Privacy notice

Who is responsible

[registered company name] is the data controller for the information described here. Our registered address is [registered address]. For anything in this notice, including the requests described below, write to privacy@pastkeep.app.

What we collect

Only what the service needs to work. There is no tracking of any kind in Pastkeep — no analytics, no advertising, no third-party scripts.

• Your account. Your email address, and your name if you give one. If you sign in with Google, we receive your email address and name from them and nothing else.
• Your farm records. Everything you enter — animals, weights, health and medicine entries, movements, breeding records, tasks, and financial entries if you use them. This is your business data, not ours.
• Technical logs. Our hosting provider records IP addresses and request information, as any web server does.

Why we are allowed to hold it

We process your account details and farm records to provide the service you have asked for — in data-protection terms, to perform our contract with you. Technical logs are kept because we have a legitimate interest in keeping the service running and secure.

We do not sell your data, we do not share it for marketing, and we do not use it to train machine-learning models.

Cookies

Pastkeep sets cookies for one purpose: keeping you signed in. They are strictly necessary for the service to work and are not used to profile you or follow you anywhere else, which is why you are not asked to consent to them.

Who else sees it

We use two suppliers to run the service. Both act on our instructions and neither is permitted to use your data for their own purposes.

Supabase

Hosts the database and runs authentication, including sign-in with Google. Account email, name, hashed credentials, and all farm records.

Vercel

Serves the application and its request logs. IP address and request metadata in server logs.

We may also disclose information where the law requires it. If we are ever compelled to hand over a farm’s records, we will tell you unless we are legally prohibited from doing so.

Where it is held

Your data is stored on our suppliers’ infrastructure in the European Union. For UK customers, any transfer outside the UK is covered by the safeguards those suppliers have in place, such as the UK International Data Transfer Agreement. For US customers this means your records are held outside the United States; if that matters to you, tell us before you rely on the service.

How long we keep it

Your account and farm records

Kept until you delete the account, then removed immediately.

Statutory livestock records — United Kingdom

Medicine records must be kept 5 years, cattle holding registers 10 years and sheep and goat registers 3 years. Those obligations are yours as the keeper. Export your records before deleting an account — we do not keep a copy afterwards.

Statutory livestock records — United States

Interstate movement records must be kept 5 years for cattle, bison, sheep and goats, and Veterinary Feed Directive and extralabel drug records 2 years. Your state may require more. Those obligations are yours as the producer. Export your records before deleting an account — we do not keep a copy afterwards.

Server logs

Held by our hosting provider for their standard retention period and not used for anything else.

That second row matters more than it looks. Statutory livestock records are your obligation as the keeper, not ours as a supplier. If you delete your account we delete the records with it, so export them first — the export is designed for exactly this.

Your rights

In the United Kingdom, under UK data-protection law you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to our processing.

In the United States, depending on your state you may have the right to know what personal information we hold, to correct or delete it, and to opt out of its sale or sharing. We do not sell or share personal information for advertising and never have, so there is nothing to opt out of; we will not treat you differently for exercising any right.

Two of those you can do yourself, immediately, without asking us:

• Get a copy. Settings has a download that gives you everything on your account and your farm as a single machine- readable file.
• Delete everything. Settings also has a permanent account deletion. It removes your login and, if you are the only person on the farm, the farm and all its records.

For anything else, write to privacy@pastkeep.app and we will respond within one month, or sooner where your state requires it. If you are unhappy with how we have handled a request, UK customers can complain to the Information Commissioner’s Office at ico.org.uk; US customers can contact their state attorney general.

Changes

If we change what we do with your data we will update this notice and change the date at the foot of the page. Where a change is significant we will tell you in the app rather than expecting you to notice.

Our terms of service are at pastkeep.app/terms.