Privacy Policy — WaggleOps

Last updated: 2026-10-21

What this app is

This app is published by Bees, Blooms & Bytes LLC.

WaggleOps is an app for farm mileage tracking, hive management, and expense tracking. It runs on iPhone, iPad and Android, and in a web browser. This policy covers WaggleOps (mobile and web) and its backend (a Cloudflare Worker at bloom-api.bloomcal.workers.dev, shared for infrastructure reasons with a separate sibling app, Bloom Calendar — see bloom-api.bloomcal.workers.dev/privacy for that app's own policy; nothing here applies to it). This policy does not cover the standalone Farm Mileage Tracker app, which has its own listing and its own policy.

Signing in is optional. Without an account, everything you record stays on your phone. An account adds syncing your records across your devices.

Information we do NOT collect

• No names, email addresses, or phone numbers about you. Even when you sign in with Apple or Google, we only ever receive and store an opaque, anonymous account identifier (the provider's sub claim) — never your name or email, even though the provider's token technically includes it. The rest of the sign-in token is discarded immediately upon verification and never logged or stored. (This is about your identity — free-text fields you fill in yourself may contain other people's names, see below.)
• No payment or financial account information. Subscription payment is handled entirely by the Apple App Store / Google Play Store. We never see your card number, billing address, or any payment details. See "Purchases" below for what we do learn about a subscription.
• No GPS trace is kept. A mileage trip stores only its start time, end time and the derived distance. The trip's start and end points are not saved or uploaded, and neither is the route. While a trip is running, the app keeps only the single most recent GPS point, on your device, so it can measure the next step; it is discarded when the trip ends.

Information we do collect and store

• On your device: trip records (distance, category, date; no GPS points), yard/colony/hive records you create, inspection notes, photos and audio notes you attach, expense records (vendor/amount/date/category), and reminders.
• Yard locations. If you add an address or GPS coordinate for an apiary/yard, we store it exactly as you entered it, so the app can do things like trip detection and nearby-bloom lookups. For many users a farm address is also a home address. This information is private to your account — no other user can query it, and it is never contributed to the public, anonymous bloom-observation data Bloom Calendar collects (that data comes only from Bloom Calendar, is not tied to any WaggleOps account, and is recorded only at the level of the nearest supported city, as a ZIP code and county, never as coordinates). Your yard locations are not, however, hidden from us as the operator — see "Cloud sync" below.
• Names you type into free-text fields. Queen breeder names, expense vendors, and colony sources are free-text fields. If you enter a real person's or business's name there, we store it as part of your records. We don't use it for anything beyond showing it back to you and including it in exports you request.
• Signing in: an opaque account ID tied to your Apple or Google sign-in, plus whichever of the above records you choose to sync.
• Microphone: only if you tap record on an inspection, treatment, harvest or reminder; the audio note is attached to that record. Nothing is recorded in the background.
• Hive/inspection photos: if you attach a photo to a hive inspection, EXIF metadata (including any embedded GPS location) is stripped before it's stored. Synced photos are stored in Cloudflare R2.

Cloud sync

When you are signed in, your records sync so your phone, the web, and any other device you use stay up to date with each other, reconciled per-record against the server. Where WaggleOps Pro is on sale, sending new and changed records to the cloud needs Pro; downloading what is already in your account never does. Changes made while Pro is not active stay on your phone and are sent once it is.

Synced data is encrypted at rest and scoped to your account — no other user has any way to read it. It is not end-to-end encrypted: our servers hold the key material, so we as the operator are technically able to decrypt your data.

The app works fully offline day-to-day, and changes sync the next time you're online.

Purchases

WaggleOps Pro, where it is on sale, is a subscription bought through the Apple App Store or Google Play. We use RevenueCat (RevenueCat, Inc.) to confirm purchases with the stores. RevenueCat receives a random purchase ID (it is not your name, email or account ID; for a signed-in account it is a random ID our server issues for that account, otherwise one RevenueCat creates), your store's purchase and subscription records (product, dates, status, whether it is a trial) and your app version and platform. It does not receive your yards, hives, trips, expenses or any other record. Our server stores only what is needed to know whether Pro is active for an account: the random purchase ID, the product, the store's transaction reference, and the dates. If you delete your account that information is deleted with it, except a short audit entry (an internal number and a reason, no personal details). Deleting your account does not cancel a subscription: cancel it in your App Store or Google Play subscription settings. RevenueCat keeps its own records under its privacy policy.

Expenses

Expenses are entered manually — amount, vendor, date, and category. The app does not photograph or scan receipts, and there is no receipt-image storage or OCR anywhere in it.

Account deletion

You can delete your account at any time from Settings. This permanently deletes your account record, all synced data associated with it, and any photos stored for your account. Data still stored locally on your device is not affected (delete the app to remove that).

If you no longer have the app, sign in with the same Google account at https://bloom-api.bloomcal.workers.dev/delete-account and type DELETE. (An account made with Sign in with Apple is deleted inside the iPhone or iPad app.) The same account is used by Bloom Calendar's optional sync, so its synced observations are deleted too.

Location permission

Trips are started and stopped by you: tap Start trip and End trip. Between those two taps the app collects your phone's location, including when the app is closed or the screen is off (on Android this is the "Allow all the time" permission, with a notification showing that a trip is being logged; on iPhone, "Always"), and only to measure that trip's distance. Before Android asks for the permission, the app shows an explanation of exactly this. Nothing is collected before Start trip or after End trip. The coordinates are not saved or shared; only the resulting distance is. Location is never used for ads and is never sold. This is separate from yard locations, which are addresses or coordinates you type in yourself or capture on purpose, and which we do store as entered.

Third parties

• Apple / Google: used for sign-in. See their respective privacy policies for how they handle your data on their end.
• Cloudflare: hosts our backend (Worker, database, and photo storage). Data in transit is over HTTPS.
• RevenueCat: confirms App Store and Google Play subscription purchases (see "Purchases").

We do not sell or share your data with advertisers or data brokers, and we do not use it for advertising or profiling.

Children's privacy

This app is not directed at children and is not knowingly used to collect data from anyone under 13.

Changes to this policy

If this policy changes in a way that affects what we collect, we'll update the "Last updated" date above and, for material changes, note it in the app.

Contact

For privacy questions, contact Bees, Blooms & Bytes LLC, the publisher of this app, at rdshad@beesbloomsandbytes.com.