Privacy policy

Data we process

We process the data you provide when creating and using an account: name, email, authentication credentials, language, preferences and, if supplied, beekeeper number and profile photo. When you use an external sign-in service, we receive the identity data needed to sign you in.

This also includes records you save, such as apiaries and their locations, hives, inspections, tasks, notes, photos, orders and associated contacts. We receive messages you send to support and information about subscriptions and purchases. Payment details are processed by the store you use.

Operating the service generates technical data, such as IP address, device, app version, access, synchronization, errors and usage events. The available data depends on the features you use.

Purposes and legal grounds

We use the data needed to create and maintain your account, store and synchronize records, provide features, manage subscriptions and answer support requests as part of providing the service you request. Without that data, some features cannot be provided.

We process technical data for security, abuse prevention, troubleshooting and product improvement based on our legitimate interest in maintaining a secure and reliable service. We also comply with applicable legal obligations. Optional browser analytics and promotional communications rely on your consent, which you may withdraw.

Device, location and synchronization

In the Android app, records can be stored on your device for offline use and synchronized with your account when an internet connection is available. The web app uses synchronized data and requires internet access.

Location, including background location when you enable proximity alerts, camera, photos and notifications depend on your chosen features and device permissions. You can manage these permissions in system settings; refusing them may limit the corresponding feature.

Usage and navigation analysis

Detailed analytics on the website and web app are optional. With your permission, they may include pages visited, interactions, visit source, IP address and device and session information, which may be linked to your account. We do not include emails, passwords, form contents or apiary records in this analysis.

When enabled, session replay helps us understand usability difficulties through pointer movements, scrolling and interactions. Text, completed fields and private images are hidden, and areas containing personal information are blocked. Replays are retained for 30 days and excluded from new backups.

You can refuse or withdraw permission in "Manage cookies". Withdrawal stops new optional collection but does not automatically erase data already sent. The Android app and supporting services also generate technical and usage events, which may be linked to your account or installation and are not controlled by browser cookie preferences.

Communications

We send messages needed to operate your account, such as access recovery and service notices. News and promotional communications follow your preferences and the applicable consent. You can unsubscribe using the link in the messages or contact us.

Service providers and data sharing

We do not sell personal data or provide it for third-party advertising. We use hosting, security, communications, authentication, mapping, payment and image analysis providers to deliver features. Access depends on the service used and the data needed to provide it.

When you request image analysis, the photo and information needed for the request may be sent to an external artificial intelligence provider. Avoid including people or unnecessary personal information in images. External sign-in, mapping and purchasing services may also process data under their own policies. We may disclose data when legally required.

International processing

Some providers may process data outside the European Economic Area. In those cases, transfers are subject to the conditions set out in data protection law, including adequacy decisions or appropriate safeguards, as applicable. You can request information about destinations and applicable safeguards using the contact in this policy.

Retention

We retain account data and records for as long as needed to provide the service and fulfil the stated purposes. You can request account deletion in the app or by contacting us. Data that must be retained to meet legal obligations or defend legal rights is restricted to those purposes.

Support, security and usage data is retained for as long as needed to handle requests, investigate failures or abuse and assess improvements. Session replay has the specific 30-day period stated above. Information stored only on your device can be managed through app and system settings.

Your rights

Where applicable, you may request access, correction, erasure, restriction and portability of your data, object to processing based on legitimate interest and withdraw consent. Withdrawal does not affect the lawfulness of earlier processing.

Send requests to the contact in this policy. We may request proportionate information to verify your identity. We normally respond within one month; if a lawful extension is needed, we will explain the reason and deadline. You may complain to Portugal’s National Data Protection Commission or the competent supervisory authority in your country.

Security and automated analysis

We use access controls, authentication and communication protection measures to reduce the risk of unauthorized access. No system removes every risk; protect your credentials and devices containing records.

Automated image analysis assists interpretation and may contain errors. It does not constitute solely automated decisions producing legal or similarly significant effects on you.

Updates

We review this policy when changes to the service or applicable obligations require it. The date identifies the current version. Where necessary, we will communicate significant changes and ask for a new consent choice.