Privacy Policy

The Hekitari Livestock Management System is operated by Hekitari Ltd, a company registered in Rwanda. The system provides dairy and livestock farmers with digital tools to manage their herds, track health and production records, monitor breeding cycles, manage feed and finances, and generate farm reports — across cattle, swine, layer poultry, and broiler operations.

We collect data necessary to provide the livestock management features of the app. We do not collect data we do not need.

Data You Provide Directly

• Full name, email address, and password for your Hekitari account.
• Farm name, location (district), farm size, and type of livestock operation.
• Organization name and role, if registering as part of a cooperative, institution, or multi-farm operation.
• Individual animal records including animal ID, breed, date of birth, weight, status, and purchase details.
• Breeding records including heat detection dates, AI service records, semen and bull information, pregnancy confirmation, and calving records.
• Milk production records including daily milking session data per cow.
• Feed records including daily rations, feed purchases, supplier details, and costs.
• Health and medication records including illness events, veterinary visits, treatment details, dosage, withdrawal periods, and vaccination records.
• Sales and slaughter records including buyer details, sale weight, price, and carcass information.
• Financial records including income, expenses, and cost entries you record in the system.
• Questions and messages submitted to the AI Assistant.
• Photos submitted for the AI Assistant's image analysis feature.

Data Collected Automatically

• Device information including device model, operating system version, and unique device identifiers.
• App usage data including features accessed, screens viewed, session duration, and interaction patterns — used to improve the system.
• Crash reports and error logs — collected automatically when the app encounters an issue.
• Network connection type — used to optimize performance under low connectivity and manage offline data sync.

Multi-User and Institutional Data

If your farm or organization uses role-based access (administrator, farm manager, data entry operator), we collect account details for each user registered under your organization. The organization administrator is responsible for managing access and ensuring users are aware of this policy.

We use your data strictly to provide and improve the Hekitari Livestock Management System. We do not use your data for advertising.

We process your personal data based on the following legal grounds under Rwanda's Data Protection Law (Law No. 058/2021) and applicable international frameworks:

• Contract performance — processing necessary to provide the services you signed up for, including animal record management, health tracking, production monitoring, and financial reporting.
• Legitimate interests — app improvement, crash analysis, security monitoring, and product development, where these do not override your rights.
• Legal obligation — where we are required to process data to comply with Rwandan law or a lawful order.
• Consent — for any processing not covered above, we will ask for your explicit consent and you may withdraw it at any time.

We never sell your personal data or farm records. We never share your data with advertisers or marketing platforms.

Technology Service Providers

• Cloud hosting providers — store your farm data on secure servers. Our primary infrastructure is global, processed in data centers that meet international security standards.
• AI and machine learning providers — process questions and images submitted to the AI Assistant. Data is used only to generate a response and is not retained for third-party commercial use.
• Analytics and crash reporting providers — receive aggregated, anonymised usage and crash data to help us improve the system.

Institutional and Cooperative Access

• If you are part of a cooperative, agricultural institution, or NGO-supported programme, the organization administrator may have access to your farm data as part of the multi-farm oversight feature. This access is controlled by your organization's administrator.
• We do not share your individual farm data with external institutions without your consent, except as required by law.

Financial Institutions

We do not automatically share your financial data with banks or lenders. If you choose to export a financial report for submission to a bank or institution, that sharing is entirely your decision and is done outside our system.

Legal and Regulatory Authorities

We may share data with Rwandan regulatory authorities, law enforcement, or courts where required by law or a lawful order. We will notify you unless prohibited by law from doing so.

Business Transfers

If Hekitari Ltd is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you in advance and ensure the receiving party upholds the same privacy standards.

Hekitari Ltd is based in Rwanda. Our infrastructure uses global cloud services, which means your data may be processed on servers located outside Rwanda, including in the European Union, United States, or other regions.

When your data is transferred internationally, we ensure it is protected by:

• Using cloud providers that comply with internationally recognised security standards (ISO 27001, SOC 2).
• Contractual safeguards — Data Processing Agreements with all third-party providers.
• Ensuring transfers are consistent with Rwanda's Data Protection Law requirements for cross-border data transfers.

You may contact us at info@hekitari.com to request information about the specific countries where your data may be processed.

When you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it. Animal and farm records that have been exported remain the user's responsibility after export.

Under Rwanda's Data Protection Law (Law No. 058/2021) and applicable international frameworks, you have the following rights:

• Right to access — request a copy of the personal data we hold about you.
• Right to correction — request that we correct inaccurate or incomplete data.
• Right to deletion — request that we delete your personal data, subject to legal retention requirements.
• Right to restrict processing — request that we limit how we use your data in certain circumstances.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at info@hekitari.com. We will respond within 30 days at no charge.

We take the security of your farm and animal data seriously. The measures we have in place include:

• Encryption in transit — all data transmitted between your device and our servers is encrypted using TLS.
• Encryption at rest — personal data and farm records stored on our servers are encrypted at rest.
• Access controls — only authorised Hekitari team members can access personal data, and only where necessary for their role.
• Role-based permissions — within multi-user accounts, data access is controlled by the organization administrator through role assignments.
• Penetration testing — we conduct security testing before major releases.
• Incident response — we have a documented process for responding to data breaches, including notifying affected users and the relevant authority within the timeframes required by law.

No system is completely secure. If you believe your account has been compromised, contact us immediately at info@hekitari.com.

The Hekitari Livestock Management System is designed for use by adult farmers, farm managers, and agricultural professionals. It is not intended for use by children under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has registered, we will delete their data promptly. Please contact info@hekitari.com if you believe this has occurred.

The Hekitari Livestock Management System requests the following device permissions. You may manage these at any time in your device settings. Denying a permission will disable the related feature but will not prevent you from using the rest of the system.

The Hekitari Livestock Management System is designed to work under low or intermittent internet connectivity. Records entered offline are stored securely on your device and synced to our servers automatically when a connection is restored. During the offline period, your data remains encrypted on your device. We are not responsible for data entered on a device that is subsequently lost, stolen, or damaged before it has synced.

The system allows you to export financial, production, health, and breeding reports for your own use — for example, for submission to a bank, cooperative, or research institution. Once you export and share a report, that data leaves our system and is no longer under our control. We are not responsible for how exported data is handled by third parties you choose to share it with.

We use analytics tools to understand how the system is used, identify bugs, and improve performance. This data is aggregated and does not identify you personally. We do not use advertising trackers or cross-app tracking. We do not share analytics data with third parties for their own commercial purposes.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app and by email at least 14 days before the changes take effect. The updated policy will always be available at livestock-privacy.hekitari.com. Continued use of the system after the effective date constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Rwanda Utilities Regulatory Authority (RURA), which oversees data protection in Rwanda, or the relevant data protection authority in your country.

Need help with the app? Visit our Support page.