Apical Dynamics Limited
Privacy policy
What we collect, where it sits, who else can see it, and how to get it back or get rid of it. Written to be read.
Last updated 22 September 2026. In effect from 22 September 2026.
Who we are
Apical Dynamics Limited is a company incorporated in Zambia with its office in Lusaka. We build and operate the software described below. For the purposes of the Data Protection Act No. 3 of 2021, we are the data controller for the information described in this policy, except where we say otherwise in the section on farm and clinic records.
Write to yourtech@apicaldynamics.com and one of us will read it.
What this policy covers
This policy covers four things:
- This website, apicaldynamics.com.
- Agrinora, our farm management application, at agrinora.app.
- Agrinora Livestock, our individual animal record application, at livestock.agrinora.app.
- diagnosticaMD, our clinical decision support application, at diagnosticamd.com.
Our hospital records product is still being built and is not released. Nothing in this policy applies to it yet. It will hold patient records, so this policy will be updated before anyone can sign up to it.
The short version
- We collect what the software needs to work.
- We do not sell your information and we do not share it for advertising.
- Your farm records and your animal records belong to you. We hold them so the software can show them back to you.
- Your records are stored outside Zambia, and the section on where your data is stored names the companies holding them.
- You can ask for a copy of your data or ask us to delete it, and we will do it without making you justify yourself.
What we collect, and why
This is split by product, because the products collect different things.
This website
| What | Why | How long |
|---|---|---|
| Your name, email address, organisation and message, if you send us one through the contact form | So we can reply to you | Until the conversation is finished and for a reasonable period after, so we remember who you are if you come back |
| Standard server logs held by our hosting provider, including IP address and browser type | Keeping the site up and defending it from abuse | Held by the provider on their own schedule, typically a short number of days |
Agrinora and Agrinora Livestock
| What | Why | How long |
|---|---|---|
| Your email address and password, held as a hash we cannot read | Signing you in, and proving an account is yours | While the account exists |
| Your name and your role on the farm, and the same for people you invite | Showing who did what, and deciding who is allowed to approve a plan or see money | While the account exists |
| Farm records: fields, tasks, work plans, comments, enterprises, budgets, expenses, income, stock, animal records, weights, treatments, calving records, photographs | This is the product | While the farm account exists, then as described under deletion |
| Photographs you upload, including anything visible in them | Showing the record you attached them to | While the record exists |
We do not ask for a national registration card number, a date of birth, a bank account or a mobile money number in either application. If a future feature needs one we will say so before it ships.
diagnosticaMD
diagnosticaMD takes the clinical features you type in, such as symptoms, signs and findings, and returns a weighted differential. It does not ask for a patient name, a national registration card number, a hospital number or a date of birth, and you should not type them into it. Read the section on diagnosticaMD and clinical information for what happens to what you do type.
Where your data is stored
Agrinora and Agrinora Livestock store their data with Supabase. The applications themselves are served by Vercel. This website is served by Cloudflare. None of these are in Zambia.
That means your information is held outside Zambia and sits under the law of wherever those servers are. Our agreements with these providers require them to keep it secure and to use it only to run the service for us.
The farm applications hold work records. They do not hold health information, national registration card numbers, dates of birth or bank details.
Our hospital records product will be hosted in Zambia when it is released. Clinical data does not belong on the same footing as a stock book.
If where your records sit matters to your operation, ask us before you commit and we will give you a straight answer.
Who else can see it
We use other companies to run the software. They can access data only to provide their service to us, and they are not permitted to use it for their own purposes.
| Who | What they do for us | What they can see |
|---|---|---|
| Supabase | Database, sign in, and file storage for Agrinora and Agrinora Livestock | All data held in those applications |
| Vercel | Serving the Agrinora and Agrinora Livestock applications | Connection logs, not the contents of your records |
| Cloudflare | Serving this website | Connection logs for the website |
| Web3Forms | Delivering the contact form on this website to our mailbox | What you type into that form |
| Resend | Sending account emails, such as address confirmation | Your email address and the contents of those emails |
| Namecheap Private Email | Our mailbox | Email you send us |
| Anthropic | The clinical reasoning behind diagnosticaMD | The clinical text submitted through diagnosticaMD |
We will also disclose information if we are required to by Zambian law or by a court. If that happens we will tell you, unless we are prohibited from doing so.
We do not sell personal data, and we do not share it with advertisers or data brokers. We have never done this and the products have no mechanism for it.
diagnosticaMD and clinical information
diagnosticaMD works by sending the clinical features you enter to a language model operated by Anthropic, which returns a weighted differential. That means the text you type leaves our systems and reaches a third party outside Zambia.
The application is designed to work on clinical features alone. Do not type a patient name, a national registration card number, a hospital number, a date of birth, or any free text that would let someone identify the patient. If you do, that information is transmitted along with everything else, and we cannot retrieve it or unsend it.
diagnosticaMD does not currently keep a record of the cases you enter. If we add saved case histories, which we are considering, this policy will be updated before that feature is released, and it will be off until you turn it on.
diagnosticaMD is a decision support tool. It does not make a diagnosis and it does not replace clinical judgement. The clinician using it remains responsible for the patient.
Farm and clinic records, and who is responsible for them
For your account details, such as your email address and your role, we decide what is collected and we are the controller.
For the records you put into the software, which includes information about the people working on your farm, you decide what goes in and what it is used for. We hold it and process it so the software can function. In practice that means you are responsible for telling the people on your farm that their names and their work are recorded in a system, and we are responsible for keeping that system secure and doing what you ask with the records in it.
Analytics and tracking
We do not run analytics on this website or in the applications. There are no tracking cookies, no advertising pixels and no third party scripts that follow you. The website sets no cookies at all. The applications set only what is needed to keep you signed in.
This is a deliberate choice and not an oversight. If we ever add analytics, this section will say so before we turn it on.
How we protect it
- Everything travels over an encrypted connection.
- Passwords are stored as hashes. We cannot read yours, and neither can anyone who takes a copy of the database.
- Access to your farm data is enforced by the database, through row level security, as well as by the application. Someone holding a valid session for another farm cannot read yours.
- Access to production systems is limited to those who need it, which at present is a very small number of people.
No system is perfect and we will not claim ours is. If we discover a breach that affects your data we will tell you and the Data Protection Commissioner, and we will tell you what we know at the time.
Your rights
Under the Data Protection Act No. 3 of 2021 you have the right to:
- Ask what we hold about you, and get a copy of it.
- Have information that is wrong corrected.
- Ask us to delete it, subject to the limits described on the data deletion page.
- Object to what we are doing with it, or ask us to restrict it.
- Withdraw consent where we relied on consent, without that affecting anything done beforehand.
- Complain to the Data Protection Commissioner if you think we have got it wrong.
Write to yourtech@apicaldynamics.com. We will respond within thirty days and we will not ask you to explain why you want it.
Children
None of our products are meant for children, and we do not knowingly hold personal information about anyone under eighteen. If you believe a child has created an account, write to us and we will remove it.
Changes to this policy
When we change this policy we will change the date at the top. If a change materially affects what happens to your data, we will email account holders before it takes effect.
Complaints
Come to us first at yourtech@apicaldynamics.com, because we can usually fix it faster than anyone else can. If we do not resolve it, you can complain to the Office of the Data Protection Commissioner in Zambia, and you do not need our permission to do so.
Questions about any of this go to yourtech@apicaldynamics.com, and a person will answer.