Legal

Privacy Policy

RibaFarms is built on trust. Here is exactly what data we collect, why we collect it, who we share it with, and how you stay in control.

Effective date: 1 June 2026·Last updated: 23 June 2026·Governed by: Kenya Data Protection Act 2019

1. What Data We Collect

Account & Identity Information

When you register on RibaFarms, we collect your full name, email address, phone number, and county of residence. This information is required to create and maintain your account.

Farm & Business Data

For farmers, we collect details about your farm including location, size, crops grown, and produce listings. For buyers, we collect business name, purchasing preferences, and order history.

Transaction History

We record all marketplace activity including product listings, purchases, M-Pesa transactions, escrow events, and delivery confirmations to build your financial profile and Trust Score.

Device & Usage Data

We automatically collect your IP address, browser type, device information, pages visited, and time spent on the platform to improve performance and detect fraud.

2. How We Use Your Data

Marketplace Matching

We use your profile and location data to surface relevant produce listings, connect you with verified buyers or farmers in your region, and personalize your feed.

AI-Powered Features

Our AI Crop Doctor and business tips engine use your farm data, transaction history, and regional weather patterns to generate personalized recommendations. No raw data is shared with AI providers — only anonymized prompts.

Trust Score Calculation

Transaction history, delivery ratings, dispute outcomes, and account age are used to compute your RibaFarms Trust Score, which is visible to counterparties on the marketplace.

Financial Reporting

With your explicit consent, we compile your revenue data into shareable financial reports for lending partners and SACCO applications. You control when and with whom these reports are shared.

Platform Safety & Fraud Prevention

Usage data and behavioral signals are used to detect suspicious activity, prevent fraud, and enforce our marketplace rules.

3. Third-Party Services

Supabase (Database & Authentication)

RibaFarms uses Supabase to store all user data and handle secure authentication. Data is stored on servers compliant with international data protection standards. Supabase Privacy Policy: supabase.com/privacy.

Groq AI (AI Features)

Our AI Crop Doctor and business tips are powered by Groq AI. We send anonymized, non-identifying prompts. No personal data or financial records are transmitted to Groq. Groq Privacy Policy: groq.com/privacy.

Safaricom M-Pesa (Payments)

All M-Pesa transactions are processed directly by Safaricom via the Daraja API. RibaFarms does not store your M-Pesa PIN or full transaction credentials. Safaricom Privacy Policy: safaricom.co.ke/privacy.

OpenWeatherMap (Weather Data)

We use OpenWeatherMap to provide regional weather insights to farmers. Only your county-level location is shared — never your precise GPS coordinates.

4. Data Retention & Deletion

How Long We Keep Your Data

Active account data is retained for the lifetime of your account. Transaction records are kept for 7 years to comply with Kenya Revenue Authority (KRA) requirements. AI-generated insights are refreshed every 30 days.

Requesting Data Deletion

You may request deletion of your account and associated data at any time by emailing info@ribafarms.com with the subject line "Data Deletion Request." We will process your request within 30 days. Note that transaction records required by law will be retained for the statutory period.

Data Export

You have the right to request a copy of all personal data we hold about you. Email info@ribafarms.com with the subject line "Data Export Request" and we will send you a structured export within 14 days.

5. Your Rights Under Kenyan Law

Kenya Data Protection Act 2019

RibaFarms operates in full compliance with the Kenya Data Protection Act 2019 (DPA 2019). This law grants you specific rights regarding your personal data.

Right to Access

You have the right to know what personal data RibaFarms holds about you and how it is being used.

Right to Rectification

You may correct any inaccurate or incomplete personal data by updating your profile settings or contacting us directly.

Right to Object

You may object to the processing of your personal data for marketing or profiling purposes at any time.

Right to Lodge a Complaint

If you believe your data rights have been violated, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.

Questions About This Policy?

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us.

Your Cart

0 items

Your cart is empty

Add some fresh products to get started!