PRIVACY POLICY

Last updated: February 2026

This Privacy Policy describes how PROFCARE LLC ("Apiroi", "we", "us", "our") collects, uses, shares, and protects information when you use the Apiroi mobile application (iOS and Android), our website apiroi.com, and related services (collectively, the "Service").

Company Information:

PROFCARE LLC

2167 E 21ST ST STE 266 BROOKLYN, NY 11229, USA Email: support@apiroi.com

TABLE OF CONTENTS

  1. Information We Collect
  2. How We Use Information
  3. Payments and Subscriptions
  4. Third-Party Services
  5. Cookies and Tracking (Website)
  6. Advertising and Tracking Practices
  7. How We Share Information
  8. Email and Push Communications
  9. Data Retention
  10. Account and Data Deletion
  11. Legal Bases for Processing (EEA/UK)
  12. International Data Transfers
  13. Your Privacy Rights
  14. Children's Privacy
  15. Data Security
  16. Data Breach Notification
  17. California Privacy Rights (CCPA/CPRA)
  18. Changes to This Policy
  19. Contact Information

1. INFORMATION WE COLLECT

We collect information in three ways: information you provide, information collected automatically, and information from third parties.

1.1 Information You Provide

A. Account Information

  • Email address (stored in hashed form for authentication)
  • Password (stored in hashed form; we never see your actual password)
  • Optional profile details (name, profile photo, time zone, preferences)
  • Authentication tokens from third-party sign-in providers (Apple, Google)

B. Beekeeping Data

  • Apiaries, yards, and hive records
  • Inspection notes, photos, and observations
  • Tasks, reminders, and treatment schedules
  • Historical data and analytics
  • Custom tags, categories, and organizational preferences

C. Photos and Files

  • Images you upload or capture within the app
  • Attachments and documents
  • Media metadata (file size, type, creation date)

D. Marketplace and Public Content (Web)

  • Listings, descriptions, and product information
  • Photos, logos, and media for marketplace listings
  • Messages and communications with other users
  • Ratings, reviews, and feedback

E. Team Sharing and Collaboration

  • Invitations sent to other users
  • Role assignments and permissions
  • Shared apiary access settings

F. Communications

  • Messages you send to customer support
  • Feedback, survey responses, and feature requests
  • Email newsletter subscriptions

1.2 Information Collected Automatically

A. Device and Usage Information

  • Device type, model, and manufacturer
  • Operating system version
  • App version and build number
  • Language and time zone settings
  • IP address (may be used to infer general location)
  • Unique device identifiers (advertising ID, device ID)

B. Usage and Analytics Data

  • Features used and frequency of use
  • Session duration and frequency
  • Screen views and navigation patterns
  • Button clicks and user interactions
  • Error logs and performance metrics

C. Diagnostics and Crash Data We use crash reporting tools (such as Sentry or Firebase Crashlytics) to collect:

  • Stack traces and error messages
  • Device state at time of crash
  • App version and configuration
  • Performance and stability metrics

This helps us identify and fix bugs and improve app stability.

1.3 Location Data (Precise GPS)

With your explicit permission, we collect and store precise GPS coordinates to:

  • Set and display apiary locations on maps
  • Provide location-based weather information
  • Enable proximity-based features (e.g., nearby apiaries)
  • Timestamp records with location context

How to control location access:

  • iOS: Settings → Apiroi → Location → Choose "Never", "Ask Next Time", "While Using", or "Always"
  • Android: Settings → Apps → Apiroi → Permissions → Location → Choose "Allow only while using", "Ask every time", or "Don't allow"

Note: Some features (maps, local weather) may not work properly without location access.

1.4 Information from Third Parties

A. Authentication Providers (Apple, Google)

  • User identifier and email address
  • Profile information you authorize them to share
  • Authentication tokens

B. Payment Processors (Apple, Google, Stripe)

  • Transaction identifiers and status
  • Subscription status and renewal dates
  • Purchase history (dates, products, amounts)
  • We DO NOT receive your full payment card details

C. Weather Provider (OpenWeather)

  • We send coordinates to OpenWeather to retrieve weather data
  • OpenWeather may collect request metadata under their privacy policy

2. HOW WE USE INFORMATION

We use the information we collect for the following purposes:

2.1 Provide and Operate the Service

  • Create and manage your account
  • Authenticate your identity
  • Sync data across devices
  • Store and backup your beekeeping records
  • Enable core features (maps, weather, reminders, sharing)
  • Process and fulfill marketplace transactions

2.2 Improve and Develop the Service

  • Analyze usage patterns and trends
  • Identify and fix bugs and technical issues
  • Develop new features and functionality
  • Conduct research and testing
  • Optimize performance and user experience

2.3 Communicate with You

  • Send transactional emails (account verification, password resets, security alerts)
  • Provide customer support and respond to inquiries
  • Send service announcements and updates
  • Send marketing emails and newsletters (with your consent; opt-out available)
  • Request feedback and reviews

2.4 Security and Fraud Prevention

  • Detect, prevent, and investigate fraud, abuse, and security incidents
  • Enforce our Terms of Service and policies
  • Protect the rights, property, and safety of Apiroi, users, and the public
  • Verify compliance with usage restrictions

2.5 Subscription and Billing Management

  • Process payments and manage subscriptions
  • Provide access to premium features
  • Send billing notifications and receipts
  • Handle refund requests and billing disputes

2.6 Legal and Compliance

  • Comply with legal obligations and lawful requests
  • Respond to court orders, subpoenas, and government demands
  • Protect our legal rights and interests
  • Enforce our agreements and policies

2.7 Analytics and Business Operations

  • Generate anonymized, aggregated statistics about app usage
  • Measure marketing effectiveness
  • Conduct business planning and reporting

3. PAYMENTS AND SUBSCRIPTIONS

3.1 Mobile Purchases (iOS and Android)

In-app purchases are processed by:

  • Apple App Store (for iOS)
  • Google Play (for Android)

What we receive:

  • Transaction identifiers and status
  • Subscription status and expiration dates
  • Product purchased and purchase date
  • We DO NOT receive your payment card details

What Apple/Google receives:

  • Full payment information you provide to them
  • Billing address and personal details
  • See their privacy policies for details:
    • Apple: apple.com/legal/privacy
    • Google: policies.google.com/privacy

3.2 Web Purchases (Stripe)

If you purchase on apiroi.com, payments may be processed by Stripe.

What Stripe receives:

  • Payment card details (entered directly on Stripe's secure payment form)
  • Billing information
  • Transaction details

What we receive from Stripe:

  • Transaction identifiers and status
  • Last 4 digits of card and card brand
  • Subscription status
  • We DO NOT receive your full payment card number or CVV

Stripe's privacy policy: stripe.com/privacy

  1. THIRD-PARTY SERVICES

We use third-party service providers to help operate, improve, and secure the Service. These providers have access to your information only as necessary to perform their functions and are obligated to protect it.

4.1 Infrastructure and Hosting

  • Cloud storage and database hosting (e.g., AWS, Google Cloud, Firebase)
  • Content delivery networks (CDNs)
  • Backup and disaster recovery services

4.2 Analytics and Diagnostics

  • Usage analytics (e.g., Firebase Analytics, Mixpanel)
  • Crash reporting (e.g., Sentry, Crashlytics)
  • Performance monitoring

4.3 Communication Services

  • Email delivery (e.g., SendGrid, Mailchimp)
  • Push notification services (Apple Push Notification Service, Firebase Cloud Messaging)
  • Customer support tools (e.g., Zendesk, Intercom)

4.4 Weather and Maps

  • OpenWeather (weather data)
    • Privacy policy: openweathermap.org/privacy-policy
  • Google Maps (mapping and location services)
    • Privacy policy: policies.google.com/privacy

4.5 Authentication

  • Sign in with Apple (Apple Inc.)
  • Sign in with Google (Google LLC)

All third-party providers are bound by contractual obligations to protect your data and use it only for specified purposes.

  1. COOKIES AND TRACKING (Website)

5.1 What Are Cookies? Cookies are small text files stored on your device by websites you visit. They help websites remember your preferences and activity.

5.2 How We Use Cookies on apiroi.com

A. Essential Cookies (Necessary)

  • Keep you signed in
  • Remember your language and preferences
  • Maintain shopping cart and checkout state
  • Provide security features
  • Prevent fraud

These cookies are necessary for the website to function and cannot be disabled.

B. Functional Cookies

  • Remember your settings and preferences
  • Personalize your experience
  • Provide enhanced features

C. Analytics Cookies

  • Measure website traffic and usage
  • Understand which pages are most popular
  • Identify technical issues
  • Improve website performance

D. Payment Cookies (Stripe)

  • Detect and prevent payment fraud
  • Process secure transactions
  • Required for checkout functionality

5.3 Managing Cookies You can control cookies through your browser settings:

  • Chrome: Settings → Privacy and Security → Cookies
  • Safari: Preferences → Privacy → Cookies and website data
  • Firefox: Options → Privacy & Security → Cookies and Site Data
  • Edge: Settings → Cookies and site permissions

Note: Disabling cookies may affect website functionality, including sign-in and checkout.

5.4 Do Not Track Our website does not currently respond to Do Not Track (DNT) signals.

6. ADVERTISING AND TRACKING PRACTICES

6.1 No Third-Party Advertising We DO NOT:

  • Show third-party advertisements in the app or on the website
  • Sell your personal information to advertisers
  • Use your data for cross-app or cross-site tracking for advertising purposes

6.2 First-Party Marketing We may use your information to:

  • Send you promotional emails about Apiroi features and updates (opt-out available)
  • Show in-app announcements about new features
  • Measure the effectiveness of our own marketing campaigns

6.3 Analytics Opt-Out You can opt out of analytics tracking:

  • iOS: Settings → Apiroi → Analytics → Disable
  • Android: Settings → Apps → Apiroi → Analytics → Disable
  • Web: Use browser privacy settings or extensions

Note: Crash reporting cannot be disabled as it's essential for app stability.

7. HOW WE SHARE INFORMATION

We DO NOT sell your personal information.

We may share information in the following circumstances:

7.1 Service Providers and Partners We share information with trusted third-party service providers who help us operate the Service, including:

  • Cloud hosting and infrastructure providers
  • Payment processors
  • Email and communication services
  • Analytics and diagnostics tools
  • Customer support platforms

These providers are contractually obligated to:

  • Use data only for specified purposes
  • Protect data with appropriate security measures
  • Not use data for their own purposes

7.2 Weather and Map Services To provide weather and mapping features, we send limited information to:

  • OpenWeather (coordinates, request metadata)
  • Google Maps (coordinates for map display)

These services process data under their own privacy policies.

7.3 Other Users (Apiary Access and Sharing) When you use "Apiary Access" or sharing features:

  • Shared users can view the apiary data you grant them access to
  • Shared users see your name and email address (as the apiary owner)
  • Shared users can interact with shared data according to the permissions you set

You control:

  • Who has access to your shared apiaries
  • What level of access they have (view-only, edit, admin)
  • When to revoke access

7.4 Marketplace Interactions When you post marketplace listings or communicate with other users:

  • Your public profile information may be visible to others
  • Buyers can see your name, location (city/region), and contact preferences
  • Communications with buyers/sellers may be facilitated through the platform

7.5 Legal and Safety Reasons We may disclose information if required by law or if we believe it's necessary to:

  • Comply with legal process (subpoenas, court orders, search warrants)
  • Respond to lawful requests from government authorities
  • Enforce our Terms of Service and policies
  • Protect the rights, property, or safety of Apiroi, users, or the public
  • Detect, prevent, or investigate fraud, security incidents, or abuse
  • Defend against legal claims

7.6 Business Transfers If PROFCARE LLC is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will notify you via email or prominent notice before your information is transferred and becomes subject to a different privacy policy.

7.7 Aggregated and Anonymized Data We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you, such as:

  • Statistical usage trends
  • Demographic information
  • Industry benchmarks

8. EMAIL AND PUSH COMMUNICATIONS

8.1 Types of Communications

A. Transactional and Service Emails (Required)

  • Account verification and password resets
  • Security alerts (suspicious activity, login from new device)
  • Billing notifications and receipts
  • Important service updates and policy changes
  • Critical account notices

You CANNOT opt out of these emails as they are essential to the Service.

B. Marketing Emails (Optional)

  • Product updates and new features
  • Tips and best practices
  • Special offers and promotions
  • Newsletter and educational content

You can opt out of marketing emails at any time.

C. Push Notifications (Optional)

  • Task reminders and alerts
  • Inspection schedules
  • Treatment deadlines
  • Weather alerts
  • Marketplace activity notifications
  • Team collaboration updates

8.2 How to Opt Out

Marketing Emails:

  • Click the "Unsubscribe" link at the bottom of any marketing email
  • Update preferences in your account settings
  • Email support@apiroi.com with subject "Unsubscribe"

Push Notifications:

  • iOS: Settings → Apiroi → Notifications → Disable
  • Android: Settings → Apps → Apiroi → Notifications → Disable
  • In-app: Settings → Notifications → Customize preferences

Even if you disable marketing emails and optional push notifications, you will still receive essential service communications.

9. DATA RETENTION

9.1 How Long We Keep Data

We retain information only as long as necessary to:

  • Provide the Service and fulfill the purposes described in this policy
  • Comply with legal obligations (tax, accounting, regulatory requirements)
  • Resolve disputes and enforce agreements
  • Protect against fraud and abuse

9.2 Retention Periods

  • Account and profile data: Retained while your account is active, deleted within 90 days of account deletion (unless legal retention required)
  • Beekeeping records: Retained while your account is active, deleted within 90 days of account deletion
  • Photos and files: Deleted within 90 days of deletion from app or account deletion
  • Usage analytics: Typically anonymized after 26 months
  • Crash reports: Retained for 90 days
  • Support communications: Retained for 3 years for quality assurance
  • Billing records: Retained for 7 years for tax and accounting compliance
  • Legal holds: Retained as required by law or legal process

9.3 Backups Deleted data may persist in backups for up to 90 days before being permanently removed from all systems.

9.4 Anonymization When possible, we anonymize or de-identify data instead of deleting it, allowing us to retain aggregated insights while protecting your privacy.

10. ACCOUNT AND DATA DELETION

10.1 How to Delete Your Account

You can request account deletion by:

Method 1: In-app

  • Go to Settings → Account → Delete Account
  • Follow the confirmation steps

Method 2: Email

  • Send an email to support@apiroi.com from your registered email address
  • Subject line: "Apiroi — Delete My Account"
  • Include your account email address

10.2 Verification For security, we may request verification of your identity before processing deletion requests.

10.3 What Happens When You Delete Your Account

When you delete your account:

  • Your account is immediately deactivated (you cannot sign in)
  • Your personal information is deleted or anonymized within 30-90 days
  • Your beekeeping records, photos, and User Content are deleted
  • Your marketplace listings are removed
  • Your shared apiary access is revoked

10.4 What Is NOT Deleted

Certain information may be retained if required:

  • Transaction records and billing history (for tax/accounting compliance)
  • Communications with support (for quality assurance)
  • Data subject to legal holds or regulatory requirements
  • Anonymized, aggregated data that cannot identify you
  • Content shared with other users (remains accessible to them)
  • Data in backups (deleted within 90 days)

10.5 Cannot Be Undone Account deletion is permanent and cannot be undone. You will need to create a new account if you want to use the Service again.

  1. LEGAL BASES FOR PROCESSING (EEA/UK - GDPR/UK GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:

11.1 Contract (Performance of a Contract) We process data necessary to:

  • Provide the Service you requested
  • Create and manage your account
  • Sync and store your beekeeping records
  • Process subscriptions and payments
  • Enable core features (maps, weather, sharing)

11.2 Legitimate Interests We process data for our legitimate business interests, balanced against your rights and freedoms:

  • Secure and maintain the Service
  • Detect and prevent fraud and abuse
  • Improve features and user experience
  • Provide customer support
  • Conduct analytics and research
  • Send service-related communications
  • Enforce our Terms and policies

You can object to processing based on legitimate interests by contacting us.

11.3 Consent We process data based on your explicit consent for:

  • Precise location data (GPS coordinates)
  • Marketing emails and newsletters (opt-in required in EEA/UK)
  • Optional analytics and personalization features

You can withdraw consent at any time:

  • Location: Device settings
  • Marketing emails: Unsubscribe link or account settings
  • Analytics: App settings

Withdrawing consent does not affect the lawfulness of processing before withdrawal.

11.4 Legal Obligation We process data when required to:

  • Comply with legal requirements (tax, accounting, regulatory reporting)
  • Respond to lawful requests from authorities
  • Fulfill obligations under applicable law

12. INTERNATIONAL DATA TRANSFERS

12.1 Where We Process Data PROFCARE LLC is based in the United States. We may process and store data in:

  • The United States
  • Countries where our service providers operate
  • Regions chosen for performance and reliability

12.2 EEA/UK Transfers If you are in the EEA or UK, your data may be transferred to countries that do not provide the same level of data protection as your jurisdiction.

We rely on the following safeguards for international transfers:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions by the European Commission or UK government
  • Other legally recognized transfer mechanisms

12.3 Your Rights You have the right to obtain information about safeguards we use for international transfers by contacting support@apiroi.com.

13. YOUR PRIVACY RIGHTS

Depending on your location, you may have the following rights:

13.1 Access

  • Request a copy of the personal data we hold about you
  • Receive information about how we process your data

13.2 Correction (Rectification)

  • Correct inaccurate or incomplete personal data
  • Update your profile and account information

13.3 Deletion (Right to be Forgotten)

  • Request deletion of your personal data
  • See Section 10 for account deletion instructions

13.4 Data Portability

  • Receive your data in a structured, commonly used, machine-readable format
  • Request transfer of data to another service (where technically feasible)

13.5 Objection

  • Object to processing based on legitimate interests
  • Object to direct marketing (including profiling)

13.6 Restriction

  • Request restriction of processing in certain circumstances
  • Limit how we use your data while disputes are resolved

13.7 Withdraw Consent

  • Withdraw consent for processing based on consent (e.g., marketing, location)
  • Does not affect lawfulness of processing before withdrawal

13.8 Lodge a Complaint If you are in the EEA/UK, you have the right to lodge a complaint with your local data protection authority:

  • EEA: Find your authority at edpb.europa.eu/about-edpb/board/members_en
  • UK: Information Commissioner's Office (ICO) at ico.org.uk

13.9 How to Exercise Your Rights To exercise any of these rights, contact us:

  • Email: support@apiroi.com
  • Subject line: "Privacy Rights Request"
  • Include: Your name, email address, and specific request

We will respond within:

  • 30 days (generally)
  • 45 days (for complex requests)
  • As required by applicable law

We may request verification of your identity before processing requests.

  1. CHILDREN'S PRIVACY

14.1 Age Requirement Apiroi is not intended for children under 13 years of age (or the minimum age required in your jurisdiction).

14.2 No Knowing Collection We do not knowingly collect personal information from children under 13.

14.3 Parental Notice If we learn that we have collected information from a child under 13 without parental consent, we will delete that information immediately.

14.4 Parental Rights If you are a parent or guardian and believe your child has provided us with personal information, please contact support@apiroi.com immediately.

15. DATA SECURITY

15.1 Security Measures We implement reasonable technical, administrative, and physical safeguards to protect your information, including:

  • Encryption in transit (TLS/SSL for data transmission)
  • Encryption at rest (for sensitive data in databases)
  • Access controls and authentication requirements
  • Regular security assessments and audits
  • Employee training on data protection
  • Secure software development practices

15.2 Biometric Data We do NOT collect, store, or process biometric data (Face ID, Touch ID, fingerprints). Device biometric authentication is processed locally on your device and never transmitted to our servers.

15.3 Limitations No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

15.4 Your Responsibility You are responsible for:

  • Keeping your password secure and confidential
  • Not sharing your account credentials
  • Using secure networks when accessing the Service
  • Enabling device security features (passcode, biometric authentication)

15.5 Reporting Security Issues If you discover a security vulnerability, please report it immediately to support@apiroi.com with subject "Security Vulnerability Report".

16. DATA BREACH NOTIFICATION

16.1 Our Commitment In the event of a data breach that affects your personal information, we will:

  • Investigate the breach promptly
  • Take steps to mitigate harm and prevent recurrence
  • Notify affected users as required by law
  • Notify relevant data protection authorities as required

16.2 Notification Timeline We will notify you without undue delay after becoming aware of a breach, typically within:

  • 72 hours (for EEA/UK users, to authorities)
  • Reasonable timeframe for user notification (as required by applicable law)

16.3 What We'll Tell You Breach notifications will include:

  • Nature of the breach
  • Categories of data affected
  • Approximate number of affected users
  • Likely consequences
  • Measures we have taken or propose to take
  • Recommended actions for affected users

17. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

17.1 Categories of Personal Information We collect and may share the following categories of personal information:

A. Identifiers

  • Email address, name, device identifiers

B. Commercial Information

  • Purchase history, subscription status

C. Internet/Network Activity

  • Usage data, browsing history on apiroi.com

D. Geolocation Data

  • Precise GPS coordinates (with your consent)

E. Visual Information

  • Photos you upload

F. Inferences

  • Preferences and characteristics derived from your activity

17.2 Your California Rights

A. Right to Know Request disclosure of:

  • Categories of personal information collected
  • Sources of personal information
  • Purposes for collecting personal information
  • Categories of third parties we share with
  • Specific pieces of personal information we hold about you

B. Right to Delete Request deletion of personal information we collected from you (subject to exceptions).

C. Right to Opt-Out of Sale/Sharing We DO NOT sell or share personal information for cross-context behavioral advertising.

D. Right to Correct Request correction of inaccurate personal information.

E. Right to Limit Use of Sensitive Personal Information We use sensitive personal information only for permitted purposes under CCPA.

F. Non-Discrimination We will not discriminate against you for exercising your rights.

17.3 How to Exercise California Rights Email: support@apiroi.com Subject line: "California Privacy Rights Request"

We will respond within 45 days (may be extended to 90 days for complex requests).

17.4 Authorized Agent You may designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization.

17.5 Shine the Light Law California residents can request information about disclosure of personal information to third parties for direct marketing purposes (once per year).

17.6 Do Not Track Our website does not currently respond to Do Not Track (DNT) signals.

18. CHANGES TO THIS POLICY

18.1 Right to Modify We reserve the right to update this Privacy Policy at any time to reflect:

  • Changes in our practices
  • Changes in applicable law
  • New features or services
  • User feedback

18.2 Notice of Changes When we make changes:

  • We will update the "Last updated" date at the top of this policy
  • For material changes, we may notify you via:
    • Email to your registered email address
    • In-app notification
    • Prominent notice on apiroi.com

18.3 Your Acceptance Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

18.4 Review Regularly We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

19. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

PROFCARE LLC

2167 E 21ST ST STE 266 BROOKLYN, NY 11229, USA

Email: support@apiroi.com Website: apiroi.com

For EEA/UK Data Protection Inquiries: Email: support@apiroi.com Subject line: "GDPR/UK GDPR Inquiry"

For California Privacy Inquiries: Email: support@apiroi.com Subject line: "California Privacy Rights"

Last updated: February 2026 Version: 2.0