What I store, why I store it, and how to get rid of it.
The short version.
I store your email address, an encrypted version of your password, and the content you create in the apps.
Your content is stored so it can sync across your devices and be there when you log back in.
I don't use your information for advertising, and I don't build profiles about you.
I don't sell your information.
Your data is stored on my own server.
You can delete your data, or your whole account, at any time.
Who this covers
Bismology is run by one independent developer. This policy covers the website at bismology.com and the Bismology apps: Progress Tracker, Visual Schedule, and Auto Todo.
You use a single Bismology account across all of the apps, so this policy applies to that account wherever you sign in.
What I collect
Your email address. It identifies your account, lets you sign in, and lets me send you essential account emails such as password resets.
Your password, encrypted. Passwords are stored in an encrypted (hashed) form. I cannot see your password, and neither can anyone else with access to the server. If you forget it, it can be reset, not recovered.
The content you create in the apps. Your saved entries, lists, notes, schedules, and progress data. This is stored so it can sync across your devices and be available when you log back in.
Basic technical records. Standard server logs (things like the time of a request and the address it came from) kept for security and debugging, and a sign-in token stored in your browser or app to keep you signed in.
That is all of it. I don't ask for anything else, and I don't collect anything about you from other sources.
What I don't do
I don't use your information for advertising, and there are no advertising or tracking networks in the apps.
I don't build profiles about you or analyse your content to learn about you.
I don't sell, rent, or trade your information.
I don't share your information with anyone, apart from the two service providers listed below that are needed to run the apps.
Where your data is stored
Your account and your content are stored on my own server, not in a third-party database or cloud storage account. Traffic between your device and the server is encrypted in transit over HTTPS, and passwords are stored hashed rather than in readable form.
No system is perfectly secure, but your data is not passed around, and access to the server is limited to me.
Services I rely on
Two outside services are involved in running Bismology:
Vercel hosts the bismology.com website and provides its built-in web analytics, which counts page visits in aggregate. This measures how many people visit the site; it isn't linked to your account and isn't used to build a profile of you.
Brevo delivers account emails such as verification and password-reset messages. It receives your email address and the contents of that message so it can be sent. It is send-only; there is no inbox on the other end, so replies to those emails won't reach me.
Neither service receives the content you create in the apps.
Cookies and local storage
The apps store only what they need to work: a sign-in token so you stay logged in, and your app preferences. There are no advertising cookies and no cross-site tracking.
How long I keep your data
Your account and your content are kept for as long as your account exists.
Deleting your account removes it and everything attached to it from the server straight away. Deleting your data puts it beyond reach of you and your devices straight away, and it is erased from the server within 90 days. Either way, any copies held in routine backups are cleared as those backups age out.
Deleting your data or your account
Deleting your data and deleting your account are separate choices, and you are in control of both:
Individual things you have saved. You can edit or delete anything from inside the apps at any time.
All of your data, keeping your account. Sign in at bismology.com/delete and choose Delete data. This clears everything you have created in every Bismology app. Your account and your settings stay, so you can carry on using the apps from empty.
Your whole account. Sign in at bismology.com/delete and choose Delete account, or do it from inside any Bismology app at the bottom of the settings page. This removes your email address, your stored password, and your content.
Because one account is shared across all the Bismology apps, either choice applies everywhere you sign in with it. Neither can be undone.
Children
The Bismology apps aren't directed at children under 13, and I don't knowingly collect information from them. If you believe a child has created an account, get in touch and I'll remove it.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new date below. Significant changes will be noted in the apps as well.