Privacy Policy

 

SokSan DSS – AI-Powered Mobile Advisory Privacy Policy

Effective date: 19 July 2026
Last updated: 19 July 2026
Version: 1.0

  1. Introduction

“SokSan Decision Support System (SokSan DSS)” is an AI-powered mobile advisory and decision-support application providing location-specific weather information and agricultural, livestock and human-health information in different countries and local languages.

This Privacy Policy explains how personal information is collected, used, stored, analysed, disclosed and protected when a person registers for, accesses or uses the “SokSan DSS” mobile application, website, chatbot, messaging service, field-registration service or related advisory services.

By using SokSan DSS, users acknowledge the practices described in this Privacy Policy. Where consent is required, SokSan DSS will request clear and affirmative consent before collecting or processing the relevant information.

  1. Organisations responsible for personal information

Global platform owner

eeMAUSAM Weather Risk Management Services Private Limited, trading as eeMAUSAM, is the global owner and technology provider of SokSan DSS.

Registered office: # 30605, CEDAR Block, Indu Fortune Fields – Gardenia (IFFG); Near HiTech City MMTS; KPHB Phase – 13; Hyderabad – 500072, Telangana, India.
Privacy email: rao.gs@eemausam.com

General contact: Srinivasa Rao GATTINENI

Cambodian operator

Agri Risk Innovative Solutions Enterprise Co., Ltd., trading as ARISE, holds the Cambodian ownership and operational rights for SokSan DSS.

Registered office: Agri Risk Innovative Solutions Enterprise Co., Ltd. (ARISE), A 29, Block A1, Street Thnourt Chour, Chumnik Village, Anlong Vil Commune, Sangkae District, Battambang Province, Kingdom of Cambodia.
Privacy email: sophary.long@arise-cambodia.com

For users outside Cambodia, eeMAUSAM will normally act as the primary data controller unless a country-specific notice states otherwise.

For users in Cambodia, ARISE acts as the local data controller and eeMAUSAM acts as the platform and technology provider. Where ARISE and eeMAUSAM jointly determine the purposes and methods of processing, they act as joint controllers.

Local implementing organisations, government programmes, cooperatives, insurers, development partners, Agri-Entrepreneurs may act as separate controllers or authorised processors depending on their role. Users will be informed when a local organisation independently collects or uses their information.

  1. Information collected

SokSan DSS may collect the following categories of information.

3.1 Registration and contact information

This may include:

  • Farmer or user name;
  • Mobile telephone number;
  • Email address, where provided;
  • Country, province or state, district, commune, township, village or ward;
  • Preferred language;
  • User category, such as farmer, livestock keeper, extension worker, Agri-Entrepreneur or health-information user;
  • Password, login credentials, verification code or account identifier;
  • Age or age group where required for health, safeguarding or legal purposes; and
  • Details of a parent, guardian or authorised representative where applicable.

SokSan DSS should not collect national identity numbers, passport numbers, bank account information or other official identifiers unless a particular service legally requires them and the user receives a separate notice.

3.2 Location information

SokSan DSS may collect:

  • Country, administrative area and village selected by the user;
  • Approximate device location;
  • Precise GPS coordinates of a farm, field, livestock facility or advisory location when the user permits it;
  • Farm boundary or mapped plot information;
  • Location embedded in an uploaded photograph; and
  • Approximate location inferred from an IP address.

Location is used to provide village-level forecasts, weather warnings, crop-stage advice, pest and disease risk information, livestock heat-stress information and other location-specific services.

SokSan DSS will not collect continuous or background location unless a clearly identified feature requires it, the collection is necessary and the user has provided separate permission.

3.3 Farm and crop information

This may include:

  • Farm size, and field location;
  • Land ownership, leasing or cultivation status where relevant;
  • Crop type and variety;
  • Sowing, planting, transplanting and expected harvesting dates;
  • Nursery, establishment, vegetative, flowering, reproductive, grain-filling and maturity stages;
  • Irrigation source and water availability;
  • Soil characteristics;
  • Fertiliser, pesticide and other input use;
  • Crop condition, pest symptoms, disease symptoms, weed problems and weather damage;
  • Previous production, yield and crop-loss information;
  • Harvest and post-harvest information; and
  • Farmer-selected advisory preferences.

3.4 Livestock information

This may include:

  • Animal species, type and breed;
  • Number, age group and production purpose of animals;
  • Housing, feeding, water and management practices;
  • Vaccination and deworming information;
  • Reproductive and production information;
  • Milk, meat, egg or growth information;
  • Symptoms, injuries, disease observations and mortality;
  • Livestock location and heat-stress exposure; and
  • Photographs or videos submitted for advisory purposes.

3.5 Photographs, videos, camera and files

Users may choose to use the device camera or photo library to submit photographs or videos of crops, pests, diseases, weeds, soil, livestock, animal injuries or other field conditions.

Where a human-health feature is available, users may also voluntarily submit a photograph relevant to a health question. Human-health images will be treated as sensitive information.

Photos may contain location metadata, people, faces, houses, registration numbers, documents or other unintended information. Users should avoid including identifiable people, identity documents, financial documents or unrelated private information.

SokSan DSS may automatically remove unnecessary photo metadata and may crop, resize or analyse an image to provide advice.

Camera and photo access will be requested only when the user activates a feature requiring it.

3.6 Human-health information

Where human-health advisory features are enabled, SokSan DSS may process information voluntarily submitted by the user, including:

  • Symptoms and duration of symptoms;
  • General age group and sex where relevant;
  • Existing conditions or allergies voluntarily provided;
  • Medicines voluntarily reported;
  • Health-related questions, text, voice messages or photographs;
  • Information needed to determine whether urgent professional care should be sought; and
  • Advisory history.

Human-health information is sensitive. SokSan DSS will request separate and explicit consent before processing it.

Users should not provide another person’s health information unless they are legally authorised to do so.

SokSan DSS does not provide emergency services. A user experiencing a medical emergency should immediately contact local emergency services, a qualified healthcare provider or the nearest health facility.

3.7 Questions, messages and advisory interactions

SokSan DSS may process:

  • Questions submitted through text, chatbot, voice or images;
  • Responses and advisory history;
  • Feedback and ratings;
  • Communications with agronomists, veterinarians, health professionals, support staff or field facilitators;
  • Preferred advisory topics; and
  • Records of alerts opened, viewed or acted upon.

3.8 Device, technical and usage information

This may include:

  • Device type and model;
  • Operating system and application version;
  • Device or application identifier;
  • IP address and mobile network information;
  • Notification token;
  • Language and regional settings;
  • Login time and usage activity;
  • Crash reports, error logs and diagnostic information;
  • Security and fraud-prevention information; and
  • Consent and permission records.

SokSan DSS will not access contact lists, call logs, unrelated files, microphone recordings or other device information unless the feature is necessary, clearly disclosed and separately permitted.

3.9 Information collected through field facilitators

An authorised Agri-Entrepreneur, extension worker, cooperative representative or program staff member may assist a farmer with registration or advisory submission.

The facilitator must:

  • Explain what information is being collected;
  • Obtain the farmer’s agreement;
  • Collect only necessary information;
  • Use an authorised SokSan DSS account or device;
  • Maintain confidentiality; and
  • Avoid retaining farmer information on a personal device, notebook or messaging account.
  1. How information is collected

Information may be collected:

  • Directly from the user during registration;
  • When the user creates a farm, crop or livestock profile;
  • When the user submits a question, image, voice recording or feedback;
  • Through device permissions selected by the user;
  • Through an authorised field facilitator;
  • Automatically through technical logs;
  • From weather, satellite, remote-sensing and geographic datasets linked to the user’s selected or permitted location; and
  • From a partner program, where the user has been informed and the transfer is legally permitted.
  1. Purposes for using information

Personal information may be used to:

  1. Register, authenticate and manage a SokSan DSS account.
  2. Identify the user’s country, language and local advisory content.
  3. Provide location-specific weather forecasts, rainfall alerts, dry-spell warnings, flood warnings and heat-stress alerts.
  4. Provide crop-specific and crop-stage-specific recommendations.
  5. Analyse photographs and reported symptoms of crop pests, crop diseases, weeds, soil problems or weather damage.
  6. Provide livestock feeding, housing, preventive-health, disease-risk and production-management information.
  7. Provide general human-health information where that module is enabled.
  8. Personalise advice using farm, crop, livestock, weather, location and previous-interaction information.
  9. Deliver notifications, reminders, alerts and responses requested by the user.
  10. Refer difficult cases to an authorised agronomist, veterinarian, health professional or advisory expert.
  11. Improve accuracy, local relevance, translation quality, safety and performance.
  12. Conduct quality assurance and identify incorrect or unsafe advisory responses.
  13. Maintain security, investigate misuse and prevent fraud.
  14. Provide user support and respond to complaints or privacy requests.
  15. Produce anonymised and aggregated statistics for program monitoring, research, service planning and impact assessment.
  16. Comply with legal obligations and lawful government or court requests.

Personal data will not be sold or rented.

Personal data, farm photographs or health information will not be used for behavioural advertising or data-broker activities.

  1. AI and automated analysis

SokSan DSS may use artificial intelligence, machine learning, image analysis, translation, rules-based decision support and statistical models.

AI may be used to:

  • Interpret a farmer’s question;
  • classify crop or livestock images;
  • identify possible pests, diseases or symptoms;
  • combine crop stage and weather information;
  • translate or localise advisory content;
  • recommend relevant advisory material;
  • identify potentially urgent cases; and
  • improve service performance.

AI-generated results can be incomplete or incorrect. SokSan DSS should present important advice as decision support and not as a guaranteed diagnosis, treatment, yield result or financial outcome.

Where a third-party AI provider receives personal information, photographs, location or health information, the user will receive a prominent disclosure and explicit consent request before that information is transferred, where required.

Contracts with AI providers should prohibit the provider from using identifiable SokSan DSS user data to train general-purpose models unless the user has separately and expressly opted in.

SokSan DSS will not make a legal, credit, insurance, employment or similarly significant decision about a person solely through automated processing without appropriate legal authority, notice and human review.

  1. Legal grounds for processing

Depending on the country and the service, processing may be based on:

  • User consent;
  • Explicit consent for location, camera, health information or third-party AI processing;
  • Performance of the service requested by the user;
  • Compliance with a legal obligation;
  • Protection of the user’s or another person’s vital interests in a genuine emergency;
  • Legitimate organisational interests, where permitted and not overridden by the user’s rights; or
  • Another lawful basis available under applicable national law.

Users may withdraw consent through the app or by contacting the privacy team. Withdrawal will not affect processing lawfully completed before withdrawal.

  1. Disclosure and sharing

Information may be disclosed only where necessary to:

  • eeMAUSAM and ARISE personnel who require access;
  • Authorised country partners;
  • Cloud-hosting, database and storage providers;
  • OTP, SMS, email, push-notification and messaging providers;
  • Translation and localisation providers;
  • AI and image-analysis providers;
  • Weather, satellite, mapping and remote-sensing service providers;
  • Application analytics, diagnostics and cybersecurity providers;
  • Authorised agronomists, veterinarians or health professionals reviewing a question;
  • Program partners, donors or research organisations using anonymised or aggregated information;
  • Insurers, financial institutions, buyers or input suppliers only where the user has requested the service or separately consented;
  • Professional advisers, auditors and insurers;
  • Government authorities, regulators or courts when legally required; and
  • A successor organisation during a merger, restructuring or transfer, subject to appropriate safeguards.

Service providers must process information only under written instructions, protect it appropriately when their service ends.

Identifiable farmer data will not be included in donor reports, public maps, case studies, research publications or promotional materials without specific permission.

  1. International data transfers

SokSan DSS operates in multiple countries. Information may be stored or processed in India, Cambodia or other countries where approved service providers operate.

Where information is transferred internationally, eeMAUSAM, ARISE and their partners will use safeguards required by applicable law, which may include:

  • Data-processing agreements;
  • Contractual data-protection clauses;
  • Standard contractual clauses;
  • ASEAN model contractual clauses;
  • Transfer-impact assessments;
  • Encryption and access restrictions;
  • User consent where legally required; and
  • Data localisation where required by national law.

Country-specific notices may provide additional information about storage locations or transfer restrictions.

  1. Data retention

Personal information will be retained only for as long as reasonably necessary for the stated purpose, legal obligations, security, dispute resolution or enforcement.

The proposed standard retention periods are:

  • Active account and farmer profile: while the account is active;
  • Inactive accounts: deletion or anonymisation after 24 months of inactivity;
  • Farm, crop and livestock advisory history: while the account remains active and for up to 24 months afterwards where required for continuity;
  • Crop and livestock photographs: normally up to 12 months after the advisory request;
  • Human-health questions and images: normally up to 180 days after the response, unless a longer period is requested by the user or legally required;
  • Technical and security logs: normally up to 12 months;
  • Consent and legal-compliance records: for the applicable statutory period, which may be up to seven years;
  • Support records: normally up to 24 months after closure; and
  • Properly anonymised statistics: may be retained for research, planning and service improvement.

When an account-deletion request is accepted, information should be removed from active systems within 30 days. Residual encrypted backup copies may remain for up to 90 days and will not be restored to active use except for disaster recovery or legal obligations.

These periods may be shortened or extended where required by country-specific law.

  1. Security

SokSan DSS uses organisational and technical measures appropriate to the nature of the information, including:

  • Encryption during transmission;
  • Encryption of sensitive information at rest;
  • Role-based and least-privilege access;
  • Multi-factor authentication for administrative access;
  • Segregation of health and other sensitive data;
  • Secure software-development practices;
  • Application and infrastructure logging;
  • Security testing and vulnerability management;
  • Backups and disaster-recovery controls;
  • Confidentiality obligations and staff training;
  • Service-provider due diligence;
  • Incident-response procedures; and
  • Periodic review of access permissions.

No electronic system can be guaranteed to be completely secure. Users should protect their device, login credentials and verification codes.

  1. User choices and rights

Depending on applicable law, users may have the right to:

  • Know whether personal information is being processed;
  • Receive information about collection and use;
  • Access their information;
  • Correct inaccurate or incomplete information;
  • Delete their information or account;
  • Withdraw consent;
  • Object to or restrict particular processing;
  • Request a portable copy where applicable;
  • Request human review of an automated decision;
  • Nominate another person to exercise rights where permitted; and
  • Submit a complaint to the relevant data-protection or consumer-protection authority.

Rights may be exercised:

SokSan DSS may request reasonable verification before providing access to or deleting an account.

Information required by law, needed for fraud prevention or necessary to resolve an active dispute may be retained after account deletion. The user will be informed where this applies.

  1. Camera, photo, location and microphone permissions

Device permissions are optional unless necessary for a feature selected by the user.

A user may:

  • Deny camera access and manually describe the problem;
  • Deny location access and manually select a village or farm location;
  • Deny photo-library access and take a new photograph;
  • Deny microphone access and submit text instead; and
  • Revoke permissions through device settings.

Withdrawal of a permission may limit the related feature but should not unnecessarily prevent access to unrelated services.

  1. Children and young users

SokSan DSS is primarily intended for adults engaged in farming, livestock management, extension or household decision-making.

Persons under 18 should use the app only with the involvement and consent of a parent, guardian or authorised programme representative where required by law.

SokSan DSS will not knowingly collect children’s health information, precise location or photographs without appropriate consent and safeguards.

Where a country applies a different digital-consent age, the applicable national requirement will be followed.

  1. Anonymised and aggregated information

SokSan DSS may convert personal information into anonymised or aggregated information that does not reasonably identify an individual.

Such information may be used for:

  • Agricultural risk mapping;
  • Pest or disease surveillance;
  • Weather-impact analysis;
  • Service improvement;
  • Programme monitoring;
  • Research;
  • Policy planning; and
  • Public-interest reporting.

SokSan DSS will apply appropriate aggregation thresholds and will not publish information from which an individual farmer, household or sensitive location can reasonably be reidentified.

  1. Communications

Service messages, verification codes, requested advisories, weather warnings and security notices are part of the service.

Promotional, fundraising or partner-marketing messages will require a separate choice where required by law. Users can opt-out without losing access to essential service messages.

Health information, crop photographs and precise farm locations will not be used to select marketing messages.

  1. Data breaches

Where a security incident affects personal information, SokSan DSS will:

  • Investigate and contain the incident;
  • Assess the nature and likely impact;
  • Take corrective measures;
  • Notify relevant authorities where required; and
  • Notify affected users where required or where notification would help them protect themselves.
  1. Third-party links and services

SokSan DSS may link to weather sources, government services, hospitals, veterinary providers, input suppliers, insurers, financial services or other external resources.

Their privacy practices are governed by their own policies. SokSan DSS is not responsible for information submitted directly to an independent third party.

  1. Changes to this Privacy Policy

This policy may be updated when SokSan DSS changes its services, technology, partners or legal obligations.

Material changes will be communicated through the app, website, SMS, email or another appropriate channel. New consent will be obtained where a change introduces a materially different use requiring consent.

 

  1. Contact and complaints

Privacy questions, complaints and rights requests may be submitted to:

Global privacy contact – Srinivasa Rao GATTINENI

Address: eeMAUSAM Weather Risk Management Services Private Limited, # 30605, CEDAR Block, Indu Fortune Fields – Gardenia (IFFG); Near HiTech City MMTS; KPHB Phase – 13; Hyderabad – 500072.
Email: rao.gs@eemausam.com
Telephone: +91 9000293310

Cambodia privacy contact – Sophary LONG

Address: Agri Risk Innovative Solutions Enterprise Co., Ltd. (ARISE), A 29, Block A1, Street Thnourt Chour, Chumnik Village, Anlong Vil Commune, Sangkae District, Battambang Province, Kingdom of Cambodia.

Email: sophary.long@arise-cambodia.com
Telephone: +85512854391

Data Protection Officer or Privacy Lead: Rudra Aryan POTLURI
Designation: Manger – IT & MIS
Email: rudra@rapotluri.com

SokSan DSS will acknowledge privacy complaints promptly and aim to provide a substantive response within 60 days, unless a different period applies under local law.

 

 

Mandatory in-app consent and permission messages

Camera permission

Use your camera for crop or livestock advice: SokSan DSS uses your camera only when you choose to photograph a crop, pest, disease, animal or field condition for advisory analysis. The photo may be securely uploaded and analysed by SokSan DSS and approved AI or advisory providers. Do not include people, identity documents or unrelated private information.

Choices: Not now / Allow camera

Location permission

Use your location for local weather and farm advice: SokSan DSS uses your location to provide village-level weather forecasts, crop-stage advisories and local risk alerts. You may instead select your village or farm manually. We do not continuously track your location unless a separately explained feature requires it.

Choices: Select manually / Allow approximate location / Allow precise location

Health-information consent

Sensitive health-information notice: Information you provide about symptoms, medicines, health conditions or health-related images is sensitive. SokSan DSS will use it only to provide the requested information, improve safety and, when necessary, refer the question for authorised professional review. The service is not an emergency service or a substitute for examination by a qualified healthcare professional.

Checkbox: I agree to the processing of the health information I choose to submit.

Third-party AI consent

AI processing notice: To analyse this question or image, SokSan DSS may securely send the information you submit to an approved third-party AI service. The provider is contractually restricted from using identifiable SokSan DSS information to train its general models.

Choices: Do not use third-party AI / Agree and continue

 

 

Google Play Data Safety declarations

Subject to a complete SDK and system audit, SokSan DSS will probably need to declare collection of:

  • Name, phone number and possibly email;
  • Precise or approximate location;
  • Photos and videos;
  • Health information;
  • User messages or other user-generated content;
  • App interactions;
  • Device or application identifiers;
  • Crash logs and diagnostic information; and
  • Possibly audio data where voice questions are supported.

Likely purposes are app functionality, personalisation, account management, analytics, security and developer communications.

The declaration should normally state no sale, no advertising use and no cross-app tracking, provided that no advertising or tracking SDK is integrated. Whether a vendor transfer is reported as “sharing” must be decided after reviewing Google’s definitions and each provider contract. Google requires the Data Safety disclosure to remain consistent with the actual app behaviour and privacy policy. (Google Help)

Probable Apple App Privacy labels

The likely Apple categories are:

  • Contact information;
  • Health information;
  • Precise or coarse location;
  • User content, including photos, messages and possibly audio;
  • Identifiers;
  • Usage data; and
  • Diagnostics.

Most of these data will be linked to the user where stored against the farmer account. “Data used to track you” should be declared No only when SokSan DSS does not link app information with third-party advertising data, use advertising identifiers or disclose data to data brokers. Apple requires disclosure of data collected through integrated third-party code as well as data collected directly by the app.

Scroll to Top