Privacy Policy

• Last updated: October 14, 2026
• Controller: Jamaji LLC, a limited liability company formed in Wyoming, USA, doing business as FarmaBot (“FarmaBot”, “we”, “us”, or “our”).
• Privacy: privacy@farmabot.com
• Support: support@farmabot.com
• Website: https://www.farmabot.com
• Address: Wyoming, United States. Full registered office address available on request at privacy@farmabot.com.

This Policy describes how we collect, use, maintain, protect, and disclose information through farmabot.com, our mobile apps (Apple App Store, Google Play, Huawei AppGallery), APIs, and related services (the “Services”). It is not legal advice. If you do not agree, do not use the Services. By accessing or using the Services, you agree to this Policy.

1. Introduction

FarmaBot is a medication organization and reminder service operated by Jamaji LLC. We respect your privacy and are committed to protecting it through our compliance with this Privacy Policy (“Policy”). FarmaBot is not a medical device and does not diagnose, treat, cure, or prevent any condition.

2. Legal basis for processing

• Contractual necessity: account creation, reminders, inventory, billing reconciliation, support
• Explicit consent: processing of health data and optional features that require it (you may withdraw consent at any time)
• Legitimate interest: security, fraud prevention, service improvement, aggregated analytics
• Legal obligation: tax, accounting, law-enforcement, and other legal requirements

3. Information we collect

Information you provide

• Account information: name or display name, email, sign-in identifiers (Google, Apple, or email)
• Contact information: phone number if you enable SMS, WhatsApp, or call notifications; your Telegram chat identifier if you link that channel (only that: we do not read your conversations or contacts)
• Health and related content (sensitive): medicines, quantities, expiry, schedules, dose logs, notes/symptoms, appointments, insurance info you choose to store, photos of medicines/reports, and—if enabled—menstrual cycle and contraceptive data; pet medicines if you use that feature
• Caregiver sharing choices: whom you invite and what you share
• Communication preferences and support messages you send us
• Launch list: if you ask on farmabot.com to be told when FarmaBot launches, your email address and language. We use them only to send that notice and delete them when you ask (privacy@farmabot.com)
• Payment information: processed by Apple, Google, Huawei, and/or Stripe — we never store your full card number, CVV, or banking details

Information collected automatically

• Usage information: features used, timestamps, basic diagnostics needed to operate and improve the Services
• Device information: push tokens, OS, language, time zone, approximate technical identifiers
• Location: approximate location only when you use nearby-pharmacy search (not background tracking)
• Website logs: IP address, browser type, pages visited, as needed to serve and protect farmabot.com

Information from third parties

• When you sign in with Apple or Google, we may receive your name, email, and profile info as permitted by your settings with that provider (OAuth; we do not receive your third-party passwords)
• App stores and, if applicable, RevenueCat may send us subscription status so we can unlock paid features
• We do not receive biometric templates; biometrics stay on your device

4. How we use your information

• Provide, maintain, and improve the Services (inventory, reminders, history, sharing, AI features you request)
• Process and reconcile subscriptions and send billing-related notices
• Send technical notices, security alerts, updates, and support messages
• Respond to comments, questions, and support requests
• Protect against fraudulent, unauthorized, or illegal activity
• Generate aggregated, anonymized analytics
• Enforce our Terms of Service
• Comply with legal requirements
• Communicate about FarmaBot products or updates (you may opt out of non-essential product emails)

5. Artificial intelligence

When you use AI features, we send AI providers (OpenAI, Google Gemini, Cerebras and/or Runware, depending on the feature and configuration) the content needed for that feature (e.g. photos or your query plus relevant inventory context). AI-extracted data is shown for your confirmation before saving. Catalog descriptions of medicines may be reused as general information without your personal data. The assistant does not diagnose, prescribe, or recommend doses.

6. Caregiver sharing

Sharing is opt-in. You choose what to share and with whom; both parties must consent; you may revoke access at any time. Menstrual cycle and contraceptive data are never included in sharing.

7. Do Not Track

Do Not Track (DNT) is a browser privacy preference. On our marketing Website, we honor DNT signals and do not use third-party advertising trackers. The mobile apps use operational analytics/diagnostics as needed to run the Service; we do not sell personal information for cross-context behavioral advertising.

8. Email and notifications

• Transactional / essential: account verification, security alerts, billing notices, critical service messages (generally cannot be opted out while you use the Service)
• Service notifications: dose reminders and escalation channels you configure (push, WhatsApp, Telegram, SMS, email, call) — controlled in app settings
• Product emails: feature announcements (unsubscribe via the link in the email when offered)

Push delivery may involve Apple (APNs), Google (FCM), and/or Huawei (HMS). SMS and calls involve Twilio. WhatsApp reminders involve Meta (WhatsApp Business Platform). Telegram reminders, only if you link that channel, involve Telegram. Email involves SendGrid. Voice synthesis, when used, may involve ElevenLabs.

Reminders by SMS, WhatsApp, Telegram, email and call are neutral: they never include the medication name, its form, or the dose — precisely because they travel through third parties. Push notifications show the medication name unless you turn on Hide names in notifications (Settings → Security); with it on, they are neutral too.

On the device itself (widgets, the Lock Screen, and Siri and Shortcuts on iOS) the name can appear, because none of it leaves the phone: the app copies an extract of your data — upcoming doses, stock and today’s water — into a local shared container so those surfaces work without opening the app. Medications you marked as sensitive are left out of that extract; Siri asks you to unlock the phone before reading anything out loud; and you can turn Siri and Shortcuts off in Settings → Security, which erases the extract.

9. Data security

We implement industry-standard measures, including:

• TLS encryption for data in transit
• Encryption at rest for stored data where supported by our infrastructure
• Row Level Security (RLS) and per-user isolation in our database
• Provider API keys kept only on the server
• PIN stored hashed/encrypted (never in clear text); biometrics validated on-device
• Access controls and monitoring for abuse prevention

No method of transmission or storage is 100% secure. You are responsible for securing your device, PIN, and credentials.

What the app keeps on your phone may be included in the operating system’s backups (Google on Android; iCloud or your computer on iOS), depending on how you set them up. Those backups are managed by the operating system and its provider, not by FarmaBot.

10. Information sharing and sub-processors

We do not sell your personal information. We share data with service providers (sub-processors) only to operate the Services, for example:

• Infrastructure / auth / storage: Supabase
• AI: OpenAI, Google (Gemini), Cerebras and Runware, depending on the feature
• Push delivery and app performance: Expo (relays push notifications to Apple and Google, and measures how long the app’s screens take to load)
• Messaging / voice: Twilio (SMS and calls); Meta / WhatsApp Business Platform (WhatsApp reminders); Telegram (only if you link that channel); SendGrid (transactional email); ElevenLabs (TTS when applicable)
• Maps / pharmacies: Google Places (approximate location when you search)
• App distribution, sign-in, push, and IAP: Apple, Google, Huawei
• Subscription orchestration (if used): RevenueCat
• Web payments (if used): Stripe

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, reorganization, or sale of assets. An up-to-date list of sub-processors is available on request at privacy@farmabot.com.

11. International data transfers

Your data may be processed and stored in the United States and other countries where our providers operate. If you access the Services from another country, you may be transferring personal information internationally. For users in the EEA, UK, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) where required.

12. Cookies and similar technologies

On farmabot.com we may use:

• Essential cookies / storage: authentication, session, security, language, and theme preferences
• Analytics (if enabled): anonymized or aggregated usage to improve the site — not used for third-party advertising

We do not use third-party advertising cookies on the marketing site. Disabling cookies may limit some Website features. Mobile apps use local storage and OS permission frameworks rather than browser cookies.

13. Your rights and choices

• In the app: access, update, or delete much of your information; download everything on your phone as a PDF or as a machine-readable JSON file (Profile → Your data); delete your account from Profile → Delete account
• Without an account: your data stays only on your phone; Profile → Erase this phone’s data erases it
• Contact us: privacy@farmabot.com to access, update, delete, or ask questions
• Email: opt out of promotional emails via unsubscribe links (transactional messages may continue)

European residents (GDPR) may also have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. We aim to respond within 30 days. You may lodge a complaint with your local supervisory authority.

California residents (CCPA/CPRA) may have rights to know, delete, correct, and non-discrimination, and to opt out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell personal information or share it for that purpose. We may need to verify your identity before processing a request.

14. Account deletion

You can delete your account from inside the app — Profile → Delete account — or by emailing privacy@farmabot.com. Upon a deletion request:

• Your account access is disabled immediately, on every device: sessions and push tokens are revoked, reminders stop, and every share you created is revoked
• Your data is erased 30 days later. During those 30 days you can cancel the deletion by signing in again; after them, erasure is permanent and we cannot restore your records
• Before you confirm, the app offers a copy of everything you recorded on the phone — a PDF and a JSON file — generated on your device
• The feedback you sent from the app is erased with the account, including any contact email you typed, and so is the customer record at our subscription provider (RevenueCat); your name is removed from the activity notices other people received about you
• Paid store subscriptions should be cancelled by you in Apple / Google / Huawei (or web billing) to stop future charges — deleting FarmaBot does not always cancel store billing automatically
• We keep only what the law requires (e.g. billing records, stripped of your identity) or what is needed to resolve disputes and prevent abuse
• Doses you logged or notes you wrote in another person’s inventory, while they shared it with you, remain in their history with your name removed: those records document their treatment and only they can delete them
• Backup systems may take additional time to rotate

15. Data retention

• Account and health content: for the life of the account, then deleted/anonymized after deletion as above
• Records you delete: their content is erased from your phone and from our servers at once; an empty marker stays so the deletion reaches your other devices. Photos attached to them are erased 30 days later. A person in your care you delete can be restored for 30 days, so their details are erased after that
• Daily records on free accounts: the cloud backup restores the last 12 months of doses, measurements, hydration and other daily records; older ones are kept for up to 24 months (in case you upgrade) and then deleted from the server. Paid plans have no limit. Your phone keeps your whole history either way, and this does not affect exams, vaccines, allergies, conditions or surgeries, which are kept for the life of the account
• Billing / transaction records: up to 7 years where legally required
• Security / access logs: typically up to 90 days unless needed longer for investigations
• Activity notices and internal audit records: the in-app activity inbox is kept for 90 days and inventory change audits for 180; one-time verification codes are deleted within 24 hours
• Support tickets: typically up to 2 years after resolution
• Anonymized analytics: may be retained indefinitely

16. Children’s privacy

The Services are intended for users 18 and older. We do not knowingly collect personal information from anyone under 13. If we learn we have collected such data, we will delete it promptly. Contact privacy@farmabot.com if you believe a child has provided us information.

17. Data breach notification

If a breach affecting your personal information occurs, we will notify affected users and authorities as required by applicable law (including GDPR timing where it applies), typically to the email on your account, describing the nature of the incident, data involved where known, steps we are taking, and recommended precautions.

18. Automated decision-making

We may use automated systems for rate limiting, abuse prevention, fraud detection, and subscription entitlement checks. These may temporarily throttle or suspend access that looks abusive. We do not make solely automated decisions that produce legal or similarly significant effects about your health. You may contact us to request human review of an automated enforcement action.

19. Third-party websites and stores

Our Services may link to app stores and other third-party sites. We do not control those platforms. Their collection and use of your information is governed by their own policies (Apple, Google, Huawei, etc.).

20. Changes to this Policy

We may update this Policy at any time. Changes are effective when posted, with the “Last updated” date revised. For material changes, we will provide reasonable advance notice (email and/or in-app or website notice) when practicable. Continued use after changes constitutes acceptance where permitted by law; where a new consent is required, we will ask for it.

21. Contact us

• Data protection inquiries: privacy@farmabot.com
• General support: support@farmabot.com
• Controller: Jamaji LLC (d/b/a FarmaBot), Wyoming, United States
• Web: https://www.farmabot.com