Last updated: October 20, 2026
This is a courtesy translation. The binding version of this document is the Spanish one; in the event of any discrepancy, the Spanish version prevails.
Inversiones Anaguaya S.A.S., a company domiciled in Barranquilla, Colombia (hereinafter "the Company", "we" or "the Controller"), is responsible for the processing of personal data collected through the SaaS platform BoviMonitor, available as a web application and an Android mobile application.
That responsibility covers the data of the accounts and their users: identification, credentials, preferences, billing, security and use of the help. For the records each customer enters about the operation of its farms —deliveries, inventories, movements, photographs, locations and other records, including those that identify the people who work on them—, the controller is the account holder, and the Company processes them on its behalf, under the Data Processing Agreement. Requests about those records should be addressed to the account holder; if they reach us, we forward them.
For any inquiry regarding the processing of your personal data, you may contact us at: privacidad@bovimonitor.com
This policy is governed by Colombian Law 1581 of 2012 (Personal Data Protection Act), Decree 1377 of 2013 and related regulations. Each user accepts it, together with the Terms of Use, the first time they sign in to the platform. Those in the European Union, the European Economic Area, the United Kingdom or Brazil are also covered by sections 10 and 11.
This policy is an integral part of the platform's Terms of Use.
We collect the following types of data, depending on the features used:
First name, last name, email address and password (stored in encrypted form). This data is required to create and authenticate your account.
Farm name, declared geographic location, information about cattle groups, supplements, delivery locations, supplementation moments and delivery schedules. This data is entered voluntarily by the user for the operation of the service.
Records of actual supplement deliveries: date, time, quantity, delivery location, person responsible for the execution, and reasons for non-supplementation where applicable.
GPS coordinates captured at the moment a supplement delivery is recorded, for the purpose of generating verifiable evidence of execution in the field. Location capture only occurs during the active recording of a delivery and requires explicit device authorization.
Images taken with the device camera when recording deliveries, no supplementation records, cattle moves and other activities, used as evidence of what was done. The date, time and location of the capture, and who took it, are stored with each one. The camera is only activated by an explicit user action and requires device permission. Their retention period is set out in section 6.
Records of purchases, consumption and movements of supplements and supplies within the farm, entered voluntarily for stock control.
Technical identifiers of the mobile device, operating system version and connectivity status, used for offline-online data synchronization, technical support and to recognize the phone in Settings › Phones, where the app can be blocked if the phone is lost. That recognition uses the identifier Android assigns to the application on each phone, which does not change when the app is reinstalled.
What is searched for in the User guide without results, the answer to “Was this article helpful?” and each time the button to write to support is pressed, with the screen the person came from and what they typed before pressing it (up to 200 characters). It is stored with the user and the farm, used only to improve the guide and support, and deleted after 90 days.
The data collected is used exclusively to:
We do not sell, rent or share personal data with third parties for those third parties' own commercial purposes.
Data is stored on Google Cloud Platform servers, region South America West (Santiago, Chile), under encryption protocols in transit (TLS 1.2+) and at rest (AES-256). Photographs and evidence files are stored in Google Cloud Storage with access restricted per farm.
In the Android mobile application, operational data is stored in a local database, in the application's private storage, so that it works without an internet connection, and it is synchronized when the phone regains connectivity. The application does not encrypt that database: it is protected by the phone's own encryption, when enabled. Session credentials are stored encrypted, in Android's secure storage. Since version 0.0.1386, the application is excluded from Android backup: what it stores on the phone is not copied to the Google account nor transferred to another phone when setting it up. In earlier versions, if the phone had Android backup turned on, the system could include that database in the backup it keeps in the Google account of the person using the phone.
To protect sign-in and registration in the web application against automated access, we use Turnstile, the verification service of Cloudflare, Inc. (United States). When those two pages are opened, Turnstile receives the IP address, the browser type and other technical signals from the connection, and uses them to tell a person apart from an automated program. It does not receive the username, the password or any other data typed into the form. These signals may be processed outside Colombia. Cloudflare handles them as a processor on our behalf, and may also use them to improve its own detection of automated programs, under its privacy policy. The mobile application does not use this service.
To protect sign-in and registration in the Android application, we use Play Integrity, a service of Google LLC (United States) that checks that the application is the original from Google Play and that the phone has not been tampered with. Google receives technical signals from the phone and the application, and returns to us only the result of that check. It does not receive the username, the password or any other data typed into the form.
To detect automated access and misuse, we log which parts of the platform each account accesses, with the date, the time, the IP address and whether it was from the web or from the application. These logs do not include the content accessed, are kept for 30 days and are used only for the security of the service.
If you write to support on WhatsApp from “Get help”, the application opens WhatsApp with a message already written that includes your name, your username, your role, the farm, the screen you were on and the application version and, from the phone, the phone model, what is still to be synchronized and the last synchronization. You see it and can change it before sending it: nothing goes out unless you send it. WhatsApp is a service of WhatsApp LLC(United States), which processes what is sent through it under its own terms and privacy policy; we use that conversation only to give you support. If you prefer not to use WhatsApp, you can write to the support email.
The technical logs of each request to the platform, which include the IP address, are kept for 30 days in Google Cloud Logging, whose location is managed by Google and is not tied to the Chile region.
These providers process data on our behalf, as processors:
The three map services receive the request directly from the browser or the phone, with the IP address and the coordinates of the area shown —in thumbnails, also the outline of the place—, without cookies and without names or other account data. WhatsApp, on the other hand, does not process data on our behalf: you use it, if you wish, under its own terms.
Data is retained while the account remains active or for as long as necessary to provide the service. Upon cancellation of the subscription:
Evidence photographs. While the account is active, the file of each photograph is kept for one year on the Basic plan and for five years on the All-inclusive plan of either module, counted from the end of the month in which it was taken. Each photograph keeps the period of the plan the farm had on the day it was taken: changing plans does not change it for photographs already taken.
Deleting a user or the account. Any user can delete their user, and the account holder can delete the whole account, from “My profile” in the app or on the web. The steps are in Delete your account.
Under Colombian Law 1581 of 2012, you have the right to:
To exercise these rights, send your request to privacidad@bovimonitor.com with the subject line "Derechos HABEAS DATA" (data subject rights). We will respond within a maximum of 15 business days.
You can also delete your user or your account yourself from “My profile”, as explained in section 6.
If you are in the European Union, the European Economic Area, the United Kingdom or Brazil, you also have the rights set out in sections 10 and 11.
The Android application requests the following device permissions:
Each permission is requested at the moment the corresponding feature is used for the first time. You may revoke these permissions at any time from your device settings.
The web application stores in the browser only what it needs to work: the signed-in session, the language and the display preferences. We do not use cookies or other technologies for tracking, advertising or analytics, whether our own or third-party. There are three cookies, all our own:
The two session cookies last 30 days from the last use, even if the browser is closed, and are deleted when signing out. From the European Union, the European Economic Area and the United Kingdom, the sign-in screen shows the "Keep me signed in" checkbox, unchecked: if it is not checked, both are deleted when the browser is closed and the session ends with it. To know whether to show it, the screen looks at the browser's time zone, without sending it anywhere, and asks our site bovimonitor.com, served by Cloudflare, for the country the connection comes from; the registration screen uses the same query to suggest the farm's country. Neither of the two is stored.
In addition, the application keeps in the browser's storage the farm being worked on, the data of the current session and the display preferences, such as the number format, the units, the open tabs and the map layers. The farm and the session data are deleted when signing out; the preferences remain in that browser until they are deleted from its settings. None of this is shared with third parties.
The Cloudflare verifier described in section 5 uses only the technical signals strictly necessary to detect automated access, not for advertising or tracking.
The public site bovimonitor.com does not use cookies or store anything in the browser. It counts its visits with Cloudflare Web Analytics, which works without cookies, and it serves its own fonts, without relying on third parties.
If you are in the European Union, the European Economic Area or the United Kingdom, the processing of your data is also governed by the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) or by its United Kingdom equivalent (UK GDPR).
Legal bases. We process the data for which we are the controller (section 1) on these bases:
We process the farms' records, with their locations and photographs, on behalf of the account holder, who decides their legal basis and must inform the people they concern.
Your rights. In addition to those in section 7, you may object to processing based on legitimate interest; ask for processing to be restricted; receive your data in a structured, commonly used and machine-readable format and ask for it to be transmitted to another controller (portability), and withdraw your consent at any time, without affecting what was processed before. The platform does not make decisions about you based solely on automated processing that produce legal effects. We respond within the period in section 7 and, in any case, within one month.
You may lodge a complaint with the data protection authority of the country where you live, work or where the alleged infringement took place —in Spain, the Agencia Española de Protección de Datos; in Portugal, the Comissão Nacional de Proteção de Dados— and, in the United Kingdom, with the Information Commissioner's Office (ICO).
International transfers. The Company is in Colombia, hosts the data in Chile and some of its providers are in the United States (section 5). Colombia and Chile do not have an adequacy decision from the European Commission. Where the law requires a safeguard for those transfers, we rely on the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914), with the United Kingdom addendum for data leaving the United Kingdom and, with providers in the United States, on the EU-U.S. Data Privacy Framework where the provider is certified. You can request a copy of these safeguards by writing to privacidad@bovimonitor.com.
The retention periods are those in section 6.
If you are in Brazil, the processing of your data is also governed by the Lei Geral de Proteção de Dados Pessoais (Law 13,709 of 2018, “LGPD”). The legal bases are those of Article 7 of the LGPD, for the same uses as in section 10: performance of a contract (item V), legitimate interest (item IX), compliance with a legal or regulatory obligation (item II) and consent (item I).
In addition to the rights in section 7, Article 18 of the LGPD grants you: confirmation of the existence of processing; anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law; portability; information about whom we share your data with (section 5) and about the possibility of not giving consent and its consequences; withdrawal of consent, and objection to processing carried out in breach of the law. You may file complaints with the Autoridade Nacional de Proteção de Dados (ANPD).
The channel for data protection matters is privacidad@bovimonitor.com. Where the law requires a safeguard for the international transfer of data from Brazil, we use the standard contractual clauses approved by the ANPD (Resolution CD/ANPD No. 19 of 2024).
BoviMonitor is a service intended for people over 18 years of age in the context of professional livestock operations. We do not knowingly collect data from minors.
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this document and, if the changes are material, we will notify you by email or through a notice on the platform.
If you have questions, comments or requests regarding this policy, please contact us:
Controller: Inversiones Anaguaya S.A.S. — Barranquilla, Colombia
Email: privacidad@bovimonitor.com
Web platform: bovimonitor.app-bm.com