Privacy Policy — Enzz FarmTrack
Effective date: 29 October 2026 (crops added the same day)
This Privacy Policy explains what information Enzz FarmTrack collects, why, who it is shared with, and the choices you have. FarmTrack is operated by Enzz Technologies Limited ("Enzz", "we", "us"), Nakuru, Kenya.
- Service: Enzz FarmTrack: the Android app, the vet web portal and the milk buyer check page
- Website: https://enzz.co.ke/farmtrack
- Contact: support@enzz.co.ke
1. What FarmTrack is
FarmTrack keeps a farm's records on the phones of the people who work there: every animal and its tag, grazing, counts, milk, feed, health, births, deaths, sales, the cash book and the end-of-day sign-off, and for crops, the fields, plantings, the tasks each crop needs, growth checks and harvests. It works without internet and sends records to the farm's account when there is a connection. The owner sees what happened on the farm, and is alerted when something does not add up.
There are three kinds of people in FarmTrack:
- The farm owner opens the farm with an access code from Enzz, and decides who joins it.
- Managers and workers are invited by the owner, by email.
- Vets and milk buyers are given a code or link by the owner, and see only what that code allows.
2. Who is responsible for the farm's records
A farm's records belong to the farm. The farm owner decides what is recorded and who sees it, and is responsible for it (the "data controller" under the Kenya Data Protection Act, 2019). Enzz stores and processes those records on the owner's behalf, to provide the service (the "data processor").
Enzz is responsible for the account information it needs to run FarmTrack itself: sign-in, devices, security records and the farm's plan.
Farm owners: FarmTrack records information about your workers, such as when they clock in, a selfie, and where their phone was when they recorded certain events. Tell your workers what is recorded and why before they start using it. Section 7 sets out what a worker can expect.
3. Information we collect
3.1 Account and sign-in
| Information | Examples | When |
|---|---|---|
| Account | Email address, display name | When the owner invites you, or when you start a farm |
| Google sign-in | Your Google account's email, name and Google account ID | Only if you sign in with Google (Gmail addresses) |
| Team details | Role (owner, manager, worker), phone number, National ID number, assigned groups, shift days and hours, notes | Entered by the owner or a manager, optional except the role. Only the owner sees a National ID number |
| Sign-in codes | A one-time 6-digit code sent to your email, stored only in scrambled form | Each sign-in |
| Your PIN | A 4-digit PIN that unlocks the app | Stored only on your phone, scrambled. It is never sent to us |
FarmTrack has no passwords. You sign in with a code sent to your email, or with Google.
3.2 Your phone
| Information | Purpose |
|---|---|
| A device identifier created by the app, the phone's model, Android version and app version | So the owner can see and approve which phones are used, and block a lost one |
| Whether the phone looks rooted or is an emulator | Warns the owner. It never blocks you |
| A notification token (Firebase Cloud Messaging) | To send alerts and the daily summary to your phone |
| Sessions and sign-in attempts, with IP address | Security: ending sessions, limiting repeated attempts |
3.3 The farm's records
What the people on the farm record, for example:
- Animals: tag numbers, species, breed, sex, dates, weights, groups, where an animal came from, and photos of it.
- Daily work: grazing out and in, head counts, the daily checklist, feed given and leftovers, milk per cow and session, and the end-of-day summary signed with a PIN.
- Health and breeding: sick reports with symptoms and photos, treatments, medicines, withdrawal periods, matings, pregnancies, births and deaths with their photos.
- Money: sales and their prices, buyers, exit passes, the cash book, feed and vet costs. Workers never see prices, money or buyers.
- Vets: a vet's name, licence number and phone number, as entered by the owner, and what the vet records.
- Milk buyers: a buyer's name and phone number, and the quantities they report receiving.
- Crops: fields (name, area, soil, water, and the location if you record it), the farm's crops and their calendars, plantings, crop tasks (who did them, when, the inputs used, hours and people), growth checks (pests, disease, how serious) and harvests.
- Advisers: the name, kind (agronomist, vet, extension officer, KALRO guide), organisation, phone and email of the people whose advice the farm follows, as entered by the owner or a manager.
3.4 Photos and location
- Photos are taken only when you press the camera button: an animal, a sick animal, a death (whole animal, tag, surroundings), a receipt, a crop task, a growth check or a harvest, or a selfie when clocking in. Photos are compressed on the phone and kept in the farm's private storage.
- Location (GPS) is read only at the moment you record certain events: clocking in and out, taking a group out to graze and bringing it back, a death report, an animal leaving through the gate, recording a crop task as done or skipped, and a growth check. A field's location is recorded only when someone taps Record the location here. FarmTrack does not follow your location in the background or between these moments.
3.5 Anonymous messages
A manager or worker can send the owner an anonymous message. We do not store who sent it: no name, account, phone or device is kept with the message, and the message is not written to the audit log under the sender's name. Avoid writing details in the message that would identify you.
3.6 The audit log
Every change to a record is kept: who made it, when, from which phone, what it was before and what it became. Nobody can edit or delete the audit log, including the owner and Enzz staff using the app. This is what lets an owner trust the records.
3.7 What we do not collect
- No contacts, call logs, SMS or files from your phone.
- No advertising identifiers, and no advertising or third-party analytics trackers.
- No location outside the moments listed in 3.4.
4. How we use information
- to run the farm's account: sync records between phones, show the dashboard, registers and reports, and keep each farm's records separate from every other farm's;
- to sign you in and keep the account safe: emailing codes, approving and blocking phones, ending sessions;
- to send alerts and the daily summary: a missing animal, an exit without a pass, feed running low, a milk difference, an unusual pattern;
- to check records against each other and flag what does not add up (counts that do not match, milk that differs from a buyer's figure, unusual patterns). These are simple rules written by us. FarmTrack does not use artificial intelligence to judge people or animals;
- to apply the farm's plan (trial, paid, read-only) and team size;
- to keep nightly backups so a farm's records can be recovered;
- to provide support, fix problems and prevent misuse;
- to comply with legal obligations.
We do not sell information, use it for advertising, or look at a farm's records except to provide the service, to fix a problem the owner reports, or where the law requires it.
5. Who sees what inside a farm
| Person | Sees |
|---|---|
| Owner | Everything on the farm, including money, the audit log, anonymous messages and National ID numbers |
| Manager | The farm's records, team and cash book, without National ID numbers, the audit log or anonymous messages |
| Worker | The animals, the crops and fields, the crop tasks given to them or to anyone, and their own records. Never prices, money, buyers or financial reports |
| Vet | Only the animals and records the owner's code allows, for as long as the code allows |
| Milk buyer | Only their own monthly delivery check |
The lock screen and notifications never show money amounts.
6. Who we share information with
| Recipient | What is shared | Purpose |
|---|---|---|
| Railway (Railway Corporation) | The service, its database, photos and encrypted backups | Hosting |
| Brevo (Sendinblue SAS) | Your email address and the content of sign-in and summary emails | Sending emails |
| Google Firebase Cloud Messaging | A notification token and the alert's short text | Sending notifications to your phone |
| Google Sign-In | Your Google sign-in request | Signing in with a Gmail address, only if you use it |
We also share information when the law requires it, or in a business transfer, in which case this policy continues to apply.
The farm owner may also share records themselves, for example a report sent by WhatsApp or email, or a register printed for an inspector. Once shared, that copy is outside FarmTrack.
7. If you work on a farm that uses FarmTrack
- Your employer, the farm owner, decides what is recorded. Questions about how your records are used on the farm go to them first.
- Your clock-in selfie and location, and the records you make, are visible to the owner (and managers, except your National ID number).
- You can correct your own entry within 15 minutes. After that, ask the owner. Records are never deleted; a wrong one is voided with a reason, so the history stays honest for everyone, including you.
- Anonymous messages are anonymous (3.5).
- If you leave, the owner deactivates you. Your sessions end at once. The records you made stay with the farm, because they are the farm's records.
8. Security
- Each farm's records are separated in the application and enforced again in the database itself, so one farm can never read another's.
- Data is encrypted in transit. Photos are private and shown only through short-lived links.
- Sign-in codes expire after 10 minutes and work once; repeated attempts are limited.
- The app locks after 2 minutes without use, and opens with your PIN or fingerprint.
- A worker's second phone needs the owner's approval. A lost phone can be blocked at once.
- Records on the phone are deleted when you sign out.
- Backups are encrypted (AES-256) before they leave the server.
No system is completely secure. Keep your PIN to yourself, and tell the owner at once if your phone is lost.
9. How long we keep information
- Farm records are kept while the farm's account is open. Records are not deleted one by one: a mistake is voided, and the audit log keeps the history.
- When a farm's plan ends, the farm becomes read-only: nothing is lost, and records can be viewed and exported.
- When a farm is closed at the owner's request, we give the owner an export of the farm's records and photos, then delete them within 30 days, apart from what we must keep by law.
- Backups are kept for 30 days and then deleted.
- Sign-in codes expire after 10 minutes. Session and security records are kept while the account is open.
- Records on your phone are deleted when you sign out or switch farm.
10. Your choices and rights
- Notifications: turn them off in the app (Settings → Notifications) or in Android settings.
- Photos and location: Android asks before FarmTrack can use the camera or location, and you can change this in Android settings. Some records cannot be saved without them, such as a death report without photos.
- Export: the owner can export registers and reports (PDF, Excel, CSV) at any time, and can ask us for a full export of the farm.
- Close a farm: the owner emails support@enzz.co.ke from the owner's email address.
- Leave a farm: ask the owner to deactivate you.
Under the Kenya Data Protection Act, 2019 you also have the right to be informed, to access your data, to object to or restrict processing, to have inaccurate data corrected, to have data erased, and to receive your data in a portable format. For records a farm keeps about you, the farm owner is the first contact; we help them answer. You can also contact support@enzz.co.ke; we respond within 30 days. You may complain to the Office of the Data Protection Commissioner of Kenya (https://www.odpc.go.ke).
11. International transfers
Our hosting, email and notification providers may process data outside Kenya. Where this happens we rely on safeguards permitted under the Kenya Data Protection Act, 2019.
12. Children
FarmTrack is for adults working on or with a farm. It is not for anyone under 18, and we do not knowingly collect information from children.
13. Changes to this policy
We may update this policy. We will change the effective date and, for significant changes, tell farm owners in the app or by email.
14. Contact us
Enzz Technologies Limited, Nakuru, Kenya Email: support@enzz.co.ke Website: https://enzz.co.ke