The short version.
- I store your email address, an encrypted version of your password, and the content you create in the apps.
- Your content is stored so it can sync across your devices and be there when you log back in.
- I don't use your information for advertising, and I don't build profiles about you.
- I don't sell your information.
- Your data is stored on my own server.
- If you buy Pro, Google Play or Creem takes the payment. I never see your card details.
- You can delete your data, or your whole account, at any time.
Who this covers
Bismology is run by one independent developer. This policy covers the website at bismology.com and the Bismology apps: Progress XP, Visual Schedule, and Auto Todo.
You use a single Bismology account across all of the apps, so this policy applies to that account wherever you sign in.
What I collect
- Your email address. It identifies your account, lets you sign in, and lets me send you essential account emails such as password resets.
- Your password, encrypted. Passwords are stored in an encrypted (hashed) form. I cannot see your password, and neither can anyone else with access to the server. If you forget it, it can be reset, not recovered.
- The content you create in the apps. Your saved entries, lists, notes, schedules, and progress data. This is stored so it can sync across your devices and be available when you log back in.
- Your Pro purchases, if you make any. Which app's Pro you bought, when you bought it, where you paid (Google Play or Creem), the order reference, and whether it was refunded. This is how your account knows it has Pro on every device. Your card and billing details go to Google or Creem, not to me.
- Basic technical records. Standard server logs (things like the time of a request and the address it came from) kept for security and debugging, and a sign-in token stored in your browser or app to keep you signed in.
That is all of it. I don't ask for anything else, and I don't collect anything about you from other sources.
What I don't do
- I don't use your information for advertising, and there are no advertising or tracking networks in the apps.
- I don't build profiles about you or analyse your content to learn about you.
- I don't sell, rent, or trade your information.
- I don't share your information with anyone, apart from the service providers listed below that are needed to run the apps.
Where your data is stored
Your account and your content are stored on my own server, not in a third-party database or cloud storage account. Traffic between your device and the server is encrypted in transit over HTTPS, and passwords are stored hashed rather than in readable form.
No system is perfectly secure, but your data is not passed around, and access to the server is limited to me.
Services I rely on
These outside services are involved in running Bismology. The last four only come into play if you use the feature they're for:
- Vercel hosts the bismology.com website and provides its built-in web analytics, which counts page visits in aggregate. This measures how many people visit the site; it isn't linked to your account and isn't used to build a profile of you.
- Brevo delivers account emails such as verification and password-reset messages. It receives your email address and the contents of that message so it can be sent. It is send-only; there is no inbox on the other end, so replies to those emails won't reach me.
- Google sign-in, if you choose “Sign in with Google”. Google confirms who you are and shares your email address and basic profile (your name and profile picture) with my server. Your email address becomes your account's email address.
- Creem, if you buy Pro on the web or on desktop. Creem is the merchant of record for these purchases: it collects your payment and billing details directly, handles sales tax, and sends your receipt. It tells my server your email address, your order reference, and which Pro you bought. Creem handles your details under its own privacy policy.
- Google Play, if you buy Pro in the Android app. Google takes the payment under its own privacy policy. I receive a record of the purchase, not your payment details.
- RevenueCat, if you buy Pro through Google Play. It checks that the purchase is genuine and tells my server about it. It receives the purchase record, your account ID (a random code, not your email address), and basic device details such as the app version.
None of these services receive the content you create in the apps.
Cookies and local storage
The apps store only what they need to work: a sign-in token so you stay logged in, and your app preferences. There are no advertising cookies and no cross-site tracking.
How long I keep your data
Your account and your content are kept for as long as your account exists. The same goes for the record of any Pro you've bought. Google Play and Creem keep their own records of your payment, as tax law requires, under their own policies.
Deleting your account removes it and everything attached to it from the server straight away. Deleting your data puts it beyond reach of you and your devices straight away, and it is erased from the server within 90 days. Either way, any copies held in routine backups are cleared as those backups age out.
Deleting your data or your account
Deleting your data and deleting your account are separate choices, and you are in control of both:
- Individual things you have saved. You can edit or delete anything from inside the apps at any time.
- All of your data, keeping your account. Sign in at bismology.com/delete and choose Delete data. This clears everything you have created in every Bismology app. Your account and your settings stay, so you can carry on using the apps from empty.
- Your whole account. Sign in at bismology.com/delete and choose Delete account, or do it from inside any Bismology app at the bottom of the settings page. This removes your email address, your stored password, and your content.
Because one account is shared across all the Bismology apps, either choice applies everywhere you sign in with it. Neither can be undone.
Deleting your data leaves any Pro you've bought in place. Deleting your account removes it too, because Pro belongs to the account and can't be moved to a new one.
Children
The Bismology apps aren't directed at children under 13, and I don't knowingly collect information from them. If you believe a child has created an account, get in touch and I'll remove it.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new date below. Significant changes will be noted in the apps as well.
Contact
Questions about your privacy or your data? Email bismology@gmail.com.
Last updated: 12 October 2026