ViBa — Privacy Policy

Effective date: 28 March 2026

This Privacy Policy explains how ViBa collects, uses, and protects information when you use our alpha demo web app. It applies to users in Kenya and elsewhere.

Key points upfront
  • Admins can view your entries to support and debug during the alpha.
  • Data is processed on Google Cloud and may be stored in South Africa (Johannesburg) or the United States.
  • We do not sell your personal data or share it with others for their own marketing.
  • Your data is never used to train AI models, large language models, or any machine learning systems.
  • You have rights under Kenya's Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021.
1) Who we are (data controller)

ViBa. Contact email: victor.kingi@viba.farm

2) What we collect
  • Account & contact data: name, email, profile photo.
  • Farm/poultry records: flock details, production and health logs, inventory, schedules, photos you upload.
  • Location data: GPS coordinates or place names you provide for your flocks, used to enable location-based features and regional insights.
  • Device/usage data: IP address, device/browser info, pages and actions, diagnostic logs, crash reports. We use Google Analytics (with cookies) to understand how the app is used.
  • Support communications: messages or emails you send us.

We do not intentionally collect special category data (e.g., biometric, health about a person) other than typical business contact details.

3) Why we use your data (purposes & legal bases)
  • Provide the Service (create your account, store your records, back up and display data) — performance of a contract/consent.
  • Operate, secure, and improve the app (monitoring, debugging, analytics via Google Analytics and server logs) — legitimate interests.
  • Support & communication (respond to requests, service notices) — legitimate interests/consent.
  • Legal compliance (comply with applicable laws) — legal obligation.
4) Who processes your data

Our sub-processors: Google Cloud (infrastructure hosting and storage), Firebase (authentication and database), Google Analytics (usage analytics), and Google Places API (location services). These processors act on our instructions and do not use your data for their own purposes. We do not share your personal data with third parties for their independent purposes.

5) International transfers & storage locations

Your data may be processed and stored in South Africa (Johannesburg) or the United States. When data leaves Kenya, we rely on Google’s Data Processing Addendum and Standard Contractual Clauses as safeguards permitted under Kenya’s Data Protection Act and Regulations.

6) How long we keep data (retention)

Because this is an alpha demo, data may be deleted at any time. Otherwise, we keep data for as long as your account is active and as needed to provide the Service, or to comply with law. If you delete your account, we will delete your personal data within 30 days. Backup copies are purged within 90 days. We may retain data longer where required by law or to resolve disputes.

7) Security

We use reasonable technical and organizational measures (e.g., encryption in transit and at rest, access controls, audit logs). No system is 100% secure.

8) Data breach notification

If we become aware of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the Office of the Data Protection Commissioner within 72 hours and inform affected users as soon as reasonably practicable. Our notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures we are taking or propose to take in response.

9) Your rights

Under Kenya’s Data Protection Act, 2019, you have the right to be informed, access your data, request correction or deletion, object to processing, data portability, and to withdraw consent where applicable. To exercise any right, email us at victor.kingi@viba.farm. We will respond within 30 days. Requests are free of charge. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at complaints@odpc.go.ke.

10) Automated processing

ViBa may provide automated health assessments, diagnostic suggestions, and performance benchmarks based on the data you enter. These are informational aids, not veterinary or financial advice. No decision with legal or similarly significant effect is made solely by automated means. You always have the right to request human review of any automated output.

11) Children

ViBa is not directed to persons under 18. Do not use the Service if you are under 18.

12) Changes to this policy

We may update this Policy. If changes are material, we will take reasonable steps to notify you (e.g., in‑app notice).

13) Contact

Email: victor.kingi@viba.farm