AgroChain (“the App”, “we”, “us”) provides farm-to-consumer
traceability for wheat and sugarcane supply chains in Pakistan using a secure, role-based
database. This policy explains what data we collect, why, and your rights. By using AgroChain
you agree to this policy.
Contact: Email saqibutm@outlook.com
or WhatsApp +92 300 1750077 Data controller: AgroChain Research Project — NRPU, Pakistan
1. Who this applies to
Supply-chain participants (farmers, collection/procurement centers,
transporters, warehouses, mills, distributors, retailers, laboratories, regulators) who sign
in and record transactions.
Consumers who scan a product QR code to verify it. Consumers can use core
verification features without creating an account.
2. Data we collect
a. Information you provide
Account / entity identifiers — your mobile number (used to sign in, no
email required) and entity/farmer/mill IDs you enter when registering or signing in.
Supply-chain records — batch IDs, crop variety, quantity, dates, custody
transfers, and (for laboratories) quality test results such as moisture, protein, gluten, and
contamination indicators.
Consumer issue reports — if you choose to report a product problem, the
product ID, an optional district, and your description.
b. Information collected automatically
Location (precise and/or approximate) — captured only at the
moment you record a harvest or custody transfer, to geotag where that event
occurred. The App does not track your location continuously or in the
background.
App activity — the supply-chain actions you perform, needed to maintain
the traceability record.
c. Camera
For QR scanning, the camera is used only to read codes in real time. Those
camera images/frames are not collected, stored, or transmitted. Separately, if
you choose to set a profile picture, you may take a new photo or choose an existing one from
your photo library — that single image is stored (see §2.d).
d. Profile picture
Optional. If you set one, the photo you choose is uploaded and stored against your account so
it can be shown throughout the App. You can replace it at any time in Settings, and it is
deleted if you delete your account (§8).
We do not collect contacts, messages, browsing history, biometrics, or
advertising identifiers, and the App contains no third-party advertising.
3. How we use your data
To record and verify supply-chain events in the traceability database.
To display product traceability journeys, quality reports, and GPS routes.
To compute dashboard metrics and fraud/anomaly alerts (e.g. weight variance, quality
failures).
To authenticate supply-chain participants and authorize permitted actions.
We do not sell your personal data.
4. Record integrity (important)
AgroChain writes supply-chain records to a secure database. Once submitted, custody transfer,
quality test, and consumer issue records cannot be edited or deleted through the
App — this preserves a reliable audit trail and is what makes AgroChain
fraud-resistant. A batch's status does update automatically as it moves through the supply
chain (e.g. picked up, delivered).
This is an access-control restriction we enforce at the database level, not a cryptographic
guarantee — we (the data controller) retain the technical ability to correct or remove records
where legitimately required, for example to fulfil a data-protection request (see §8).
Please avoid entering unnecessary personal information into supply-chain records; identifiers
are limited to what is required for traceability.
Access to records is restricted to authorized accounts (e.g. farmers, mills, regulators,
laboratories) under their respective roles.
5. Offline storage and sync
To support areas with poor connectivity, AgroChain stores your pending entries and language
preference locally on your device (encrypted app storage) and automatically
syncs them to the network when a connection is available. Clearing the app’s data or
uninstalling the App removes this local copy.
6. Data sharing
We share data only:
With authorized organizations participating in the AgroChain network, as
required for traceability.
With service providers that host the backend infrastructure on our
behalf, under confidentiality obligations.
Where required by law or to protect rights, safety, and security.
Data is encrypted in transit (HTTPS to our servers).
7. Data retention
Account data is retained for as long as your account is active or as
needed to provide the service, then deleted or anonymized.
Supply-chain event records (custody transfers, quality tests, issue
reports) are retained as a permanent audit trail and are not editable or deletable through
the App (see §4), though we can action a legitimate deletion request as described in
§8.
8. Your rights and choices
Permissions: grant or revoke Camera and Location permissions any time in
your device settings. Revoking them disables the related features (QR scanning, geotagging)
but you can still use the rest of the App.
Account deletion: delete your account and profile data at any time,
in-app, from Settings → Delete Account — no need to contact us. Your
supply-chain records are anonymized (not deleted) to preserve the audit trail for other
participants, per §4.
Access / correction: you may request access to or correction of your
personal data by contacting us using the details above.
9. Children’s privacy
AgroChain is intended for agricultural and commercial users and the general public. It is not
directed at children under 13, and we do not knowingly collect their personal data.
10. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the
“Last updated” date and, where appropriate, an in-app notice.