Privacy Policy

1. Information We Collect

Account information. When you create an account we collect your email address and, optionally, a display name. We use Supabase for authentication; passwords are hashed and never stored in plain text.

Apiary & hive data. Records you enter — hives, inspections, treatments, queen notes, honey supers — are stored in your account and used solely to provide the service to you.

Photos. Pro users may upload photos to hives and inspections. Images are stored in Supabase Storage under a path scoped to your user ID.

Usage data. We may collect anonymised, aggregated data about how features are used (page views, feature interactions) to improve the product. This data cannot be used to identify you individually.

Cookies & sessions. We use a session cookie to keep you signed in. No third-party advertising or tracking cookies are set.

2. How We Use Your Information

• To create and manage your account
• To provide, operate, and improve the Hive & Bloom service
• To send transactional emails (password reset, account verification)
• To respond to support requests or enquiries you send us
• To detect and prevent abuse or security incidents

We do not sell, rent, or trade your personal information to third parties. We do not use your data to serve advertising.

3. Data Storage & Security

Your data is stored on Supabase infrastructure, which uses industry-standard encryption at rest and in transit (TLS). Access to production data is restricted to authorised personnel only.

No method of transmission over the internet is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. Please use a strong, unique password and keep it confidential.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information and associated apiary data within 30 days, except where retention is required by law.

Uploaded photos are deleted from storage when the associated hive or account is deleted.

5. Third-Party Services

We use the following sub-processors to operate the service:

• Supabase — database, authentication, and file storage
• Vercel — application hosting and edge delivery

Each provider has its own privacy policy. We share only the data necessary for them to provide their services to us.

6. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email us at the address below. We will respond within 30 days.

You can export your hive data at any time from the Apiary Tracker on a Pro account (JSON export). You can delete your account from your account settings page.

7. Children's Privacy

Hive & Bloom is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "last updated" date at the top of this page and, for material changes, notify you by email or an in-app notice. Continued use of the service after changes constitutes acceptance of the revised policy.

9. Contact Us

Questions about this policy? Email us at hello@dreamybee.com.