Privacy & POPIA

KhulaGrow is operated by SmartP1ck (“we”, “us”). We are the responsible party for the account information you give us, and the operator (processor) for the cultivation and compliance records you capture on behalf of your farm.

Our Information Officer can be reached at support@smartpick.co.za. Please route any privacy request or complaint there.

• •Account information — your name, email address, phone number and password (stored only as a secure hash, never in plain text).
• •Operational & compliance records — the farm, area, batch, harvest, inventory, task, inspection, sensor and document data you and your team capture. This is your data; we process it to provide the service.
• •Payment information — subscription payments are processed by Yoco. We receive confirmation of payment and amounts, but never see or store your card number.
• •Technical information — basic logs needed to run and secure the service (for example, sign-in events in the audit trail, and error diagnostics).

• •To perform our contract with you — providing the platform, your records, and support.
• •To meet our own legal obligations, and to help you meet your record-keeping obligations as a licensed cultivator.
• •For our legitimate interest in keeping the service secure, reliable and improving over time.
• •Where required, with your consent — which you may withdraw at any time.

We process personal information in line with the eight POPIA conditions for lawful processing:

• •Accountability — we take responsibility for meeting these conditions.
• •Processing limitation — we collect only what we need, lawfully and fairly.
• •Purpose specification — we collect for the specific purposes described here.
• •Further processing limitation — we do not use your information for unrelated purposes.
• •Information quality — we help you keep records accurate and up to date.
• •Openness — this notice documents what we do.
• •Security safeguards — see our Security & disaster-recovery information.
• •Data subject participation — you can access, correct and delete your information.

We do not sell your information or share it for advertising. We use a small number of trusted sub-processors to run the service:

• •Neon — managed PostgreSQL database hosting where your records are stored.
• •Netlify — application hosting and content delivery.
• •Yoco — South African payment processing for subscriptions.

We may also disclose information where the law requires it, or to a regulator such as SAHPRA where you have authorised it or it is legally required.

We keep your records for as long as your account is active, and for any period you need them to meet your own regulatory obligations. You can export your data at any time, and request deletion — subject to any records we are legally required to retain.

Under POPIA you have the right to:

• •Ask what personal information we hold about you and get a copy.
• •Ask us to correct or update information that is inaccurate.
• •Ask us to delete information, where we are not required to keep it.
• •Object to processing in certain circumstances, and withdraw consent.
• •Complain to the Information Regulator (South Africa).

To exercise any of these, email support@smartpick.co.za. You may also lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

We use a single secure sign-in cookie to keep you logged in, and your browser’s local storage to let you capture data offline in the field and sync it later. We do not use third-party advertising or cross-site tracking cookies.

We may update this notice as the service evolves. The date at the top shows when it last changed, and material changes will be communicated in the app.