Privacy Policy

Effective and last updated: October 7, 2026 · Privacy contact: aka.apps5@gmail.com

1. Scope and responsibility

This Policy applies to the Aqua Siri application, website, APIs, pond-management features, Buyer marketplace, notifications, support, and related services. Aqua Siri is the name of the app and service and is independently operated; it is not a separately registered company. It does not govern information exchanged independently between a Farmer and Buyer after they receive each other’s details.

2. Information we collect

Account and business data

Name, email, phone number, account type, business name, profile details, authentication records, password hash, security-question data, referral details, authorised worker records, and account preferences. If you choose Apple or Google sign-in, those services provide the authentication information needed to create or access your account.

Pond and operational data

Pond names and identifiers, species, stocking, feed, medicine, water quality, growth, mortality, expenses, workers, leases, photos, camera names or stream details, harvests, reports, alerts, and other records you enter.

Marketplace data

Buyer profile details, harvest listings, species, quantity, price, grade, dates, descriptions, approximate and exact coordinates, search radius, interests, conversations, text and optional voice messages, contact-sharing choices, blocks, reports, sale confirmations, and listing status.

Buyer Finance and transport records

For Buyers using these features, we process confirmed-deal references, resale revenue, operating expenses, supplier payments and refunds, advance and return entries, notes, counterparties, external references, correction history, route stops, trips, trip costs, receipt details, and cost allocations. Entries are records of information supplied by permitted team members; they do not mean Aqua Siri received or verified an offline payment.

Agreement and acceptance evidence

Participating account identities, immutable transaction terms, agreement version and hash, acceptance or decline status, timestamps, IP address, user agent, and audit events needed to evidence each party’s action. Account details and acceptance evidence do not independently verify a person’s legal name, business authority, or identity.

Billing verification data

Store platform, product identifier, transaction identifier, receipt or purchase token, purchase state, expiry, and verification outcome for one-time pond-cycle purchases, buyer plan subscriptions, and harvest passport publication fees purchased in supported native iOS or Android apps. Apple and Google process payment-card details; Aqua Siri does not receive or store full card details. Harvest-advance amounts shown on listings are informational only; any transfer is arranged directly by the buyer and farmer offline, and Aqua Siri does not receive or track its payment status.

Device, location, and technical data

Device and operating-system information, app version, push token, language, IP address, user agent, request and security logs, error details, and location when you grant foreground permission or use a location feature. While the app is open, Aqua Siri may read current or last-known location to refresh location-based pond, weather, map, or nearby-harvest features. You can deny or revoke permission and use manual location options where available. Aqua Siri does not require continuous background tracking for marketplace use. We do not use an advertising analytics SDK.

Photos, documents, and audio

If you use the related feature, we process receipt photos, lease or listing images, private Buyer Finance documents such as invoices, e-way bills, transit passes, toll receipts and inspection passes, and optional voice messages. Buyer Finance files may be PDFs, JPEGs or PNGs and are attached to a deal or trip. Photo-library access is requested when you choose an image for a lease agreement, trip receipt, or private buyer document; only the image you select is used for that feature. Voice messages, some receipts, and Buyer Finance files are encrypted before private cloud storage. Access to buyer documents is restricted by the related account, deal or trip, plan, and team permissions.

3. How we obtain information

We receive information directly from you, from authorised workers or counterparties, automatically from your device and use of the Service, from Apple or Google when verifying purchases or when you choose their sign-in, and from service providers used for hosting, file storage, weather, maps, geocoding, notifications, and security.

4. Why we use information

• Provide accounts, synchronisation, pond tools, reports, alerts, and support.
• Publish and discover harvest listings and calculate distance-based results.
• Enable interest requests, consent controls, messaging, calls, sale confirmation, and agreements.
• Verify purchases, restore entitlements, prevent duplicate or fraudulent receipts, and manage subscription status.
• Secure the Service, investigate abuse, moderate content, enforce Terms, and comply with legal obligations.
• Diagnose errors and improve reliability and usability.

5. Approximate and exact location

A Farmer’s approximate listing location may be shown to eligible Buyers for discovery. Exact coordinates remain restricted until a marketplace interest is accepted and the required sharing consent is current. Location may also be used for weather and distance calculations. Users can edit listing location and revoke future exact-location sharing, subject to records already disclosed or retained for security and legal purposes.

6. Contact sharing and revocation

Phone and other direct contact information is hidden from unmatched users. It is disclosed only through the authorised marketplace flow when relationship and consent requirements are met. Revoking consent stops future access through Aqua Siri but cannot erase information a recipient already saw, copied, or lawfully retained. Recipients must use shared details only for the relevant transaction and in accordance with law.

7. When information is shared

• Farmers, Buyers, and authorised workers: only as needed for the features, roles, relationships, and consent described above.
• Apple App Store and Google Play: processing one-time pond-cycle purchases, buyer plan subscriptions, and harvest passport publication fees in supported native iOS or Android apps, and providing purchase proof for entitlement verification.
• Railway and Neon: Railway hosts the production API service; Neon provides the PostgreSQL database used to store account and service records.
• Google Cloud Storage: stores private uploaded files, including Buyer Finance documents and some receipts or voice messages. Those files are encrypted by the service before upload where the related feature supports encryption.
• Expo Push Service: routes app notifications to registered devices. Push tokens and notification content needed for delivery may be processed.
• Open-Meteo, OpenStreetMap Nominatim, and Komoot Photon: receive weather coordinates or location-search and geocoding queries when you use those features.
• Esri ArcGIS: provides satellite map tiles in location-selection maps. Map requests may reveal the map area requested and standard network details.
• unpkg: delivers Leaflet map-library files when the related map feature loads; requests include standard network details.
• unpkg: delivers Leaflet map-library files when the related map feature loads; the request includes standard network details.
• Apple and Google sign-in: account authentication when you select those options.
• Professional advisers and authorities: where reasonably necessary to establish rights, investigate fraud or safety, comply with law, or respond to valid legal process.
• Business transfer: if the Service is reorganised, financed, merged, or transferred, subject to applicable notice and protection requirements.

We do not sell personal information or share it for third-party behavioural advertising.

8. Store purchases

Current digital purchases—including pond-cycle access, buyer plan subscriptions, and harvest passport publication fees—are billed through Apple App Store or Google Play in supported native iOS or Android apps. Those stores may act under their own privacy policies. Aqua Siri sends purchase proof for server-side verification and stores the minimum transaction evidence needed to grant access or publish a listing, restore eligible purchases, respond to refunds, and detect misuse. Harvest-advance amounts are informational; any transfer is arranged directly offline between buyers and farmers.

9. Retention

Account and operational information is generally retained while the account is active. You can initiate account deletion in the app or without the app at Aqua Siri account and data deletion. Deletion requires an online request so server-side processing can be confirmed before local credentials are removed. Accounts associated with legacy harvest-advance or other financial records may require a support review; some transaction, payment, tax, dispute, security, or fraud-prevention evidence may be retained for the period reasonably needed or required by law. Where feasible, retained records are limited or de-identified. Data no longer reasonably needed is deleted.

10. Security

We use measures such as HTTPS, password hashing, access controls, server-side authorisation, restricted secret storage, purchase verification, audit trails, and database protections. No method is completely secure. You must protect your device and credentials and notify us promptly of suspected compromise.

11. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, withdrawal of consent, or information about processing. Many records can be viewed or corrected in the App. To request account and associated-data deletion, use Settings or the public account deletion page. We may verify identity and review financial, accepted-transaction, security, or legal records before completing a request. Any information retained will be limited to what is reasonably needed or legally required.

12. Notifications, device permissions, and controls

Push notifications, camera, microphone, photo-library, and location permissions are requested only when needed for selected features. Photo-library access lets you select an image for a lease agreement, trip receipt, or private buyer document; Aqua Siri uses only the image you choose. The microphone is used only when you choose to record a voice message; camera access is used for selected photo features such as trip-receipt capture. You can manage permissions in device settings. Disabling a permission may prevent the related feature from working.

13. International processing

Service providers may process data in India or other countries. Where required, Aqua Siri uses contractual, technical, and organisational safeguards appropriate to the transfer and the nature of the information.

14. Children

Aqua Siri is intended for adults and business use. You must be at least 18 to create an account. We do not knowingly provide accounts to children. Contact us if you believe a child has provided personal information.

15. Policy changes

We may update this Policy as the Service, law, or providers change. We will update the effective date and provide additional notice when reasonably required. Continued use after an effective update is subject to applicable law and your available choices.

16. India law and complaints

This Policy is governed by applicable laws of India, including applicable data-protection and information-technology requirements. Users elsewhere may also have rights under their local law. You may contact Aqua Siri first with a privacy concern. Nothing in this Policy limits any right to approach a competent authority or court.

17. Contact