Privacy Policy

1. Who We Are

HoneyChain is operated by Bannister Solutions (Pty) Ltd, a South African company. We provide a tamper-evident honey traceability platform for beekeepers.

2. Information We Collect

We collect the following personal information to provide our honey traceability service:

3. How We Use Your Information

• Provide offline-first honey traceability services
• Sync your data securely when you're online
• Generate provenance records and verification QR codes
• Send batch notification emails (processing summaries, claim codes)
• Improve app functionality and fix issues
• Comply with legal obligations

4. Legal Basis for Processing

Under the Protection of Personal Information Act (POPIA), we process your data based on:

• Consent — You agree to our privacy policy when creating an account
• Legitimate interest — Core product functionality (harvest tracking, provenance verification)
• Legal obligation — Government registration requirements (DALRRD)

5. How We Protect Your Data

• All data is encrypted in transit using HTTPS/TLS
• Local device storage uses encrypted databases
• Row-level security ensures you can only access your own data
• GPS coordinates are never exposed publicly — only reverse-geocoded to district level
• NFC tag IDs, hive identifiers, and apiary names are excluded from public verification pages

6. Third-Party Services

We use the following services to operate HoneyChain:

• Supabase — Cloud database, authentication, and file storage
• Resend — Transactional email delivery (batch notifications)
• OpenStreetMap / Nominatim — Reverse geocoding (GPS to district name)

We do not sell, rent, or share your personal information with third parties for marketing purposes.

7. Data Retention

• Active accounts: Data retained as long as your account is active
• Deleted accounts: Personal data removed within 30 days of deletion request. Anonymized provenance records may be retained for public traceability.
• Photos: Stored in secure cloud storage. Deleted when you remove them or delete your account.

8. Your Rights Under POPIA

You have the right to:

To exercise any of these rights, email privacy@honeychain.io. We will respond within 30 days.

9. Children's Data

HoneyChain is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

10. Data Breaches

In the event of a data breach that may affect your personal information, we will:

• Notify the Information Regulator as required by POPIA Section 22
• Notify affected individuals as soon as reasonably possible
• Take immediate steps to contain and remediate the breach

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of HoneyChain after changes constitutes acceptance of the updated policy.

12. Contact Us