Privacy notice | 'beehta.com'

Data that is stored

'beehta.com' stores only what is needed to run the apps for the account that entered it.

Account: the email address, the username, the display name and, when given, a phone number. The password is kept only as a hash by the authentication provider.
Sign-in records: the time and the device of each sign-in, shown on the account's own activity page.
App data: the records a user enters in an app, such as cards, transactions, contacts and links.
Technical logs: the hosting providers process the IP address and the request needed to deliver a page.

How data is used

Data is used to provide the apps to the account it belongs to, to keep the service secure and to answer support requests.

Data is never sold, never shared for advertising and never used to build an advertising profile. There is no analytics or tracking on this site.

Email is sent about the account only: sign-in, security and billing. No marketing email is sent, and an email address is never passed on.

Cookies and browser storage

Two cookies are set, at sign-in, and both are strictly necessary: without the first every app would ask for sign-in again, and the second only says who is signed in. No consent banner is shown because nothing optional is stored.

This site sets no cookie of its own. It reads beehta.who, which holds only a name and an email address, to show who is signed in, and never the session itself. It remembers the arrangement of its background tiles in the browser when a visitor changes it. That stays on the device and is sent nowhere.

Cookies and storage in use
Name	Set by	Purpose	Kept for
beehta.session	auth.beehta.com, on .beehta.com	Keeps the session across the apps	30 days from the last use, or until sign-out
beehta.who	auth.beehta.com, on .beehta.com	The signed-in name and email address, to greet the user; no tokens	As long as beehta.session
App cache	Each installed app	Opens the app when offline	Until the app is updated or removed
Demo data	This page, in memory	Runs the demos	Until the page is closed
beehta.tiles	This page, in the browser's local storage	Remembers the arrangement of the background tiles, once two have been swapped	Until the browser's site data is cleared

Where data is processed

'beehta.com' uses the following providers, which process data on its behalf and only to run the service. Data may be processed in a country other than the user's own.

Supabase: the database, authentication and file storage.
Vercel: hosting of 'beehta.com', auth.beehta.com and the apps.
Cloudflare: the domain name service of beehta.com.
Formspree: delivers messages sent with the support form; it sets no cookie.

Security

Every record belongs to one account, and the database enforces this on every table.
All traffic is encrypted in transit.
LOGINS keeps password hints and never passwords.
Changing a password or an email address asks for identity to be confirmed again.

How long data is kept

Account and app data is kept until the user deletes it or asks for the account to be deleted. Deleting an account removes its data from every app.

Rights over the data

Every user has these rights, wherever they live. They include the rights given by the GDPR and the UK GDPR, by the CCPA in California and by the Digital Personal Data Protection Act in India.

To see the data held about them and to receive a copy of it.
To correct it, and to export it in a common format from the app that holds it.
To have it deleted, with the account or without.
To object to a use of it, and to withdraw a consent already given.
To complain to the data protection authority of their country.

Requests and contact

A request is made through the contact form at auth.beehta.com/contact, from the email address of the account, and is answered within the time the applicable law allows.

When this notice changes, the date at the top changes with it.