Privacy Policy
FARM is operated by Sahora Solutions Inc., a company incorporated in Ontario, Canada (“we”, “us”). This policy explains what the FARM web application and mobile app collect, why, who else sees it, and how to get it deleted. It applies to both the app and this website.
What we collect
Name and email address
Collected when an account is created, and used to identify you to your team, sign you in, and send service email such as verification, password resets and task notifications. Your name is shown to other members of your company alongside the tasks, incidents and comments you create.
Phone number
Optional. Stored on your profile so colleagues in your company can contact you. It is never shared outside your company.
Photos
The mobile app lets you attach photos to an incident as evidence of a fault or hazard. Photos are uploaded and stored on our servers and are visible to other members of your company. The app requests camera and photo library access only at the point you choose to attach a photo. We do not scan or analyse photos, and we do not read your photo library in the background.
Precise location
When you report an incident from the mobile app you may attach your current location, which is stored as a latitude and longitude on that incident so the team can find the site. Location is collected only while the app is open and only when you choose to attach it — there is no background or continuous location tracking, and declining location permission does not prevent you from reporting an incident.
Push notification token
If you enable notifications, the mobile app registers a push token and sends it to Expo's push notification service, which delivers messages to your device on our behalf. The token identifies the device, not you personally, and is used only to deliver notifications about your tasks and incidents. Deleting your account or disabling notifications removes the token.
Task comments and other content you enter
Comments on tasks, incident descriptions, checklist items and the details you record against sites and assets are free text. Treat these as visible to your company: they are stored on our servers and shown to your colleagues. Please do not enter personal information about other people that your organisation has no reason to hold.
Usage and device information
We record standard technical information such as IP address, browser or device type and timestamps, in server logs and in an activity log that shows your company who changed what. This is used for security, troubleshooting and accountability.
Permissions the mobile app asks for
Camera and photo library, to attach a photo to an incident. Location, to attach where an incident happened. Notifications, to tell you about tasks assigned to you. Each is requested at the moment you first use the feature, each is optional, and the rest of the app works if you decline.
Who we share it with
Your data is visible to other members of your company in FARM. Beyond that we share only with the service providers below, and only what each needs to do its job. We do not sell personal data, and we do not use it for advertising.
Expo
Receives the push notification token and the contents of notifications, in order to deliver them to your device.
Stripe
Handles subscription payments. Stripe receives billing details directly; we never see or store full card numbers.
Anthropic
If your plan includes the optional AI assist features, the specific incident or asset text you ask it to summarise or draft from is sent to Anthropic to generate that response. It is not used to train models. If you do not use these features, nothing is sent.
Deleting your account and data
You can delete your account yourself at any time. Sign in, open your profile from the menu, and use Delete account. You will be asked for your password to confirm.
Deleting your account removes your name, email address, phone number, profile photo, password and push notification tokens, and signs you out everywhere. Tasks, incidents and comments you created remain with your company as its operational record, but they are no longer attributed to you — they show as “Deleted user”.
If you are the last manager of your company, deleting your account also permanently deletes the company itself and everything in it, including its sites, assets, tasks, incidents, photos and the remaining member accounts. The app tells you before you confirm, and asks you to type the company name.
If you cannot sign in, or you want a copy of your data or its deletion handled for you, contact us at sahorasolutions.com/contact. We respond to deletion requests within 30 days. Backups are purged on a rolling 30-day cycle, so a deleted account may persist in encrypted backups for up to that long before ageing out.
How long we keep it
Account data is kept for as long as the account exists. Records belonging to a company are kept for as long as that company's account exists. Billing records are retained for as long as tax and accounting law requires, and cannot be deleted on request before then.
Security
Traffic is encrypted in transit. Passwords are stored hashed, never in plain text. Two-factor authentication is available on every account and we recommend enabling it. Access to a company's data is restricted to members of that company.
Children
FARM is a workplace tool and is not directed at children. We do not knowingly collect data from anyone under 16.
Your rights
You can access and correct your profile at any time from within the app, and delete your account as described above. Depending on where you live you may also have the right to a copy of your data or to object to certain processing. Contact us and we will help.
Changes and contact
If this policy changes materially we will say so in the app. For any privacy question, or to exercise any of the rights above, contact Sahora Solutions Inc. at sahorasolutions.com/contact.