Privacy policy
Last updated: 1 November 2026
This policy explains what personal data AgroVision AI collects when you use our website and app, why we collect it, who we share it with, how long we keep it and the rights you have. We follow the Nigeria Data Protection Act 2023 (NDPA). In short: we collect only what we need to screen your leaf photos and keep your scan history, we do not sell your data, and you can delete it at any time.
1. Who we are
AgroVision AI (“we”, “us”) operates agrovisionai.com.ng and the AgroVision AI app, an image-based tomato leaf screening and education service for farmers in Nigeria. We are the data controller for the personal data described in this policy.
For any privacy question or request, email privacy@agrovisionai.com.ng.
2. Information we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account details | Your name, email address and password. Your password is never stored as written: we keep only a one-way, salted hash (Argon2) that cannot be turned back into the password. | You, when you register |
| Profile details (optional) | Phone number, state, farm name and farm size. | You, at registration or on your profile page |
| Leaf photos | The photos you upload. Before storing a photo we re-save it, which removes hidden metadata such as GPS location and camera details. | You, when you scan |
| Scan records | The crop you selected, any note you add, the analysis result, the model version used, and the date and time. | You and our system |
| Feedback | Your rating of a result, the condition you think it is, and any comment. | You, when you report a result |
| Contact messages | Your name, email address, subject and message. | You, through the contact form |
| Technical data | Sign-in session cookies; request identifiers, your user ID and timing information in our service logs; IP address, browser type and access times in our hosting providers' logs. | Your device and our systems |
We do not ask for your precise location, and we do not collect sensitive personal data such as health, religious or financial information. Please do not upload photos of people.
3. How we use your information and our legal basis
| Purpose | Legal basis under the NDPA |
|---|---|
| Creating and securing your account; signing you in | Performance of our agreement with you |
| Analysing your leaf photos, showing results and guidance, keeping your scan history | Performance of our agreement with you |
| Storing optional profile details | Your consent — you can remove these details at any time |
| Reviewing uncertain, failed or reported results to find and fix mistakes | Our legitimate interest in providing an accurate, safe service |
| Preventing abuse, fraud and security incidents (for example rate limits and audit logs) | Our legitimate interest in keeping the service secure, and legal obligations |
| Replying to messages you send us | Our legitimate interest in responding to you, or steps you ask us to take |
| Complying with the law and responding to lawful requests | Legal obligation |
We do not use your data for advertising, we do not sell it, and we do not build marketing profiles. We will only send you service messages (for example email confirmation and password reset).
4. How the AI screening works with your data
- Your photo is analysed by a computer-vision model that runs on our own servers. It is not sent to third-party AI or chatbot services.
- The result is a screening suggestion to support your own decisions. It is not an automated decision that has legal or similarly significant effects on you, and you are always free to ignore it or seek expert advice.
- We do not currently use your photos to train or improve our models. If we want to do so in future, we will ask for your permission first, and you will be able to say no without losing access to the service.
- Authorised members of our team may look at a photo to review an uncertain, failed or reported result. Every such view is recorded in an audit log.
6. International transfers
Some of our service providers store or process data on servers outside Nigeria. When that happens we rely on the safeguards permitted by the NDPA, such as contractual data protection terms with the provider, and we choose providers that apply strong security measures, including encryption in transit.
7. How long we keep it
| Data | How long |
|---|---|
| Account and profile details | Until you delete your account |
| Leaf photos and scan records | Until you delete the scan or your account |
| Feedback on results | Until you delete the related scan or your account |
| Contact messages | Up to 24 months after we last reply, then deleted |
| Security and audit logs | Kept to protect the service; when you delete your account they no longer identify you by name or email |
| Backups | Deleted data is removed from backups as those backups expire on our provider's backup cycle |
8. How we protect it
- Encrypted connections (HTTPS) between your device and our services.
- Photos are kept in private storage and shown only through links that expire after a few minutes, after checking you are allowed to see them.
- Every request is checked so that you can only see your own scans; staff access requires an administrator account and is logged.
- We limit how often scans and messages can be submitted, to prevent abuse.
- Our logs never contain passwords, sign-in tokens or photo contents.
No system is completely secure. If a breach affects your personal data and is likely to put your rights at risk, we will notify you and the Nigeria Data Protection Commission as the law requires.
9. Your rights
Under the NDPA you have the right to:
- be informed about how your data is used (this policy);
- access the personal data we hold about you and receive a copy;
- correct data that is inaccurate or incomplete;
- have your data deleted;
- restrict or object to our use of your data, including use based on our legitimate interests;
- receive your data in a commonly used, machine-readable format (data portability);
- withdraw consent at any time, without affecting earlier use; and
- not be subject to a decision based solely on automated processing that significantly affects you.
You can do much of this yourself in the app:
- edit or remove profile details on your Profile page;
- delete any scan and its photo from your Scan history;
- delete your whole account — profile, scans, photos and feedback — from Settings.
For anything else, email privacy@agrovisionai.com.ng. We may ask you to confirm your identity, and we will respond within 30 days. If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission (NDPC).
11. Children
AgroVision AI is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.
12. Changes to this policy
We may update this policy as the service changes. We will change the “last updated” date above and, for significant changes, tell you by email or in the app before they take effect.
13. Contact us
AgroVision AI
Email: privacy@agrovisionai.com.ng
General enquiries: hello@agrovisionai.com.ng
LinkedIn: AgroVision AI