Privacy & your data

Kanuvari is the conservation data app of Kaibar Nuvari. This page explains, in plain words, what we keep about you and the work of your Community Forest Association (CFA). Draft, October 2026: to be reviewed by a lawyer before public launch.

What we collect

Your account: name and email from your Google sign-in, and your wallet address if you connect one.
CFA membership: your role (member, verifier, admin…) and status.
Conservation records: seedlings, planting, nursery work, survival checks, transfers and losses, with who recorded them and when.
Photos and documents you attach, with a fingerprint (SHA-256) of each file and the time the photo was taken.
Location: only if you tick “Add my location to the photos”. Nursery GPS is entered by CFA admins.
What you type or say to the AI. Speech is turned into text by your phone’s browser; we receive the text, not the recording.

Why

To record, check and prove your CFA’s conservation work, so it can be trusted by partners and funders. We do not sell personal data.

Who can see it

Members of your CFA see nursery records. Admins, verifiers and auditors also see the member list and the change history.
Each verified record has a public proof page (/verify) showing the record’s data and fingerprints, the verifier’s name, and file fingerprints — not the photos themselves, which only CFA members can open.
When a batch of verified records is anchored on the Avalanche test network, only a fingerprint (a hash) goes on the public blockchain. It contains no names or photos, but it cannot be removed.
To answer you, your message and the facts the AI looks up are sent to an AI provider (Google Gemini, Groq or NVIDIA), which may process them outside Kenya. Do not type ID numbers, passwords or wallet seed phrases.

How long we keep it

Conservation records and their change history are kept for as long as the CFA uses Kanuvari, because proof depends on them. Your chats in the workspace are kept only on your own phone or computer; you can delete them from the sidebar.

Your rights (Data Protection Act, 2019)

To be told how your data is used (this page).
To see the personal data we hold about you, and to have mistakes corrected.
To object to processing, and to ask for deletion. Records already verified or anchored are corrected by adding a new version rather than deleted, so the history stays honest; your personal details can still be removed from your member profile.
To complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.

To use these rights, ask your CFA admin, who can reach the Kanuvari team.