Privacy Policy

Who we are

Herdtrail is provided by [Legal entity name], [Registered address] ("we", "us"). For anything about your data, contact us through GitHub at github.com/Shazankk. Please do not post personal details publicly there; we will reply and move to a private channel.

For your account details we decide how data is used (we are the "controller"). For the records a farm keeps about other people, such as workers' pay or a finder's contact details, the farm decides and we process that data on the farm's behalf (we are the "processor").

What we collect

• Account details: your name, email address and password. Passwords are stored only as a one-way scrambled form (a hash); we cannot read them.
• Farm records you or your helpers enter: animals, flocks, weights, health and treatment records, breeding, reminders, notes, photos, money in and out, and worker details including pay.
• Farm settings: farm name, country, currency, units, time zone and the optional "if found" contact name and phone number.
• Found-animal reports: when someone scans a tag and reports a found animal, the name, contact details, message and (only if they choose to share it) location they enter. A finder can also choose to keep sharing their live location for up to one hour so the owner can reach them; we keep only the latest position, and sharing stops when the finder stops it, after the hour, or when the owner closes the report.
• A history of changes made in your farm (who changed what, and when), kept for security and to help sort out problems.
• Technical data needed to keep the service safe: your IP address is used briefly to stop repeated failed sign-ins and is stored only in scrambled form for up to 48 hours. Our hosting provider keeps limited request logs for security and troubleshooting.

How we use it

• To provide Herdtrail: storing your records, showing reminders, printing tags and sending found-animal reports to your farm (this is necessary to perform our contract with you).
• To keep accounts and farms secure and separate from each other, and to prevent abuse (our legitimate interest in running a safe service).
• To manage your plan and, once paid plans open, billing (contract).
• To meet legal obligations, such as tax records for payments.

We do not sell your data, use it for advertising, or use it to train AI models.

Public tag pages

Anyone who scans one of your animal's QR tags sees a short public page, so a lost animal can find its way home. It shows only: the tag number, species, breed, sex, approximate age, your farm name, any finder information you entered (markings, temperament, feeding and handling notes), your "if found" contact if set, a general warning if the animal is within a medicine withdrawal period, and its main photo only if you switch that on.

It never shows your records, finances, the medicine used or your location. Tag pages ask search engines not to index them. You can replace a tag at any time, which stops the old one working.

Cookies

We use one essential cookie to keep you signed in. It cannot be turned off without signing out. We use no analytics, advertising or tracking cookies. Your browser may also remember small preferences, such as a chosen plan, on your own device. So the app works without signal, your phone keeps a copy of the farm records you are allowed to see, plus any changes waiting to send. This copy stays on your device, is used only by the app, and is deleted when you sign out.

Who we share it with

• Cloudflare, Inc., which hosts the app, database and photo storage on its global network. Your data may therefore be processed in countries other than your own, under appropriate safeguards such as standard contractual clauses.
• Once paid plans open: our payment provider (Paddle or Lemon Squeezy), which acts as the seller of record and handles payment details and sales tax. We never see your full card number.
• Once email notifications launch: an email delivery provider, only to send messages you have asked for, such as password resets and found-animal alerts.
• Other members of your farm, according to their role. Workers cannot see money or worker pay.
• Authorities, only where the law requires it.

How long we keep it

We keep your data while your account or farm exists. When you delete a farm, its records and photos are removed from our database and photo storage straight away. Copies may remain in our hosting provider's backups for up to 30 days before they are overwritten.

When you delete your account, you are removed from every farm, farms only you belong to are deleted, and your name and email are erased. Records you created on a farm that others still use stay with that farm, shown as "Deleted user".

Found-animal reports stay with the farm until the farm deletes them or the farm is deleted. Scrambled sign-in protection data is deleted within 48 hours.

Your rights

• See and download your data: Settings → Your data → Download all data.
• Correct it: edit any record or your profile in the app.
• Delete it: Settings → Your data → Delete farm or Delete my account.
• Object to or restrict how we use it, or ask any question: contact us through GitHub.

We reply within one month. If you are unhappy with our answer, you can complain to [the Information Commissioner's Office (ICO), ico.org.uk] or your local data protection authority.

How we protect it

All connections are encrypted (HTTPS). Passwords and sign-in sessions are stored only in scrambled form. Each farm's records are kept separate at the database level, and automated tests check on every change that one farm cannot see another's data. Photos are private unless you choose to show one on a tag page.

Children

Herdtrail is for people aged 16 or over. We do not knowingly collect data from younger children.

Changes to this policy

If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top shows the current version.