Privacy policy

Effective from 1 October 2026

Who processes your data

Vojtěch Žoha, Company ID (IČO) 73557005, Lniště 1, 374 01 Slavče
vzoha@volny.cz

What data and why

  • Account: email, password (stored only as a hash, never readable), language, sign-up date, time of email confirmation and the day of your last visit. Used to sign you in and run your account; the last visit feeds aggregate statistics on whether the app helps people.
  • Sites: name, location, altitude and the forest flow flag. The location is used to fetch the weather forecast and compute recommendations.
  • Hives and hive log: hives, logged tasks, notes and the weather on the day of each task. Recommendations are based on them.
  • Phone notifications: if you turn them on, your browser’s push service address and the keys that encrypt notifications.
  • Weekly summary email: sent to your account email; turn it off in Settings or via the link in the email.
  • Security: your IP address, briefly, to limit sign-in and sign-up attempts; standard server logs at the hosting provider.

We process this data because it is needed to provide the service you asked for (Art. 6(1)(b) GDPR). Security and aggregate statistics rest on our legitimate interest in running the service safely and improving it (Art. 6(1)(f) GDPR). Statistics use counts and activity dates only — no site locations, log contents or notes.

All members of an apiary see its sites, hives and hive log. The apiary founder sees members’ emails.

Who we share data with

  • Hosting: a web hosting provider with servers in the EU — stores the database and runs the app.
  • Emails: sent by a specialised email delivery service from a data centre in the EU; it receives the email address and the email content. The provider may be based outside the EU (USA) — the transfer is then protected by EU standard contractual clauses. We will name the provider on request.
  • Weather forecast: the Norwegian Meteorological Institute (MET Norway) receives only site coordinates rounded to about 10 m, without your email or any link to you. Norway is part of the EEA.
  • Phone notifications: delivered through your browser’s push service (Google, Mozilla, Apple or Microsoft). Notification content is encrypted; the service sees only the device address and delivery time. It may be based outside the EU (USA, EU–US Data Privacy Framework).

We do not share or sell data to anyone else. No advertising, no third-party tracking.

Cookies and storage on your phone

Only what is necessary: sign-in (remembered for 90 days) and form protection. A hive log entry made without signal stays on your phone until it is sent. No consent is needed for these.

How long

As long as your account exists. You delete your account in Settings. If you are the last member of the apiary, its sites, hives and hive log are deleted with it; otherwise they stay with the other members and your entries remain without a name. Data disappears from hosting backups as they are regularly overwritten.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. Write to vzoha@volny.cz; we reply within a month. You can lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz ↗) or your local supervisory authority.