Privacy
Last updated 1 October 2026.
AmuFlow schedules irrigation for fields you choose. It is one app on the phone, on the web at app.amuflow.org and inside Telegram. This page says what that needs from you, what it does not, and how to have everything removed.
What we hold
- How you sign in, which is the identity on your account: your phone number if you sign in with a code sent through Telegram; your Telegram account number and username if you sign in through Telegram; your Google account number and email address if you sign in with Google.
- Your name, and the setup answers you choose to give — organisation, country, farm size, experience, what you use AmuFlow for — plus the language you chose. The name starts as the one Telegram or Google gave us, if you signed in that way, until you change it.
- The fields you keep: their boundaries, area, crop and planting dates, for a field you picked from the state land register its cadastral number and contour number there, and the satellite readings of how green each one is. A boundary is a shape on the ground, so it identifies a place rather than a person — but it is yours, and it is treated as personal data here.
- What you record in the journal: irrigations, inputs, costs and notes, as you enter them.
- Your answers to the water inspection check, and your water papers: for each item of the inspection's list, whether it is in order on your farm; your water supplier, contract number and date, whether it is confirmed in Suv hisobi, your season's water limit and whether your intakes have meters. AmuFlow's estimate shown to you is worked out from these and your records, and each time it changes it is kept with its date, so you can see how it moved.
- Where to send reminders: your Telegram chat, if you started the AmuFlow bot or allowed it to write to you, and a push token if you turn on notifications on a phone. Turning notifications off stops them.
- Your sign-in sessions, stored in a form that cannot be replayed if read. On your side, the sign-in is kept in your phone's secure storage, or in your browser's storage for this site on the web and in Telegram. AmuFlow sets no cookies.
What we do not hold
- No payment details. There is no paid tier and nothing to buy, so nothing asks for a card.
- No location tracking. The app never asks for your device position. The map opens where you pan it.
- No advertising identifiers, no third-party analytics, no ad networks.
- No contacts, photos, microphone or files.
Whose side AmuFlow is on
AmuFlow is here to help the farmer, and what it holds about your farm is held for you. Your fields, your waterings and anything else you record are never sold, and never given to a water supplier, an inspection or any other authority on AmuFlow's own initiative. Apart from what the law can compel, below, it goes only where the app needs it to work: to the services listed under the next heading, without your name or your number, to work out weather, soil and satellite readings; and through Telegram or your phone's notification service, when AmuFlow sends you a reminder or you use the bot.
Your water records report goes where you send it. The PDF of your water records is made from your own records only when you ask for it, in the app or with /hisobot in the bot. It goes only where you send it: to your phone or browser, or to your own chat with the bot. AmuFlow keeps no copy of it and sends it nowhere else.
A request from the state needs the committee's agreement. The committee is AmuFlow's team, the people shown under Who we are on amuflow.org. If a ministry, the water inspection or any other state body asks AmuFlow for data about you, and no law compels us to give it, nobody at AmuFlow can answer it alone. We refuse it unless you agree in writing and the committee explicitly agrees to that one request, and we ask you before anything is given. If anything is given, we tell you in writing what went, and to whom, within three days, where the law allows.
When the law compels it. Some orders bind every organisation, AmuFlow included: a court order, for example, or the written decision of an investigator or inquiry officer in a criminal case. Then the committee checks that the order is lawful, we give only what it requires, and we tell you, unless the law forbids us to.
We act only on a request made in writing, and it can be sent to contact@amuflow.org. Each request, and what the committee decided on it, is kept on record in writing.
Which outside services see what
To answer what the weather and soil are doing over a field, its coordinates are sent to NASA POWER, Open-Meteo and ISRIC SoilGrids. They are sent rounded to about a kilometre, and they travel without your name, your number or your account — those services receive a point on a map and nothing that identifies whose it is. To read how green a field is, its boundary is sent the same way to the Copernicus Data Space Ecosystem, the European Union's satellite data service. Place searches go to a geocoding service through our server.
The map's pictures load directly from MapTiler (or from Esri, where no MapTiler key is configured) and its place names from Esri, as any web map's do, so those services see which area is being looked at.
Reminders travel through Telegram to your chat, or through Expo's push service and Apple's or Google's to your phone, so those services carry the reminder's text. What you and the AmuFlow bot say to each other goes through Telegram too. A sign-in code sent to your phone number goes through Telegram, so Telegram receives your number and the code.
Deleting everything
In the app — on the phone, at app.amuflow.org or inside Telegram: Profile & Settings → Delete account. It is immediate and cannot be undone — the account, its fields and boundaries, its journal, its crops and every notification setting are removed in one operation, not marked hidden.
Without the app, see amuflow.org/delete-account, or write to contact@amuflow.org from the address on the account.
How long it is kept
Your account and fields are kept until you delete them. One-time sign-in codes expire within the hour and are removed. Sign-in sessions expire after thirty days unless used.
Writing to us from amuflow.org
The forms on amuflow.org/contact and the home page, which ask for the pitch deck or send us a message, are not the app and need no account. What you type into one is kept so that we can answer it: your name, your email address, your organisation if you gave one, your message, and which page sent it. The team reads it in AmuFlow's admin panel, and a copy goes to the team's own Telegram group, so it is answered quickly. Telegram carries that copy, as it carries any message.
It is used only to reply to you, never added to a mailing list and never shared. To stop anybody sending a flood of messages, your network address is counted for an hour and then forgotten; it is not stored with what you wrote. To have a message deleted, write to contact@amuflow.org.
Children
AmuFlow is a tool for people who farm. It is not directed at children.