Your information, handled responsibly.

Information we collect

We collect account and contact details, saved delivery and farm locations, profile and produce images, order and fulfilment records, support messages, ratings, notification preferences, device push tokens, and technical security logs. When you permit location access, coordinates are used to rank nearby produce, quote delivery, and provide farm directions.

Payments and receipts

Our payment provider processes card, bank, and transfer payments, and is named on the payment page before you pay. HarvestNearU does not store card numbers or security codes. A farm's payout bank account number is stored, encrypted, because the provider that sends the money requires it with every transfer; only the last four digits are ever shown, and the key that decrypts it is held outside the database. If manual payments are enabled, submitted receipts are stored only while needed for review and are removed after confirmation according to the service workflow.

How information is used

• Operate accounts, carts, orders, delivery, pickup, refunds, ratings, payouts, and support.
• Verify farms, prevent fraud, secure sessions, and maintain audit records.
• Send essential service email and push notifications, plus optional marketing selected in email preferences.
• Measure reliability and improve marketplace performance and accessibility.

Service providers

Information is processed by providers needed to operate the service, including Vercel for hosting, Vercel Blob for images and documents, Vercel Speed Insights for page performance measurement, Neon for the database, Paystack for payments, Expo for mobile builds and push delivery, Resend for email, and OpenStreetMap routing services for maps and directions. Each provider receives only the information required for its function.

Retention and deletion

Profile information is kept while an account is active. Users can delete an account from Privacy & security in the mobile app or confirm deletion on our deletion page. Deletion removes or anonymizes account credentials, contact details, saved locations, images, preferences, notifications, and public farm data. Limited transaction, refund, payout, fraud-prevention, and audit records may be retained where required for legal, accounting, security, or dispute-resolution purposes.

Your choices

You can update your profile and saved location, control optional email categories, deny device location access, remove saved favourites, and request account deletion. Essential order, payment, refund, security, and support communications cannot be disabled while the related service is active.

Download a copy of my information

Security and contact

We use encrypted network connections, password hashing, restricted administrative access, session expiry, and audit logs. No online system is completely risk-free. Privacy and security concerns can be submitted through the Help centre.

Why we are allowed to use it

• To perform our contract with you — running your account, cart, orders, fulfilment, refunds, ratings, and payouts.
• To meet legal obligations — verifying who sells on the marketplace, keeping financial and tax records, and responding to lawful requests.
• For our legitimate interests — keeping the service secure, preventing fraud, and measuring how the site is used, balanced against your privacy.
• With your consent — optional marketing email, and access to your device location. You can withdraw either at any time without affecting anything done beforehand.

How long we keep it

• Account information — while the account is open, then removed or anonymised on deletion.
• Identity documents supplied for farm verification — destroyed 90 days after the decision. The decision, and the record that evidence was checked, is kept.
• Identity numbers — never stored in readable form. We keep a one-way hash and the last four digits only.
• Order, payment, refund, and payout records — six years, to meet accounting, tax, and dispute obligations.
• Website traffic records — twelve months.
• Page performance timings — held by Vercel for as long as their service retains them, and never linked to an account.
• Security and audit logs — retained to investigate fraud and to evidence administrative decisions.

Your rights under the Nigeria Data Protection Act

You may ask us for a copy of the information we hold about you, correct it if it is wrong, ask us to delete it, object to or ask us to restrict a particular use, withdraw consent you have given, and receive your information in a portable form. Download a copy at any time from Privacy & security in the app, or from your profile on the web.

We answer requests within one month. If you believe we have handled your information wrongly, tell us first through the Help centre so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission.

Measuring how the site is used

We count page views ourselves rather than using an advertising network, and we do not track you across other websites or sell information to anyone. To count a reader without identifying them, the network address and browser description are combined and hashed with a value that changes every day. The result cannot be reversed, and the same reader cannot be linked from one day to the next. We store no advertising cookies.

We also measure how quickly pages load and respond, using Vercel Speed Insights. It records timings — how long the largest part of a page took to appear, how quickly the page answered a tap, how much the layout shifted — together with the page address, whether the device is a phone or a computer, and the country the request came from. It sets no cookies, it does not identify you, and it cannot follow you to another website. We use it to find pages that are slow on a mobile connection, which is how most of our customers reach us.

Where your information is processed

Some providers we rely on operate outside Nigeria, including hosting, database, email, and mobile delivery services. Where information leaves Nigeria we rely on the provider's contractual data-protection commitments and use only the information each provider needs to perform its function.

Children

HarvestNearU is not intended for people under 18 and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

If something goes wrong

We keep records of security incidents. Where a breach is likely to result in serious risk to you, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it and tell you without undue delay.

Who is responsible

HarvestNearU is the data controller for the information described here and operates from Nigeria. Privacy questions, requests about your information, and complaints can be sent to privacy@harvestnearu.com or raised through the Help centre.