Legal
Privacy Policy
Last updated: September 2026 · Version 1.0
Categories of Data We May Process
Account Identity & Email
Your name and email address used for authentication and account management.
Authentication & Session Information
Login tokens and session data used to maintain secure access to your account.
Orders & Cart Information
Product selections, cart contents, and order history for physical hardware purchases.
App Usage & Navigation Logs
Anonymous analytics about which features and pages you use, for product improvement.
Cultivation Records
Crop run data, facility zone configurations, and operational records you create.
Facility Telemetry
Sensor readings including temperature, humidity, VPD, CO₂, and other environmental data from your connected sensors.
Uploaded Cultivation & Phenotype Images
Images you upload for phenotype documentation, evidence submissions, or crop records.
Genetics Records
Cultivar profiles, lineage data, chemotype information, and breeding records you manage in the Genetics Vault.
Learner Records
Enrollment status, lesson progress, assessment attempts, and evidence submissions in Kether University.
Evidence Submissions
Documents, photos, calculations, and observation logs submitted for competency verification and certification.
Institutional Records
Organizational licensing, procurement tracking, and institutional partnership data for institutional accounts.
Provenance & Location Information
Location and provenance data you optionally supply for cultivar tracking and facility records.
AI-Generated Analysis & Prompts
Inputs you provide to Genesis advisory tools and the AI-generated analysis, recommendations, and summaries returned.
Data We Process
Kether Craftfarmer processes the categories of data listed above to provide cultivation intelligence, facility telemetry, educational services, hardware configuration, and operational decision support.
Purpose of Collection
Data is collected to: (1) authenticate users and manage accounts; (2) display and process physical hardware orders; (3) provide cultivation intelligence and telemetry features; (4) deliver educational content and track learner progress; (5) support institutional licensing and partnerships; (6) improve product functionality through anonymous usage analytics.
Storage & Access Controls
Data is stored in cloud databases managed by our platform provider. Access is restricted to authenticated users for their own data, with administrative access limited to authorized personnel. Institutional records may be accessible to designated institutional administrators under organizational agreements.
Third-Party Processors
We use third-party services for: payment processing (Stripe for physical goods checkout), cloud infrastructure and database hosting, and AI/LLM processing for Genesis advisory features. Third-party processors have their own privacy policies and data handling practices.
Data Retention
Account and personal data is retained while your account is active. Upon account deletion, personal data is removed or anonymized. Institutional, educational, and credential records may be retained for accreditation, audit, and legal obligations with personally identifiable information anonymized.
Security Limitations
We implement reasonable access controls and authentication measures. However, no system can guarantee absolute security. We do not claim specific security certifications, encryption standards, or regulatory compliance statuses that have not been formally verified.
Your Rights
You have the right to: (1) access your personal data; (2) request correction of inaccurate data; (3) request deletion of your account and personal data; (4) export your data; (5) object to certain processing. To exercise these rights, use the in-app Account Deletion feature or contact support.
Contact
For privacy questions, data requests, or account deletion assistance, use the in-app Support page or Account Deletion feature. You may also contact us through the Contact page.
Important Disclaimer
This privacy policy describes our general data practices. We do not claim security certifications, regulatory compliance statuses, encryption standards, or privacy guarantees that have not been formally verified. Third-party services have their own privacy practices that are beyond our control.
