Privacy Notice
In short. TunasimCare is a farm-records app. If you use it because your farm gave you a login, your farm is in charge of your data and we (Tunasim) keep and process it on the farm's behalf. We do not sell data and we do not show advertising. We use a small number of service providers to run the app, named below. You can ask to see, correct or delete your data — start with your farm's admin, or write to us.
- 1. Who we are
- 2. Two kinds of people
- 3. What is collected and why
- 4. Who it is shared with
- 5. Where it is stored
- 6. Photos and AI
- 7. How long we keep it
- 8. Your rights
- 9. Delete your account
- 10. Security
- 11. Changes and complaints
1. Who we are
Tunasim Farms (“Tunasim”, “we”) is a horticulture business in Ghana that also makes TunasimCare, a web app (care.tunasim.com) and phone app used by farms to keep their records: people, tasks, stock, harvests, sensors and compliance. Questions about this notice: contact.farms@tunasim.com.
2. Two kinds of people
Staff of a farm that uses TunasimCare. Your farm decided to use the app and created your login. Under Ghana's Data Protection Act, 2012 (Act 843) your farm is the data controller — it decides what is recorded about you and why — and Tunasim is its data processor, acting on the farm's instructions under the Terms of Service. For questions about your own records, your first stop is your farm's admin.
Farm owners and admins, buyers who use a farm's customer portal, and visitors to tunasim.com. For your account details, our correspondence with you and this website, Tunasim is the controller.
3. What is collected and why
| Data | Why it is kept |
|---|---|
| Your name, email address, phone number, role on the farm, and a profile photo if you add one | To run your login and show who did what |
| Employment details a farm admin records: start date, date of birth, nationality, national ID number, next of kin, training and certificates, and any fitness-to-work or medical notes the farm chooses to record | Labour law and the certification standards the farm works to (for example GLOBALG.A.P.). Medical information is sensitive data: the farm should only record it with your agreement or where the law requires it, and it is shown only to farm admins |
| Work records: tasks, spray and fertiliser applications, harvests, stock movements, inspections, forms you fill in, and photos you attach | The farm's traceability and compliance records — what was done, by whom, when |
| Plant photos you send for diagnosis, and the field they were taken in | To suggest what may be wrong with the plant (see section 6) |
| Farm location, field boundaries and sensor readings | Weather, maps and the farm's own monitoring |
| Questions you type to the AI assistant, and the farm context it is given | To answer you |
| How the app is used: which pages, how often, from which farm, and an approximate location of the device (rounded, not exact) | To size each farm's allowance, keep the service reliable, and improve it |
| A push-notification token for your phone | To send you alerts you have turned on |
| Buyers: name, contact details, orders and complaints | To fulfil orders and handle recalls |
We do not use cookies for advertising or tracking. The app keeps your sign-in and a copy of your farm's records on your device so it works when the signal is poor.
4. Who it is shared with
Never sold. Shared only with the providers we need to run the app, each of them bound to use it only for that:
- Supabase — the database, file storage and sign-in service that holds everything.
- Vercel — serves the web app and this website.
- Google (Gemini) — reads plant photos for diagnosis and, on the web app, photos of product labels so the name can be filled in. The photo and the crop name are sent; your name and the exact location are not.
- Microsoft Azure (DeepSeek) — answers the AI assistant and writes the daily farm briefing. It receives the question and the farm records needed to answer it, which can include staff names.
- Resend — sends the app's emails (welcome, alerts, order updates).
- OpenWeather, MapTiler and Esri — weather for the farm's location and map tiles for its fields.
- Apple and Google — deliver push notifications to phones.
We will also disclose data if the law requires it. If we ever add a provider that will hold personal data, we will update this list and tell farm admins first.
5. Where it is stored
The database and files are hosted by Supabase on Amazon Web Services in the United States (us-east-1). The providers in section 4 process data in their own regions. Ghana's Act allows this where the recipient protects the data as the Act requires; our agreements with these providers require that.
6. Photos and AI
Plant photos are sent to Google's Gemini model only when you press Diagnose, after you have agreed to it in the app. Label photos on the web app are sent only when you press the scan icon, and are not stored. AI answers are suggestions for a person to check, not decisions. We use paid, business tiers of these services, under which the providers state they do not use your data to train their models.
7. How long we keep it
Your farm's records are kept for as long as the farm uses TunasimCare, because they are the farm's audit trail; certification standards typically require traceability records to be kept for several years. When a farm leaves, its records are deleted after the wind-down period in the Terms. When your account is deleted, your login and personal details are removed and your name in past work records is replaced with a placeholder; the work records themselves stay, because they are the farm's history.
8. Your rights
Under Act 843 you may ask what is held about you, ask for it to be corrected or deleted, and object to how it is used. For records your farm keeps about you, ask your farm's admin, who can do most of this inside the app; the farm must answer within 40 days. For anything Tunasim holds as controller, or if your farm does not respond, write to contact.farms@tunasim.com. You can also complain to Ghana's Data Protection Commission.
9. Delete your account
In the phone app: More → Delete my account. On the web: ask your farm's admin, who can deactivate you, or email contact.farms@tunasim.com with the email address you sign in with and we will do it within 30 days. Deleting your account removes your login, name, contact details and profile photo; your farm's work records remain, with your name replaced by a placeholder (section 7).
10. Security
Data travels encrypted (HTTPS) and is stored encrypted. Each farm's records are kept apart from every other farm's, and each person sees only what their role on their farm allows. Sign-ins use a password that you choose at first login and can reset yourself. If we learn of a breach that affects you, we will tell the Data Protection Commission and the people affected as soon as practicable.
11. Changes and complaints
If we change this notice in a way that matters, we will tell farm admins by email and update the date above. Complaints or questions: contact.farms@tunasim.com, or the Data Protection Commission of Ghana.