Privacy Policy
Last updated: October 21, 2026
BroodDay is operated by VajgrtLabs ("we," "us," "our"). This Privacy Policy explains what information we collect when you use BroodDay, how we use it, and the choices you have. By using BroodDay, you agree to this policy.
1. Information We Collect
| Category | What | Why |
|---|---|---|
| Beekeeping data | Apiaries, hives, queen details, inspections, varroa counts, treatments, harvests, and notes you enter. Stored on your device; synced to our servers only when you are signed in | To provide tracking, stats, reminders, and sync — the core of the service |
| Account (optional) | Email address; password stored only as a salted PBKDF2 hash (never in plaintext or a reversible form) | To create and secure your account and log you in |
| Devices | A random per-device identifier | To run the free trial and enforce the 3-device limit per subscription |
| Support | Messages you send us | To respond and improve the app |
| Usage analytics | An anonymous usage beacon: which screen or feature was used, when, and how long it was viewed. The beacon carries no email, no device identifier, and we do not store your IP address with it — the data is aggregated into anonymous daily counters only | To understand which parts of the app are used and improve them |
| Payment | Handled by Stripe (see below) | To process Pro subscriptions and lifetime purchases |
Photos, voice and weather
- Inspection photos stay on your device. Photos you attach to inspections are stored only in your browser's on-device storage (IndexedDB). They are never uploaded to our servers, are not part of account sync or JSON backups, and deleting an inspection deletes its on-device photo.
- Voice logging uses your browser's built-in speech recognition. Depending on your browser, audio may be processed by your browser provider (for example Google or Apple) under their privacy policy. BroodDay never receives or stores audio — only the text your browser returns, which becomes your inspection fields and notes.
- Weather for the Today screen comes from Open-Meteo. When you set an apiary location (a name and coordinates), the app sends those coordinates to Open-Meteo to fetch the forecast. No account information is sent.
2. Payments — Handled by Stripe
All payments are processed by Stripe, Inc. When you check out, you enter your payment details directly with Stripe. We never see, touch, or store your full card number. Stripe shares with us only what we need to run your subscription: your email, the plan purchased, payment status, and subscription identifiers. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.
3. How We Use Your Information
- To operate BroodDay: run your hive records, stats, and sync.
- To manage your account, trial, subscription status, and device limit.
- To provide customer support and respond to your messages.
- To improve the app — for example, understanding which features are most used (in aggregate).
- To send service-related messages (trial ending, payment issues, important changes). We do not send marketing email unless you separately opt in.
We do not sell your personal data to anyone, and we do not share it with advertisers or data brokers.
4. Storage and Security
- Your records are stored on your device, and — when you are signed in — server-side in Cloudflare Workers KV (United States), which is how they sync across devices and survive a lost phone.
- Passwords are stored only as salted PBKDF2 hashes — we cannot read your password, and neither can anyone who obtained our database.
- All traffic between the app and our servers is encrypted with HTTPS/TLS.
- Access to production data is restricted to VajgrtLabs operators for support and maintenance.
No system is perfectly secure. While we use industry-standard safeguards, we cannot guarantee absolute security — use a unique password for your account.
5. Cookies and Local Storage
BroodDay is a web app, so it stores data in your browser:
- Your hive records — the app's local-first dataset, on your device.
- Session token — keeps you logged in when you have an account.
- Device identifier — a random ID used for the trial and the 3-device limit.
- App cache — the service worker caches app files so BroodDay loads fast.
We do not use third-party advertising or cross-site tracking cookies. Clearing your browser data removes the on-device copy of your records; export a JSON backup from Settings first if you have no account sync.
6. Third-Party Services
- Stripe — payment processing (stripe.com/privacy).
- Cloudflare — hosting, content delivery, and data storage (cloudflare.com/privacypolicy).
We do not embed third-party analytics, advertising, or social-media trackers in the app. (An anonymous first-party usage beacon is described in section 1.)
7. Data Retention and Deletion
- We keep your account and synced data for as long as your account exists, so your history is there when you return.
- Delete everything: email [email protected] from your account email with the subject "Delete my data" and we will permanently delete your account and all associated synced data, typically within 30 days. There is no in-app account deletion — deletion is handled by email so we can verify the request. Some records (e.g., payment receipts) may be retained as required by tax or financial law.
- Data stored only on your device is yours to clear at any time via your browser settings, or by importing an empty backup.
- You can also correct your data any time by editing it in the app.
8. Children's Privacy
BroodDay is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us personal data, contact us at [email protected] and we will delete it.
9. Your Rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to certain processing. Email [email protected] and we will respond to verifiable requests within a reasonable time.
10. Changes to This Policy
We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, notify you in the app or by email. Continued use after changes take effect means you accept the updated policy.
11. Contact
Privacy questions or requests: [email protected].