TunasimCarePrivacy Notice
In short. TunasimCare is a farm-records app. If you use it because your farm gave you a login, your farm is in charge of your data and we (Tunasim) keep and process it on the farm's behalf. We do not sell data and we do not show advertising. We use a small number of service providers to run the app, named below. You can ask to see, correct or delete your data — start with your farm's admin, or write to us.
- 1. Who we are
- 2. Two kinds of people
- 3. What is collected and why
- 4. Who it is shared with
- 5. Where it is stored
- 6. Photos and AI
- 7. How long we keep it
- 8. Your rights
- 9. Delete your account
- 10. Security
- 11. Changes and complaints
1. Who we are
Tunasim Farms (“Tunasim”, “we”) is the trading name of Tunasim Limited Company, a company registered in Ghana (registration no. CS015632017). It is a horticulture business that also makes TunasimCare, a web app (care.tunasim.com) and phone app used by farms to keep their records: people, tasks, stock, harvests, sensors and compliance. Questions about this notice: contact.farms@tunasim.com.
2. Two kinds of people
Staff of a farm that uses TunasimCare. Your farm decided to use the app and created your login. Under Ghana's Data Protection Act, 2012 (Act 843) your farm is the data controller — it decides what is recorded about you and why — and Tunasim is its data processor, acting on the farm's instructions under the Terms of Service. For questions about your own records, your first stop is your farm's admin.
Farm owners and admins, buyers who use a farm's customer portal, and visitors to tunasim.com. For your account details, our correspondence with you and this website, Tunasim is the controller.
3. What is collected and why
| Data | Why it is kept |
|---|---|
| Your name, email address, phone number, role on the farm, and a profile photo if you add one | To run your login and show who did what |
| Employment details a farm admin records: start date, date of birth, nationality, national ID number, next of kin, training and certificates, and any fitness-to-work or medical notes the farm chooses to record | Labour law and the certification standards the farm works to (for example GLOBALG.A.P.). Medical information is sensitive data: the farm should only record it with your agreement or where the law requires it, and it is shown only to farm admins |
| Work records: tasks, spray and fertiliser applications, harvests, stock movements, inspections, forms you fill in, and photos you attach | The farm's traceability and compliance records — what was done, by whom, when |
| Plant photos you send for diagnosis, and the field they were taken in | To suggest what may be wrong with the plant (see section 6) |
| Farm location, field boundaries and sensor readings | Weather, maps and the farm's own monitoring |
| Questions you type to the AI assistant, and the farm context it is given | To answer you |
| A record of each request the web app or phone app makes to our server: which feature, when, from which farm and account, and whether it worked | To size each farm's allowance and keep the service reliable, and to show your farm's admin how the app is used |
| On the web app only: which pages are opened and for how long, and which actions are taken | To size each farm's allowance, keep the service reliable and improve it, and to show your farm's admin how the app is used. Neither app reads your device's location, and the phone app sends us no page or tap analytics |
| A push-notification token for your phone, with its platform and app version | To send you alerts you have turned on |
| Buyers: name, contact details, orders and complaints | To fulfil orders and handle recalls |
We do not use cookies for advertising or tracking. The app keeps your sign-in and a copy of your farm's records on your device so it works when the signal is poor.
Visits to tunasim.com
We count visits to tunasim.com to see which pages are useful. For each page opened we record the page, the time, the website or campaign link that sent you there, your country, region and city (worked out from your IP address as the page is served), the type of device, browser and system, a rough screen size, how long the page was open and how far down it you scrolled, and whether you sent the contact form, pressed a main button or followed a link to another site.
This uses no cookies and stores nothing on your device. Your IP address and your browser’s full identifying details are not kept: they are combined with a random code that changes every day and only the result is stored, so the record does not name you and visits on different days cannot be linked together. If your browser sends the Global Privacy Control signal, nothing is counted. Visit records are deleted after 25 months.
4. Who it is shared with
Never sold. Shared only with the providers we need to run the app, each of them bound to use it only for that:
- Supabase — the database, file storage and sign-in service that holds everything.
- Vercel — serves the web app and this website, and tells us a visitor's country, region and city from their IP address (section 3).
- Google (Gemini) — reads plant photos for diagnosis and, on the web app, photos of product labels so the name can be filled in. The photo and the crop name are sent; your name and the exact location are not.
- Google (ML Kit) — on Android phones, reads the text and barcodes on a product label on the phone itself when you tap the scan icon; the photo never leaves the phone. ML Kit sends Google basic diagnostics — the phone model and system version, the app's name and version, an installation identifier and how the reading performed — to keep the feature working. On iPhones, Apple's built-in text recognition is used and nothing is sent.
- Microsoft Azure AI Foundry (DeepSeek) — answers the AI assistant, writes the daily farm briefing, and writes the plain-language summary of a plant diagnosis. For the assistant and the briefing it receives the question and the farm records needed to answer it, which can include staff names; for a diagnosis it receives the field name, crop, growth stage and the findings — never the photo.
- Resend — sends the app's emails (welcome, password resets, alerts, order updates, account deletion).
- OpenWeather, MapTiler and Esri — weather for the farm's location and map tiles for its fields.
- Expo — relays push notifications to Apple and Google, and delivers updates to the phone app. For each notification it receives the phone's push token, the title and text (task titles with their field and due date, sensor names with alert headlines, stock item names with expiry dates or stock levels — never notes or contact details) and the internal record references the app needs to open it. When the phone app checks for an update, Expo receives an installation identifier.
- Apple and Google — deliver push notifications to phones.
We will also disclose data if the law requires it. If we ever add a provider that will hold personal data, we will update this list and tell farm admins first.
5. Where it is stored
The database and files are hosted by Supabase on Amazon Web Services in the United States (us-east-1). The providers in section 4 process data in their own regions. Ghana's Act allows this where the recipient protects the data as the Act requires; our agreements with these providers require that.
6. Photos and AI
Plant photos are sent to Google's Gemini model only when you press Diagnose, after you have agreed to it in the app; the findings — never the photo — then go to Microsoft Azure AI Foundry, which writes the summary. You are asked once on each phone or browser you use, and you can withdraw that consent at any time under Settings → Photo diagnosis consent → Withdraw consent (on the web app, Settings → Security → Photo diagnosis consent); Diagnose then asks again before another photo is sent. Label photos on the web app are sent only when you press the scan icon, and are not stored; the phone app reads labels on the phone itself (section 4). AI answers are suggestions for a person to check, not decisions. We use paid, business tiers of these services, under which the providers state they do not use your data to train their models.
7. How long we keep it
Your farm's records are kept for as long as the farm uses TunasimCare, because they are the farm's audit trail; certification standards typically require traceability records to be kept for several years. When a farm leaves, its records are deleted after the wind-down period in the Terms. When your account is deleted, your login and personal details are removed, and your name is replaced with a placeholder wherever a work record is linked to your account; a name someone typed by hand into a note or a form answer stays as they wrote it. The work records themselves stay, because they are the farm's history. Records of visits to tunasim.com (section 3) are deleted after 25 months.
8. Your rights
Under Act 843 you may ask what is held about you, ask for it to be corrected or deleted, and object to how it is used. For records your farm keeps about you, ask your farm's admin, who can do most of this inside the app; the farm must answer within 40 days. For anything Tunasim holds as controller, or if your farm does not respond, write to contact.farms@tunasim.com. You can also complain to Ghana's Data Protection Commission.
9. Delete your account
In the phone app: Settings → Delete my account. Without the app, or from the web: email contact.farms@tunasim.com with the email address you sign in with and we will delete your account within 30 days. (Your farm's admin can also deactivate your login, which stops it working but does not delete it.) Deleting your account removes your login, name, contact details and profile photo; your farm's work records remain, with your name replaced by a placeholder wherever a record is linked to your account (section 7).
10. Security
Data travels encrypted (HTTPS) and is stored encrypted. Each farm's records are kept apart from every other farm's, and each person sees only what their role on their farm allows. Sign-ins use a password that you choose at first login and can reset yourself. If we learn of a breach that affects you, we will tell the Data Protection Commission and the people affected as soon as practicable.
11. Changes and complaints
If we change this notice in a way that matters, we will tell farm admins by email and update the date above. Complaints or questions: contact.farms@tunasim.com, or the Data Protection Commission of Ghana.