Privacy Policy

FermentBuddy ("we," "us," or "our") is a mobile application designed to help you track and manage your fermentation projects, including sourdough, kombucha, sauerkraut, kefir, yogurt, and other ferments. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the FermentBuddy mobile application (the "App").

By using FermentBuddy, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please do not use the App.

1. Information We Collect

1.1 Information You Provide

• Account Information: FermentBuddy uses an anonymous-first authentication model. You can begin using the App without creating an account or providing any personal information. If you later choose to create an account, we may collect your email address and display name.
• Fermentation Project Data: Information you enter about your fermentation projects, including project names, fermentation types, ingredients, timing, temperatures, and tasting notes.
• Batch Logs: Records of your fermentation batches, including dates, measurements, observations, and notes.
• Photos: If you choose to upload photos for batch logging or troubleshooting, those images are stored on our servers. Photo uploads are entirely optional and user-initiated.

1.2 Information Collected Automatically

• Usage Analytics: We use PostHog to collect anonymized usage data, including which features you use, session duration, and general interaction patterns. This helps us understand how users engage with the App and improve the experience.
• Error and Performance Data: We use Sentry to collect crash reports, error logs, and performance metrics. This data may include device type, operating system version, and app state at the time of an error. It is used solely for diagnosing and fixing technical issues.
• Subscription and Purchase Data: We use RevenueCat to manage in-app purchases and subscriptions. RevenueCat processes transaction data provided by Apple App Store or Google Play. We do not directly collect or store your payment information (e.g., credit card numbers).
• Device Information: General device information such as device model, operating system version, and app version may be collected for analytics, error tracking, and compatibility purposes.

1.3 Information Stored Locally

FermentBuddy caches data on your device using local storage (MMKV) to enable offline functionality. This data remains on your device and is synced with our servers when connectivity is available. You can clear this local data at any time through your device settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain the App: To deliver the core functionality of fermentation tracking, smart timers, guided workflows, and batch logging.
• Sync your data: To synchronize your fermentation projects and batches across devices in real time using our backend infrastructure.
• Improve the App: To analyze usage patterns and identify areas for improvement, new features, and bug fixes.
• Diagnose technical issues: To identify, track, and resolve errors, crashes, and performance problems.
• Process subscriptions: To manage your subscription status and provide access to Pro features.
• Communicate with you: To respond to your support inquiries and send important service-related notices (e.g., changes to this policy).

3. Third-Party Services

FermentBuddy integrates the following third-party services, each with their own privacy policies:

We do not sell, rent, or share your personal data with third parties for advertising purposes. Data is shared with the services listed above solely to operate and improve the App.

4. Data Storage and Security

• Cloud Storage: Your fermentation data is stored on Convex's infrastructure with real-time synchronization. Data is transmitted over encrypted (TLS) connections.
• Local Storage: A local cache is maintained on your device using MMKV for offline access. This data is stored in the app's sandboxed storage area and is not accessible to other apps.
• Photo Storage: Photos you upload are stored securely on Convex's file storage. Photos are associated with your account and are not publicly accessible.
• Security Measures: We implement industry-standard security measures, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide you with the App's services. If you request deletion of your account and data, we will remove your personal information and fermentation data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

Anonymized analytics data that cannot be used to identify you may be retained indefinitely for product improvement purposes.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

6.1 All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data.
• Data Export: Request an export of your fermentation data in a portable format.

6.2 European Economic Area (GDPR)

If you are located in the EEA, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on (a) your consent, (b) the performance of a contract (providing the App's services), or (c) our legitimate interests in improving the App, provided those interests do not override your rights.
• Right to Restrict Processing: You may request that we limit how we use your data.
• Right to Object: You may object to processing based on legitimate interests.
• Right to Data Portability: You may request your data in a structured, machine-readable format.
• Withdrawal of Consent: You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

6.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected.
• Right to Delete: You may request deletion of your personal information.
• Right to Opt-Out of Sale: We do not sell your personal information. There is no need to opt out.
• Non-Discrimination: We will not discriminate against you for exercising any of these rights.

6.4 Canadian Residents (PIPEDA)

If you are a resident of Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA):

• Access and Correction: You may request access to your personal information and request corrections.
• Consent: We collect and use your personal information with your knowledge and consent. You may withdraw consent at any time, subject to legal or contractual restrictions.
• Complaints: You may file a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days (or sooner where required by applicable law).

7. Children's Privacy

FermentBuddy is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we discover that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our third-party service providers (Convex, PostHog, Sentry, RevenueCat) may store data in various locations worldwide. We ensure that any such transfers comply with applicable data protection laws and that appropriate safeguards are in place, including standard contractual clauses where required.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, through an in-app notification. We encourage you to review this policy periodically. Your continued use of the App after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: