Privacy notice

Kera Wellbeing Company Limited, which trades as Loamy and is based in Lagos, Nigeria, is the data controller. For anything about your data, email loamy.farm@gmail.com. You can also message us on Instagram at @loamy.farm, but please don’t share personal details there.

• Account: your email, first name, and a password (stored scrambled by our sign-in provider; we can’t see it).
• Your growing space: your answers about space, sunlight, water and experience, and, if you give it, your area of Lagos (never your exact location).
• Your garden: the plants you add, care tasks you tick off, notes, milestones, harvests and photos you upload.
• Ask Loamy: the questions you ask, the answers, and any ratings or requests for help from our team.
• Orders: your phone number, delivery address, what you bought and delivery notes.
• Payments: a payment reference, amount and status from Paystack. Paystack handles your card; Loamy never sees or stores your card number.
• Anonymous visit counts (only if you say yes): which pages and buttons are used. This never includes what you type to Ask Loamy.
• Technical: basic logs (such as time and error messages) to keep Loamy secure and working.

• To provide Loamy to you (our contract with you): your account, plans, garden, care tasks, Ask Loamy, membership and orders, including calling you to arrange delivery.
• With your consent: anonymous visit counts. You can change your mind any time in Privacy and data.
• For our legitimate interests: keeping Loamy secure, preventing fraud, fixing problems and improving our plant guides, in ways you’d reasonably expect.
• Because the law requires it: keeping order and payment records for tax and accounting.

We don’t sell your data, use it for advertising, or make decisions about you by automated means that have legal or similarly significant effects.

Only the service providers who help us run Loamy, under contracts that require them to protect it:

• Supabase: our database, sign-in and photo storage (servers in Frankfurt, Germany).
• Paystack: membership and shop payments (Nigeria).
• DeepSeek: the AI service that drafts Ask Loamy answers (servers in China). We send your question and the relevant plant details, not your name, email or phone number.
• Namecheap: hosting for the Loamy website and app (United States).
• Our delivery partners: your name, phone number and address, only to deliver your order.

We may also share data if the law requires it, or to protect someone’s safety. Where your data goes outside Nigeria, we rely on the safeguards the Nigeria Data Protection Act allows, such as contractual protections with each provider.

• Your account, garden, plans and Ask Loamy history: while your account is open. When you delete your account, we delete them.
• Order and payment records: 6 years, as tax law requires. If you delete your account, we remove your name, phone and address from them.
• Anonymous visit counts: up to 24 months.
• Security logs: up to 12 months.

Under the Nigeria Data Protection Act you can:

• See your data and take a copy: use Download my data.
• Correct it if it’s wrong.
• Delete it: use Delete my account.
• Withdraw consent, for example to anonymous visit counts, at any time.
• Object to how we use your data, or ask us to limit it.
• Move it to another service (your download is a standard JSON file).

For anything else, email loamy.farm@gmail.com. We’ll reply within 30 days. If you’re not happy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

We use a few small cookies. Only the last one depends on your choice.

Data is encrypted in transit and stored with providers that encrypt it at rest. Garden photos are private and only shown to you through links that expire. Only Loamy staff who need it can see your data, and admin actions are logged. If a breach ever puts you at risk, we’ll tell you and the Commission as the law requires.

Loamy is for adults. You need to be 18 or older to create an account, and we don’t knowingly collect data from children.

If we change how we use your data in a way that matters, we’ll tell you in the app before the change applies. The date at the top shows the latest version.