🌴
Privacy Policy
Smart Palm — Palm Farm Management App
Last Updated: May 22, 2026
1. Information We Collect
We collect the following information when you use Smart Palm:
- Account Information: Email address and username for authentication.
- Farm Data: Farm names, GPS locations, and geographic boundaries you provide.
- Tree Records: Palm tree details including variety, planting date, health status, height, and photos.
- Production Data: Yield records, quality grades, pricing information, and distribution data.
- Task Data: Agricultural task descriptions, schedules, completion status, and worker assignments.
- Team Data: Supervisor and worker roles, multi-farm assignments, supervisor–worker linkage, archive (resignation) status.
- Financial Data (Premium/Trial): Expense entries, asset records, depreciation calculations, recurring expense templates, and the auto-computed palm asset valuation.
- Salary Records (Premium/Trial): Monthly salary amounts, payment history, advances, advance repayments, and the link back to Financial Management expense entries.
- Receipt Photos (Premium/Trial): Images you attach to expenses, stored in a private Supabase Storage bucket.
- Notification Preferences: Push token (for delivery), in-app notification read status, and farm-based alert settings.
- Device Information: Expo push token for delivering notifications. We do not collect device identifiers, contacts, or any other personal information.
2. How We Use Your Data
Your data is used exclusively to provide services within Smart Palm:
- Farm and tree management features
- Production analytics and yield distribution calculations
- Financial valuation, expense tracking, asset depreciation, and recurring expense generation
- Salary tracking and the automatic creation/synchronization of Financial Management expense entries when salary payments or advances are recorded
- Health monitoring and task management
- Generating in-app and push notifications for task updates, seasonal alerts, and recurring expense due dates
- Team collaboration, supervisor-worker linkage, and task assignment
- Subscription management and feature access control
Note: We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Subscription & Payment Data
Subscription management is handled through Adapty:
- Your user ID is shared with Adapty to link your subscription profile
- Adapty stores your subscription status (plan type, expiry date, renewal status)
- All payment processing is handled entirely by the Google Play Store or Apple App Store — we never receive, store, or process your credit card, banking, or payment information
- Adapty's privacy policy governs their handling of subscription data
- No financial payment data is stored on our servers
4. AI Image Processing
When you use the AI disease diagnosis feature (Premium and Trial users):
- Images are sent securely from your device to our server-side processing function (Supabase Edge Function), which then forwards them to Google's Gemini API for analysis. Your images never leave our secure infrastructure directly to third-party services from the client.
- Processing is stateless — images are analyzed in real-time and are not stored on our servers or by the AI provider after processing
- The AI API key is stored securely on the server side and is never exposed to the client application
- Diagnosis results are stored locally in your device's session for your reference in the diagnosis history
- No images are retained, archived, or used for training purposes
- AI results are for guidance only and do not replace professional agricultural consultation
5. Notifications & Seasonal Alerts
The App uses a hybrid notification system:
- In-app notifications are delivered in real-time via Supabase Realtime (WebSocket connection)
- Push notifications are delivered via the Expo Push Notification service, which uses the operating system's native push channel (FCM on Android, APNs on iOS) to reach your device when the App is in the background
- Seasonal alerts are generated automatically based on the UAE agricultural calendar for subscribed users
- Notification data (title, message, read status) is stored in our database linked to your farm
- Your Expo push token is stored only to deliver notifications and is removed when you sign out or delete your account
- You can mark notifications as read or view your notification history within the App
6. Financial & Salary Data Handling
Financial and salary information collected and processed in the App (Premium and Trial users):
- All expense entries, asset records, recurring expense templates, salary amounts, and salary transactions (payments, advances, advance repayments) are stored securely in our database, scoped to your account
- Salary payments and advances automatically create a linked entry in Financial Management under the Salaries category. Deleting either side deletes the linked entry on the other side (bidirectional sync)
- Receipt photos attached to expenses are stored in a private Supabase Storage bucket. They are NOT publicly accessible — access is granted only through short-lived signed URLs that expire after 1 hour, and only the account owner can request these URLs
- Depreciation calculations are performed locally on your device using straight-line depreciation; no third party processes your financial data
- All monetary figures (AED) are estimates and should not be relied upon for official accounting, tax filings, or payroll disputes
- We do not process any payment, banking, or external accounting integration
7. Data Storage & Security
Your data is stored securely using Supabase (PostgreSQL cloud database) and Supabase Storage (object storage):
- All data is encrypted in transit using TLS/SSL
- Row-Level Security (RLS) policies ensure you can only access your own data — every table, including expenses, assets, salaries, receipt files, and team memberships, is protected by per-user / per-farm RLS policies
- The receipt-photos bucket is private and accessible only via authenticated, short-lived signed URLs
- Authentication is handled via Supabase Auth with secure session management
- Real-time data synchronization is secured through authenticated WebSocket connections
- Local device storage (AsyncStorage) is used only for session state and language preferences
8. Location Data
Farm and tree GPS coordinates are:
- Collected only when you explicitly enter or select locations on the map
- Used solely to display your farms and trees on the GIS map within the App (Standard, Premium, and Trial users)
- Stored securely in your account's database
- Never shared with third parties or used for tracking purposes
9. Data Retention & Deletion
You have full control over your data:
- You can delete individual records (trees, production entries, tasks, expenses, assets, salary transactions) at any time
- You can delete entire farms and their associated data
- Archiving a worker (marking as resigned) hides them from the active team list but preserves their salary history and financial entries. The owner can reactivate them at any time
- You can delete your account from the Profile page. Account deletion enters a 30-day grace period during which the account can be restored simply by signing in again. After 30 days, all your data — including farms, trees, production records, tasks, team memberships, financial records, receipt photos, salary history, and subscription information — is permanently and irreversibly removed from our servers. See the account deletion page for details
- Cancelling your subscription does not delete your data — it only limits feature access to the Free plan, with media-deletion timelines disclosed in the Terms of Service
10. Third-Party Services
The App integrates with the following third-party services:
| Service | Purpose |
|---|
| Supabase | Cloud database (PostgreSQL), authentication, real-time data synchronization, and private object storage (for receipt photos) |
| Google Gemini API | AI-powered disease diagnosis image analysis (Premium/Trial only). Called server-side through a Supabase Edge Function — never directly from the client |
| Expo Push Notification Service | Delivery of background push notifications via FCM (Android) and APNs (iOS) |
| Adapty | Subscription management and billing status |
| Google Play Store / Apple App Store | Payment processing and subscription billing |
Each service has its own privacy policy governing data handling. We only share the minimum data necessary for each service to function.
11. Children's Privacy
Smart Palm is not intended for use by children under the age of 18. We do not knowingly collect personal information from minors.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes through the App. Continued use after changes constitutes acceptance of the updated policy.
13. Contact Us
Smart Palm is a product of SmartLoop Technology. If you have questions about this Privacy Policy or your data, please contact us: