Privacy Policy — Charvaha

Who we are

Charvaha (“we”, “us”) is a mobile app for farms and their customers. Farms keep records of livestock — identity, health, weight, photos, vaccinations, and ownership. Customers see the animals linked to their phone number, and the name of the farm that keeps them.

This policy explains what information the app handles, why we need it, and how we protect it. It applies to the Charvaha Android app (package com.charvaha.app) and this website. There is no separate policy inside the app.

This website does not offer an account, a sign-in, or a web version of the app. Animal records are available only in the Android app.

We do not sell or share your data

We do not sell, rent, or trade personal information. We do not share it with advertisers, data brokers, or other third parties for marketing. We do not show ads, and we do not build advertising profiles.

Information is used only to run Charvaha: to create your account, store the records you enter, show those records to the farm and the customer they belong to, and keep the app reliable.

Information we collect

You provide this information when you create an account or use the app:

Account. Full name, email address, password, phone number (with country code), account role (farm or customer), and an optional profile photo.
Farm profile. Farm name, Story / About us, address, contact email, contact phone, animal types, logo, and farm gallery photos. About us, address, contact details, and gallery stay on the farm account. Customers are not shown them.
Animal records. Details a farm enters, such as species, breed, sex, physical tag, name, owner phone number, weight, height, health and quarantine status, notes, vaccination history, update history, and photos.

The app also handles a small amount of technical information needed to operate:

Login session. A secure session so you stay logged in.
Device connectivity. Whether the device is online, so offline farm records can sync when a connection returns.
Diagnostics. If error reporting is enabled, crash and error reports that include an internal account id and role. We do not attach screenshots, session recordings, or your name, email, or phone number to those reports.

We do not collect your location, contacts, payment details, advertising id, or health information about people. Health fields in the app describe animals only.

How we use information

Create and secure your account, including email-and-password sign-in and the confirmation link we email you.
Let you reset a password by typing a one-time code from email into the app.
Verify sensitive farm actions — such as onboarding, handover, and transfers — with a one-time code sent to the relevant phone number.
Store animal, vaccination, photo, and farm records so farms can keep an accurate history.
Show a customer only the animals registered to their phone number, and the name of the farm that keeps them.
Let a farm place a phone call or open WhatsApp to the customer phone on an animal. Charvaha does not upload a contact list, and it does not show the farm’s address, contact email, or contact phone to customers.
Send animal-care alerts to this device when you allow notifications.
Diagnose crashes and fix reliability problems.

Who can see your information

Farm accounts can see the records they create, including the farm’s About us, address, contact email, contact phone, and gallery. A customer account can see animals linked to that customer’s phone number and the name of the farm that keeps them. Other users cannot browse your account, the farm’s contact details, or unrelated animals.

Phone numbers are used to match an animal to its customer and to send one-time verification codes for critical actions. They are not published as a public directory.

How we protect information

We use secured mechanisms for storage and transmission:

Encrypted transmission. Data sent between the app and our services travels over HTTPS (TLS).
Access control. Records are available only to a signed-in account that is allowed to see them.
Encrypted offline storage. When a farm works offline, pending records and photos are encrypted on the device. Database contents use SQLCipher. Photo files use AES-256-GCM. Encryption keys are kept in the Android Keystore or iOS Keychain and are not synced to other devices.
Limited diagnostics. Error reports are configured so they do not include screenshots, session replay, or default personal details beyond an internal account id and role.

No method of transmission or storage is perfectly secure. We design Charvaha so that farm and customer data stays limited to the people and systems that need it to provide the service.

Photos and device permissions

The camera and photo library are used only when you choose to add an animal photo, a farm gallery image, or a profile image. We do not access the camera or your photo library in the background.

Animal photos you upload are stored in cloud object storage and delivered over HTTPS so they can appear for the farm and the linked customer. Farm gallery photos stay with the farm account.

Notifications

If you allow notifications, Charvaha can alert this device about animal care updates. To deliver them we send your account id and a device token to OneSignal. That is only so the alert can reach this phone. We do not use it for advertising, and we do not sell that information.

You can turn notifications off in your device settings at any time. Logging out stops alerts for that account on this device.

Photo reports

A customer can report a specific photo. The report stores which photo it is, the reason, an optional note, and the account that sent it. We use that only to review the photo. If we hide a photo, customers no longer see it. We do not use reports for advertising.

Email confirmation and password reset

Creating an account sends a confirmation link to your email. Opening that link in a browser, on any device, confirms the address. The page on this website only tells you the result. It does not log you in. You then return to the Charvaha app and log in with your password.

Forgot password sends a one-time code, not a link that opens the app. You type that code into the app on the phone where you want to set the new password. The code can be read from any device that has the email.

This website

The website is static. It describes Charvaha and how to reach us. It does not create an account, store a session, or show animal records.

The contact form and the account-deletion form do not store what you type. Each one opens your email app so you can send the message yourself. Pages may load the Inter typeface from Google Fonts and Bootstrap from a content network. Those requests can include a network address. They do not include your account, animal, or farm records.

Deleting an account

You can ask us to delete your account and the personal information tied to it. Use the delete-account page or email support@charvaha.com from the address registered on the account, and include the phone number on the account so we can match it. This website cannot delete an account by itself, because it has no sign-in.

The login is removed. For a farm, the public name is replaced, and the address, contact email, contact phone, Story / About us, and logo are cleared. Animal records stay, including photos and care history, so a customer who was handed an animal still has that history. We may also keep a limited record where the law requires it.

Service providers

A few companies process data strictly so Charvaha can function. They are not allowed to sell it or use it for their own marketing.

Supabase — account authentication and the application database.
Cloudflare R2 — storage of photos and images you upload.
Sentry — crash and error diagnostics, limited as described above.
OneSignal — delivery of animal-care alerts to a device that has allowed notifications.
Google Fonts — the Inter typeface may be downloaded to display the interface. That request can include a network address. It does not include your account, animal, or farm records.

How long we keep information

We keep account and livestock records for as long as the account is active and the records are needed to provide Charvaha. Offline data that was never uploaded is stored only on that device. Clearing the app’s data or uninstalling the app removes those local copies.

How to ask for deletion is described under “Deleting an account”.

Your choices

Update your profile and farm details inside the app.
Choose which photos to add, and remove farm gallery photos you uploaded.
Log out at any time. That stops push alerts for your account on this device.
Turn notifications off in your device settings.
Request access, correction, or deletion of your personal information from the delete-account page.

Children

Charvaha is a tool for farms and adult customers. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the effective date on this page. Continued use of Charvaha after a change means the updated policy applies.

Contact

Questions about this policy, or requests to access or delete your data, can be sent to support@charvaha.com.

Please write from the email address on your Charvaha account when you ask us to look up or remove your information.