Privacy Policy

Introduction

The Farmers Data Hub (FDH), operated under the Food and Agriculture Organization (FAO) in Uganda, provides the Tobacco Free Farm Monitor (TFM) web platform and the TFF Field App. This Privacy Policy explains what information we handle when authorized staff and partners use these systems to deliver the Tobacco Free Farming program. By using TFM or the TFF Field App, you agree to the practices described here.

What We Collect

We collect only the information needed to operate the program, including:

Account details — name, username, email, phone number, role, assigned partner organization, and profile picture.
Field records — farmer profiles, training records, FFS group activity, VSLA savings and loan activity, event attendance, demo plots, input distributions, and adoption records.
Location data — GPS coordinates you choose to capture for farms, plots, and field activities.
Device & sync metadata — device name, sync timestamps, and pending upload status used to keep offline work consistent.
Audit information — activity logs that record key actions for security, accountability, and reporting.

How We Use Data

Data is used to manage field operations, support farmers, monitor program delivery, verify records, prepare reports for FAO and approved partners, and synchronize offline field work with the authorized TFF backend. We do not use your data for advertising, and we do not sell user or farmer data to third parties.

Offline Storage & Sync

The TFF Field App stores working records locally on your device so field teams can keep working without an internet connection. Pending records are uploaded to the secure backend when connectivity is available and a sync is started. Some records depend on parent records (such as cycles, meetings, farmers, groups, or partners); if a parent upload fails, dependent records may be held on the device until the parent record synchronizes successfully.

Access & Sharing

Access is limited to authorized users, administrators, and approved program partners according to their assigned roles and permissions. Data may be shared with FAO and government or partner stakeholders strictly for program monitoring, reporting, and compliance. We do not sell personal data.

Data Security

We apply role-based access controls, authenticated API tokens, encrypted transport (HTTPS), and audit logging to protect data. Passwords are stored using one-way hashing and are never visible to other users. While no system can guarantee absolute security, we take reasonable measures to safeguard your information. Please keep your credentials private and report lost devices or suspected unauthorized access immediately.

Your Choices & Rights

You can request correction of inaccurate account data through support. You may also request a copy of the personal account information we hold about you. Depending on your role, some program records are retained for audit, reporting, and legal compliance even after individual access is removed.

Account Deletion

You can delete your mobile account directly from the TFF Field App at any time:

Open the app and go to Settings → Account → Delete account.
Confirm your password and type DELETE to confirm the request.

Deleting your account immediately signs you out, revokes mobile access tokens, and removes your personal account details from active login (your name, email, phone, and profile picture are cleared and the account is deactivated and soft-deleted). Program records that were already synchronized to the backend may remain for audit, reporting, and legal compliance, in anonymized or attributed form as required by the program. To request assistance with deletion or a full data request, email support@fao-fdh.ug.

Account Deletion Instructions