🐝 Privacy policy

Be a Bee · Last updated: 14 September 2026

This policy explains how Be a Bee handles personal data when you use the app or dashboard.

1. Who we are

Be a Bee is an initiative of Tom Bode, based in the Netherlands. Data controller: Tom Bode. Contact: tom@tombode.nl.

2. Data we collect

• Account: name, email address and a non-readable password hash.
• Club and family activity: memberships, roles, tasks, participants and hours worked.
• Content and support: messages, task descriptions, photos/uploads, club logos, tips, support requests, abuse reports and administrative actions.
• Device: push notification token and notification preferences.
• Optional profile: phone number, address, date of birth and profile photo, if you provide them.
• Technical logs: request and error information, which may include IP addresses, timestamps and account IDs, for security and troubleshooting.

3. Purposes

We use this data to provide tasks, communication and other app functions, authenticate users, send notifications, provide support and prevent misuse. The legal bases are performance of the agreement (terms of use) and legitimate interests in security.

4. Retention and account deletion

• Account information is kept until account deletion. Your name, email, phone number, address and date of birth are removed or replaced, and your password, profile photo link and push token are cleared.
• Messages sent or received by the deleted account are deleted. Club task and hours history remains under “Verwijderd lid” (deleted member).
• Free text in tasks, tips, support requests and administrative or abuse records is not automatically cleared on account deletion and may contain personal details you entered. Contact us for access or deletion; we assess any continued need for handling a request, security or legal claims.
• Technical server logs rotate by size (up to three 50 MB files per relevant container). Their actual age depends on usage; there is no automatic 30-day expiry. Records needed for a specific incident may be retained separately for as long as the investigation or its resolution requires.
• Automatic local backups are cleaned daily: daily copies after 14 days and weekly copies after eight weeks, with approximately one extra day possible due to the cleanup schedule. Separate copies made around server updates are kept while needed to roll back an update; this is reviewed at the next verified update. Deleted data may remain in a backup until that backup expires.

5. Sharing and service providers

Club and family members and administrators can see data appropriate to their roles, including tasks, participants and messages. Authorized administrators handle support and abuse reports. We never sell or rent your data. We use these technical providers:

• Hetzner Online GmbH: the app server and primary database are hosted in Germany.
• Expo and Apple / Google: push notifications through Expo Push Service and APNs / FCM, processing push tokens and notification content. Processing may take place outside the EU. See Expo’s privacy explanation and privacy policy.
• Resend Inc. (US): transactional emails, including verification, password recovery and invitations. Resend processes recipient addresses, email content and delivery information in the US. According to Resend, the Free plan retains emails and logs for 30 days; Standard Contractual Clauses are included in its Data Processing Addendum.

We do not share data with advertising networks, analytics trackers or data brokers.

6. Your rights

Under the GDPR, you have rights to access, correction, erasure, data portability, objection and, where applicable, restriction of processing. Delete your account via Profile → Settings → Delete account. For other requests email tom@tombode.nl; we respond within 30 days. You can also complain to the Dutch Data Protection Authority.

7. Security

Passwords are stored as bcrypt hashes, never in readable form. App/server traffic uses HTTPS. The server is hosted in an EU data centre with network firewalling. Direct server access is restricted to the technical administrator; app users and club administrators have access according to their roles.

8. Cookies and tracking

The mobile app does not use tracking cookies or trackers. The web dashboard uses local storage for its session token and does not use advertising or tracking cookies. We do not use Google Analytics or similar cross-site tracking tools.

9. Children

The app is for people aged 16 or over. We do not knowingly collect data from children under 16. Contact us if you believe this has happened so we can remove it.

10. Changes

We publish changes on this page. The date above identifies the latest version.

11. Contact

Email tom@tombode.nl.

Be a Bee · Terms of use