Privacy Policy

Effective date: March 23, 2026

Deharhi ("we", "our", or "the app") is a farm operations management application designed to help farm owners track workers, attendance, payments, harvests, expenses, and other farm activities. This Privacy Policy explains what data the app collects, how it is stored, and your rights regarding that data.

1. Data We Collect

Deharhi collects the following categories of data, all provided directly by you:

• Account information (optional): If you choose to create an account for cloud sync, we collect your email address for authentication purposes.
• Worker information: Names, phone numbers, daily wage rates, and opening balances of workers you add to the app.
• Attendance records: Daily attendance status (present, half-day, absent, leave) for each worker.
• Financial records: Payments to workers, farm expenses, harvest records, and sale records.
• Farm information: Field names, crop types, and related farm configuration data.
• App settings: Your preferences within the app, such as display settings.

We do not collect:

• Location data or GPS coordinates
• Contact lists or address books
• Photos, camera data, or biometric data
• Device identifiers for advertising purposes
• Usage analytics or behavioural tracking data
• Data from other apps on your device

2. How Data Is Stored

Deharhi is designed as an offline-first application. By default, all data is stored locally on your device in an encrypted database using SQLCipher (AES-256 encryption). The encryption key is stored in your device's secure storage (iOS Keychain or Android Keystore).

If you choose to enable cloud sync by creating an account, your data is also stored on our cloud infrastructure powered by Supabase. Cloud-stored data is protected by Row Level Security (RLS) policies that ensure only you can access your own data. Data is transmitted over HTTPS (TLS encryption in transit).

3. How Data Is Used

Your data is used solely for the purpose of providing the Deharhi app's functionality to you:

• Displaying worker lists, attendance records, and financial summaries
• Calculating payment totals, weekly net amounts, and other financial metrics
• Synchronizing data across your devices (only if you opt in to cloud sync)
• Authenticating your account (only if you create one)

We do not sell, share, or transfer your data to third parties for advertising, marketing, or any other purpose. We do not use your data for profiling or automated decision-making.

4. Third-Party Services

If you enable cloud sync, Deharhi uses the following third-party services:

• Supabase (database and authentication): Stores your synced data and handles account authentication. Supabase's privacy policy applies to data stored on their infrastructure.
• Resend (email delivery): Used to send authentication emails (magic links, password reset). Only your email address is shared with Resend for this purpose.

If you do not create an account and use Deharhi in local-only mode, no data is transmitted to any third-party service.

5. Data Retention

Local data remains on your device for as long as you keep the app installed. If you uninstall the app, all local data is permanently deleted by the operating system.

Cloud-synced data (if applicable) is retained on our servers for as long as your account is active. You may request deletion of your cloud data at any time (see Section 7).

6. Data Security

We implement the following security measures to protect your data:

• Local database encryption using SQLCipher (AES-256)
• Encryption keys stored in OS-level secure storage (Keychain / Keystore)
• HTTPS/TLS for all network communication
• Row Level Security on cloud database ensuring owner-scoped data access
• Rate limiting and sync guards to prevent abuse
• App-switcher privacy overlay to prevent data exposure in task switcher
• Session tokens stored in OS-level secure storage (not in plain text)

7. Your Rights

You have the following rights regarding your data:

• Access: All your data is visible to you within the app at all times.
• Deletion: You can delete individual records within the app. To delete all cloud-synced data, contact us at the email below.
• Portability: The app includes a diagnostics export feature that allows you to export your data. Personal identifiers are redacted in exports by default for privacy.
• Withdrawal of consent: You can stop using cloud sync at any time by signing out. The app continues to work fully in local-only mode.

8. Children's Privacy

Deharhi is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided data through the app, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

10. Contact Us

If you have questions about this Privacy Policy, your data, or wish to request data deletion, please contact us:

Email: hello@deharhi.com