Privacy Policy

Last updated: 23 July 2026

Note for launch: before publishing, confirm the operating legal entity name, registered address and governing jurisdiction below (marked […]), and have this reviewed by counsel for your market. Everything else reflects how the product actually handles data.

This policy explains what data Poulty ("Poulty", "we", "us") collects, why, how we protect it, and the choices you have. Poulty is a business tool for poultry operations — broiler, layer, breeder and hatchery — used by businesses and their staff. It is operated by [Legal entity name], [registered address].

The short version: we collect the account details needed to sign you in and the operational records your team enters to run the business, plus basic crash/performance diagnostics. We do not track you across other apps or websites, we run no advertising, and we do not sell your data. Each customer's data is isolated from every other customer's.

1. Who controls the data

When your employer or organisation sets up Poulty, that organisation is the controller of the operational data entered into its account, and Poulty acts as its processor. For your individual account details (e.g. your sign-in email), Poulty is the controller. If you are an employee, your organisation's own policies also apply to the data you enter.

2. What we collect

Data	Why	Tracking?
Email address (and name, if provided)	To create your account and sign you in. Authentication is handled by our identity provider (Logto).	No
Operational content you enter — farms, houses, flocks, mortality, feed, weights, water, vaccinations, eggs, harvest, notes and any photos you attach	This is the core function of the app — recording and reporting your operation.	No
Crash diagnostics	To detect and fix crashes and errors. Not linked to your identity.	No
Performance diagnostics	To keep the app fast and reliable. Not linked to your identity.	No

We do not collect your location, we do not use advertising identifiers, and we do not use third-party trackers or analytics that follow you across other apps or sites. The mobile app requests no camera, contacts, or location permissions for tracking purposes.

3. How we use it

To provide the service — sign-in, recording data, computing KPIs, generating reports and settlements.
To sync your offline entries to your organisation's account when the device is back online.
To keep the service secure, diagnose faults, and improve reliability and performance.
To communicate with you about your account and support requests.

We do not use your operational data to train advertising or unrelated third-party models, and we do not sell or rent personal data to anyone.

4. Where it's stored

Data is hosted on Google Cloud Platform, primarily in the Mumbai, India (asia-south1) region, with file attachments stored on Cloudflare R2. Access is encrypted in transit (TLS) and secured with role-based access controls. Each customer's data is isolated at the database level so one customer can never see another's.

5. Who we share it with

We share data only with the service providers that operate the product on our behalf, under contract and only as needed to run the service:

Google Cloud — application hosting and database.
Cloudflare — content delivery, edge security and file storage (R2).
Logto — sign-in / identity.
Sentry — crash and error diagnostics (only if enabled; diagnostics are not linked to your identity).

We may disclose data if required by law, or to protect the rights, safety and security of our users and the service.

6. How long we keep it

We keep your organisation's operational records for as long as the account is active, because that history is the point of the product (audit trail, year-on-year comparison, settlements). When an account is closed, or on a valid deletion request, we delete or irreversibly anonymise the associated data within a reasonable period, except where we must retain it to meet a legal obligation.

7. Your choices & rights

Access & correction — you can view and correct the records in the app. Operational records are corrected with a compensating entry (the original stays visible with who and when), so the history is auditable rather than silently rewritten.
Account & data deletion — you can request deletion of your account and associated personal data by emailing hello@poulty.com. If you are an employee, deletion of shared operational records may require your organisation's authorisation.
Depending on your jurisdiction, you may also have rights to portability, restriction, or objection. Contact us to exercise them.

8. Children

Poulty is a workplace tool and is not directed at children. We do not knowingly collect data from anyone under 16.

9. Changes

We may update this policy as the product evolves. We'll change the "last updated" date above and, for material changes, notify account owners.

10. Contact

Questions, or to exercise a data right: hello@poulty.com. Operated by [Legal entity name], [registered address]. Governing law: [jurisdiction].