li>
      <li><strong>Location (approximate and precise).</strong> Village or town name, district, state, and GPS coordinates you save. We use this so Mall listings, mandi prices, and Farm Doctor can show nearby results. If you use Land measure and walk a field, we read GPS while that screen is open. We do not track your location in the background when you are not using those features.</li>
      <li><strong>Photos.</strong> Pictures you take with the camera or pick from the gallery for your profile and listings.</li>
      <li><strong>Listings and activity.</strong> Titles, prices, descriptions, photos, interests, offers, call taps, shares, boosts, sold status, reports, and blocks.</li>
      <li><strong>Phone number on deals.</strong> Other users may see or dial the seller number on a listing when they tap Call (Premium). If you mark an item sold, you may type a buyer number for your own records.</li>
      <li><strong>Notifications.</strong> A device push token (Firebase Cloud Messaging) so we can send inbox alerts. You can refuse the OS notification permission.</li>
      <li><strong>App and device basics.</strong> App version, language, and crash logs (Firebase Crashlytics) so we can keep the app working.</li>
      <li><strong>Analytics.</strong> In-app events such as screens opened, listing created, offer sent, or location saved (Firebase Analytics). We do not send your phone number, OTP, or name in those events.</li>
      <li><strong>On-device storage.</strong> Login session, language, and the village you saved, so the app works offline for those settings.</li>
    </ul>
    <p>We do not read your contacts or phone book. We do not store the SMS text of OTPs; the OS may offer the code for autofill.</p>

    <h2>How we use it</h2>
    <p>We use this information to create and secure your account, send OTPs, show nearby Mall listings, rank Farm Doctor and mandi prices, send push notifications you allow, process GrowKit Premium if you buy it, measure land when you ask, and keep the village feed safe (reports, blocks, and abuse review). Analytics and crash logs help us find bugs and improve the app.</p>

    <h2>Permissions</h2>
    <ul>
      <li><strong>Location</strong> — only after you allow it, to save village and for Land measure.</li>
      <li><strong>Camera and photos</strong> — only when you add a profile or listing picture.</li>
      <li><strong>Notifications</strong> — optional alerts for inbox and listing activity.</li>
      <li><strong>Internet</strong> — to run the app.</li>
    </ul>

    <h2>What we share</h2>
    <p>Other users see what you publish on a listing (photos, village, price, profile name, and photo). Call may share your phone number with the person who taps Call. We do not sell your personal data.</p>
    <p>We share data with service partners only to run GrowKit:</p>
    <ul>
      <li><strong>Google Firebase</strong> (Analytics, Crashlytics, Cloud Messaging) — Google LLC. See <a href="https://firebase.google.com/support/privacy">Firebase privacy</a> and <a href="https://policies.google.com/privacy">Google privacy policy</a>.</li>
      <li><strong>Hosting</strong> — our servers store accounts, listings, and photos.</li>
      <li><strong>SMS</strong> — an SMS provider delivers the login OTP to your number.</li>
      <li><strong>Maps</strong> — Land measure loads map tiles (OpenStreetMap). Your device may send an IP address to the tile server.</li>
      <li><strong>Mandi prices</strong> — we query the Government of India’s data.gov.in open data using your saved state or district. That request is not your name or phone.</li>
      <li><strong>Payments</strong> — if you pay for Premium, we share what the payment partner needs to complete that purchase.</li>
      <li><strong>Sharing apps</strong> — if you tap Share or WhatsApp, that app receives the listing card you chose to send.</li>
    </ul>
    <p>We may disclose data if Indian law or a valid legal request requires it, or to stop fraud and abuse.</p>

    <h2>How long we keep it</h2>
    <p>Account, location, and listing data stay while your account is open. Push tokens are removed when you log out or unregister the device. Crash and analytics data follow Google Firebase retention. After deletion we may keep limited records if needed for fraud, disputes, tax, or Indian law, then delete or anonymise them.</p>

    <h2>Delete your account</h2>
    <p>You can ask us to delete your GrowKit account and personal data. Use in-app Help (Account) or the Support section on this page, from the number or email we can match to the account. Write “Delete my GrowKit account” and include the mobile number used to sign in. We will delete or anonymise account data within a reasonable time, except records we must keep for law or disputes. Listings you posted will be removed from the feed.</p>

    <h2>Your other choices</h2>
    <ul>
      <li>Edit your name, photo, language, and village in Account.</li>
      <li>Remove or mark sold a listing you posted.</li>
      <li>Block a user or report a listing.</li>
      <li>Turn off notifications in Android settings.</li>
      <li>Revoke location or camera permission in Android settings (some features will stop working).</li>
    </ul>
    <p>Under the DPDP Act you may also ask to access or correct your personal data using the same contact details.</p>

    <h2>Security</h2>
    <p>Login uses an OTP to a number you control. Data is sent over HTTPS. Photos and listings are stored on our servers. No method is 100% secure; please do not share OTPs with anyone.</p>

    <h2>Where data is processed</h2>
    <p>You use GrowKit in India. Hosting and Google Firebase may process data on servers outside India. We still apply this policy and Indian law to that processing.</p>

    <h2>Changes</h2>
    <p>If we change this policy in a material way, we will update the date at the top of this page. Continued use of the app after the update means you accept the new policy.</p>

    <p>Related pages: <a href="/terms-of-service">Terms of Service</a> and <a href="/about-growkit">About GrowKit</a>.</p>
  </article>
