Privacy Policy
Smart Palm — Palm Farm Management App
Last Updated: September 4, 2026
1. Information We Collect
We collect the following information when you use Smart Palm:
- Account Information: Email address and username for authentication.
- Farm Data: Farm names, GPS locations, and geographic boundaries you provide.
- Tree Records: Palm tree details including variety, planting date, health status, height, and photos.
- Production Data: Yield records, quality grades, pricing information, and distribution data.
- Task Data: Agricultural task descriptions, schedules, completion status, and worker assignments.
- Team Data: Supervisor and worker roles, multi-farm assignments, supervisor–worker linkage, archive (resignation) status.
- Financial Data (Premium/Trial): Expense entries, asset records, depreciation calculations, recurring expense templates, and the auto-computed palm asset valuation.
- Salary Records (Premium/Trial): Monthly salary amounts, payment history, advances, advance repayments, and the link back to Financial Management expense entries.
- Receipt Photos (Premium/Trial): Images you attach to expenses, stored in a private Supabase Storage bucket.
- Worker Documents (Premium/Trial): Files the account owner uploads about their workers (ID or residency and the like) with expiry dates for reminders. This is third-party data, not the account owner's own data — see the "Other People's Data" clause in the Terms of Service.
- Worker Leave Records: Type, dates, and number of days.
- Worker Login Credentials: A short code and password the owner generates so the worker can sign in without an email; passwords are stored hashed and are never kept in readable form.
- Revenues: Farm revenue amounts, their sources, and dates.
- Per-Palm Operations Log: Fertilizer name and amount per palm, pollen source, number of bunches, harvest weight, quality grade, and sale price per kilo.
- Agricultural Calendar: The annual plan the user writes; it is linked to their account and applies to all their farms, not a single farm.
- Favorite Palms: A follow-up marker visible to everyone working on that farm.
- Date-Recognition Contributions: The images, the result, and any correction.
- Notification Preferences: Push token (for delivery), in-app notification read status, and farm-based alert settings.
- Device Information: Expo push token and device display language — so notifications reach the user in their language. We do not collect device identifiers, contacts, or any other personal information.
- Usage Data: We record which screens were opened and which main buttons were pressed, linked to your account, to know which features are actually used and to improve them. We record nothing about your farm's content — no names, numbers, or palm identifiers — only the screen or button name.
2. How We Use Your Data
Your data is used exclusively to provide services within Smart Palm:
- Farm and tree management features
- Production analytics and yield distribution calculations
- Financial valuation, expense tracking, asset depreciation, and recurring expense generation
- Salary tracking and the automatic creation/synchronization of Financial Management expense entries when salary payments or advances are recorded
- Health monitoring and task management
- Generating in-app and push notifications for task updates, seasonal alerts, and recurring expense due dates
- Team collaboration, supervisor-worker linkage, and task assignment
- Subscription management and feature access control
Note: We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Subscription & Payment Data
Subscription management is handled through Adapty:
- Your user ID is shared with Adapty to link your subscription profile
- Adapty stores your subscription status (plan type, expiry date, renewal status)
- All payment processing is handled entirely by the Google Play Store or Apple App Store — we never receive, store, or process your credit card, banking, or payment information
- Adapty's privacy policy governs their handling of subscription data
- No financial payment data is stored on our servers
4. AI Image Processing
The App uses AI in two different features that handle images differently:
(a) Palm disease diagnosis — Premium and Trial
- The image is sent securely from your device to a server-side function (Supabase Edge Function) and then forwarded to Google's Gemini API for analysis — it does not go from your device directly to any external party.
- Processing is stateless: the image is analyzed in real time and is not stored by us or by the AI provider after processing.
- The API key is stored securely on the server and is never exposed to the app.
- The diagnosis result is saved in your device's session for reference in the diagnosis history.
- No diagnosis image is retained, archived, or used for training.
(b) Date variety recognition — available to everyone, no subscription
- Labeled "experimental" in the App, and it works differently: the image the user sends is stored.
- It is uploaded to a private storage bucket, and a record is kept with the recognition result.
- A human reviewer on the team may view the images to confirm or correct the variety and to improve the variety list — review is manual, not only automated.
- If the user chooses to contribute a correction, their contribution may be used to improve recognition for all users. Contributing is optional, and the App indicates when it happens.
- Note to the user: photograph the date alone — no people, no documents, nothing private.
- The user sees their contributions inside the App, and they are deleted when the account is deleted.
The results of both features are for guidance only and do not replace professional agricultural consultation.
5. Notifications & Seasonal Alerts
The App uses a hybrid notification system:
- In-app notifications are delivered in real-time via Supabase Realtime (WebSocket connection)
- Push notifications are delivered via the Expo Push Notification service, which uses the operating system's native push channel (FCM on Android, APNs on iOS) to reach your device when the App is in the background
- Reminders come from the annual plan the user writes themselves in the Agricultural Calendar — there is no longer a fixed seasonal table; reminders for its items are scheduled on your device and arrive even when the App is closed
- Notification data (title, message, read status) is stored in our database linked to your farm
- Your Expo push token and your device display language are stored to deliver notifications in your language, and both are removed when you sign out or delete your account
- You can mark notifications as read or view your notification history within the App
6. Financial & Salary Data Handling
Financial and salary information collected and processed in the App (Premium and Trial users):
- All expense entries, asset records, recurring expense templates, salary amounts, and salary transactions (payments, advances, advance repayments) are stored securely in our database, scoped to your account
- Salary payments and advances automatically create a linked entry in Financial Management under the Salaries category. Deleting either side deletes the linked entry on the other side (bidirectional sync)
- Receipt photos attached to expenses are stored in a private Supabase Storage bucket. They are NOT publicly accessible — access is granted only through short-lived signed URLs that expire after 1 hour, and only the account owner can request these URLs
- Depreciation calculations are performed locally on your device using straight-line depreciation; no third party processes your financial data
- All monetary figures (AED) are estimates and should not be relied upon for official accounting, tax filings, or payroll disputes
- We do not process any payment, banking, or external accounting integration
7. Data Storage & Security
Your data is stored securely using Supabase (PostgreSQL cloud database) and Supabase Storage (object storage):
- All data is encrypted in transit using TLS/SSL
- Row-Level Security (RLS) policies ensure you can only access your own data — every table, including expenses, assets, salaries, receipt files, and team memberships, is protected by per-user / per-farm RLS policies
- The receipt-photos bucket is private and accessible only via authenticated, short-lived signed URLs
- Authentication is handled via Supabase Auth with secure session management
- Real-time data synchronization is secured through authenticated WebSocket connections
- Local device storage (AsyncStorage) is used for session state and language preferences, your last-verified subscription level (so the app works offline), a cache of your farms list, palms logged offline awaiting upload, the app version you chose to skip, and whether you have seen the trial-expiry notice — all of which stays on your device and is not sent
8. Location Data
Farm and tree GPS coordinates are:
- Collected only when you explicitly enter or select locations on the map
- Used solely to display your farms and trees on the GIS map within the App (Premium and Trial users)
- Stored securely in your account's database
- Never shared with third parties or used for tracking purposes
9. Data Retention & Deletion
You have full control over your data:
- You can delete individual records (trees, production entries, tasks, expenses, assets, salary transactions) at any time
- You can delete entire farms and their associated data
- Archiving a worker (marking as resigned) hides them from the active team list but preserves their salary history and financial entries. The owner can reactivate them at any time
- You can delete your account from the Profile page. Account deletion enters a 30-day grace period during which the account can be restored simply by signing in again. After 30 days, all your data — including farms, trees, production records, tasks, team memberships, financial records, receipt photos, salary history, and subscription information — is permanently and irreversibly removed from our servers. See the account deletion page for details
- Cancelling your subscription does not delete your data — it only limits feature access to the Free plan, with media-deletion timelines disclosed in the Terms of Service
- Notifications older than 60 days are deleted automatically
- Date-recognition images and their records are deleted when you delete your account
- A correction you chose to contribute, however, may already have been used to improve the shared variety list; that improvement cannot be traced back to you and is not removed when you delete your account
10. Third-Party Services
The App integrates with the following third-party services:
| Service | Purpose |
| Supabase | Cloud database (PostgreSQL), authentication, real-time data synchronization, and private object storage (for receipt photos) |
| Google Gemini API | AI-powered disease diagnosis image analysis (Premium/Trial only). Called server-side through a Supabase Edge Function — never directly from the client |
| Expo Push Notification Service | Delivery of background push notifications via FCM (Android) and APNs (iOS) |
| Adapty | Subscription management and billing status |
| Google Play Store (Android) · Apple App Store (iPhone) | Payment processing and subscription billing |
| Sign in with Google / Apple | Two optional sign-in methods for creating an account. We receive only the identifier and email required to create the account |
Each service has its own privacy policy governing data handling. We only share the minimum data necessary for each service to function.
11. Children's Privacy
Creating an account and subscribing both require you to be 18 or older, because each is a contract. The 12+ content rating describes the content itself, not who owns the account. We do not knowingly collect personal information from anyone under 18.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes through the App. Continued use after changes constitutes acceptance of the updated policy.
13. Contact Us
Smart Palm is a product of SmartLoop Technology. If you have questions about this Privacy Policy or your data, please contact us: