Privacy Policy

1. Introduction & Scope

Galah ("we", "us", or "our") operates the Galah POS mobile application (available on Google Play) and the agricultural produce collection management platform at https://galah.africa.

This Privacy Policy explains how we collect, use, process, disclose, and safeguard personal and operational information when collection centres, cooperatives, managers, weighing operators, and agricultural stakeholders use our applications and services.

Key Commitment: We do not sell, rent, or trade personal data or agricultural produce transaction records to third-party data brokers or advertising networks.

2. Information We Collect

In operating Galah POS and our collection centre platform, we collect the following categories of information:

A. Account & Contact Information

Manager & Staff Credentials: Full name, telephone number, email address, username, and encrypted/hashed passwords created to authenticate operators and managers on the app.
Collection Centre Details: Organization name, registered trade name, physical operating location, district, and region in Tanzania.

B. Operational & Produce Weighing Data

Transaction Details: Produce type (e.g. Maize, Sunflower, Coffee), measured weight in kilograms, bag counts, moisture readings, and receipt reference identifiers.
Farmer Records: Farmer name and contact phone number supplied at the weighing scale for digital receipt generation and payment tracking.
Payment Status: Recorded purchase value, payment method indicator, and disbursement status.

C. Device & Technical Information

Device Identifiers: Tablet model, operating system version, and unique app installation tokens necessary for session management and POS security.
Log & Network Data: IP address, network timestamps, request latency, and crash logs utilized for app stability and error monitoring.

3. How We Use Your Information

We process collected data strictly for legitimate operational purposes:

Core POS Functionality: To authenticate staff, record accurate weigh-ins, issue digital receipts, and track collection centre inventory.
Operational Reporting: To generate daily summaries, batch movements, and reconciliation reports for cooperative managers.
Security & Fraud Prevention: To maintain tamper-proof audit trails of every recorded kilogram and payment transaction.
Service Billing: To calculate the applicable Galah service fee (TZS 100 per metric tonne of produce purchased and recorded).
Communications: To deliver operational SMS receipts, account verification notices, and security updates.

4. Sharing & Disclosure of Data

We do not share your information with third parties except under the following strict conditions:

Essential Infrastructure Providers: Trusted cloud hosting facilities (Dokploy/VPS servers), secure databases, and licensed telecommunication SMS gateways required to transmit digital farmer receipts.
Collection Centre Ownership: Transaction data recorded by operators is accessible only by authorized managers and supervisors of that specific collection centre.
Legal & Regulatory Compliance: When required by Tanzanian law, court order, or formal cooperative dispute resolution authorities.

5. Data Security

We implement robust physical, technical, and administrative security measures to protect your information:

All network communications between the Galah POS tablet app, backend APIs (https://api.galah.africa), and web dashboards are encrypted using modern Transport Layer Security (TLS/HTTPS).
Passwords and authentication secrets are irreversibly hashed before storage.
Access to backend infrastructure is restricted to authorized operations engineers.

6. Account & Data Deletion (Google Play Compliance)

Users have the right to request the permanent deletion of their account credentials and personal profile at any time.

How to Delete Your Account: You can submit a deletion request via email to support@galah.africa or visit our dedicated deletion portal at https://galah.africa/delete-account.

Regulatory Retention Notice: While user credentials and profile details are completely deleted within 30 days, historical produce weighing logs and transaction archives are retained and anonymized to comply with Tanzanian commercial records retention and cooperative audit laws.

7. Children's Privacy

Galah POS and our platform are designed exclusively for commercial agricultural enterprises and adults operating produce collection centres. We do not knowingly collect personal information from children under the age of 18.

8. Contact & Data Controller

If you have any questions, feedback, or data privacy requests regarding this Privacy Policy, please contact our team:

Platform: Galah (Agricultural Operations Management)
Email: support@galah.africa
Website: https://galah.africa
Jurisdiction: United Republic of Tanzania