Personal Data Processing Policy

Beehive application — monitoring and management. Date of publication / last updated: 16 October 2026.

This is a translation provided for convenience. In case of any discrepancy, the Russian version shall prevail.

This Policy sets out the procedure for processing the personal data of users of the Beehive mobile application and the Service website (if any) and complies with the requirements of the Law of the Republic of Belarus No. 99-З of 7 May 2021 "On Personal Data Protection" and other applicable legislative acts of the Republic of Belarus.

Use of the Application and the Service constitutes your consent to the terms of this Policy. If you do not agree with them, please do not use the Application and do not provide us with personal data.

1. Terms and Definitions

1.1. Personal data means any information relating to an identified or identifiable natural person (personal data subject).

1.2. Processing of personal data means actions (operations) performed on personal data, including collection, recording, systematisation, accumulation, storage, rectification, retrieval, use, transfer, depersonalisation, blocking, deletion and destruction.

1.3. Operator (Administration) means a person who, alone or jointly with other persons, organises and/or carries out the processing of personal data and determines the purposes of processing and the scope of personal data to be processed. For the purposes of this Policy, the Operator is the Administration of the Beehive Service. Contact details are provided in Section 12.

1.4. Personal data subject (User) means a natural person who is directly or indirectly identified or identifiable on the basis of personal data, including by reference to an identifier. In the context of the Service, it means a user of the Beehive Application who has registered an account and/or uses the functionality of the Service.

1.5. Application (Service) means the Beehive mobile application, the website (if any) and the related server components intended for monitoring and managing devices (hubs, scales, etc.) and for synchronising data in the cloud.

1.6. Account means the set of User data created upon registration and in the course of using the Service, which provides access to personalised features (synchronisation, device pairing, measurements, notes).

Other terms are used with the same meaning as in the User Agreement of the Service.

2. Personal Data Processed

The Operator may process the following categories of Users' personal data.

2.1. Data provided upon registration and sign-in:

  • email address (required for registration and sign-in);
  • password (stored in encrypted (hashed) form; the Operator has no access to the password in plain text);
  • when signing in with a Google account (at your choice), Google transfers your email address, name, profile photo and Google account identifier. The Google account password is not transferred to the Operator. If the email address verified by Google matches an already registered Account, Google sign-in is linked to that Account.

2.2. Account identifiers and technical data:

  • a unique user identifier (UUID) assigned upon registration;
  • session and authorisation token data (to enable sign-in and ensure security);
  • the device token for push notifications (Firebase Cloud Messaging), the platform type and the selected Application language — for sending notifications (for example, about a significant change in hive weight).

2.3. Data created when using the Service:

  • data on devices (hubs, scales) linked to the account (device identifiers, names, settings);
  • measurement data (weight, sensor readings, dates and times);
  • notes and related data (text, attached images);
  • apiary location (latitude and longitude), if you set it on the map or with the “I'm at the apiary now” button — for the honey plant bloom calendar. Your location is determined once, when you tap the button; the Application does not track your movements or determine your location in the background. The location is stored with the apiary in your Account and can be changed by you at any time;
  • other settings and user content stored within the Account.

2.4. Technical and automatically collected data:

  • device IP address, operating system type and version, browser type (when using the web part of the Service);
  • date and time of access to the servers, request logs (to ensure security, for diagnostics and load monitoring);
  • data contained in cookies and similar technologies (if used on the website), to the extent necessary for authorisation and correct display of pages;
  • crash data (Firebase Crashlytics service): device model, operating system and Application versions, information about the crash or error (stack trace, service log of events preceding the crash), time of the crash;
  • Application usage data (Google Analytics for Firebase service): screens opened and actions taken in the Application (for example, creating a hive or a record, connecting scales), device model, OS and Application versions, language, approximate region, Application installation identifier.

Crash and usage data are linked to the internal Account identifier (UUID), not to the email address, and are used only in aggregated form to improve the stability and usability of the Application.

The Operator does not collect special categories of personal data (health data, biometric data, etc.), except where the User enters such information on their own in notes or other fields of the Service; in that case, processing is carried out on the basis of your explicit action and to the extent necessary to provide the feature you have chosen.

3. Purposes of Personal Data Processing

Personal data are processed for the following purposes:

  • providing access to the Service, registering and identifying the User;
  • ensuring the operation of the account and synchronisation of data between the User's devices;
  • storing and displaying measurement data, notes and device settings;
  • ensuring security (protection against unauthorised access, incident investigation);
  • technical support and responding to User enquiries;
  • fulfilling obligations under the User Agreement and applicable legislation;
  • sending push notifications related to the features of the Service (for example, about a significant change in hive weight);
  • calculating and displaying the honey plant bloom calendar for the apiary location;
  • improving the Service: analysing Application crashes and errors, aggregated feature usage statistics, load analysis.

Personal data are not processed for purposes not specified in this Policy without your separate consent or without a basis provided for by legislation.

4. Legal Grounds for Processing

Personal data are processed on the following legal grounds:

  • consent of the personal data subject — by accepting the terms of this Policy and the User Agreement upon registration and use of the Service;
  • performance of a contract — processing is necessary to provide services in accordance with the User Agreement (identification, account, data synchronisation);
  • legitimate interests of the Operator — ensuring the security of the Service, protection against abuse, technical diagnostics, recording of enquiries, to the extent that does not violate the rights and freedoms of the User;
  • performance of obligations provided for by legislation — where there are obligations to retain data or to provide information to authorised government bodies in cases established by the legislation of the Republic of Belarus.

5. Methods and Sources of Obtaining Personal Data

5.1. Personal data are obtained:

  • directly from the User — upon registration (email, password) and when using the Application (notes, settings, device pairing, measurement data);
  • automatically — when accessing the Service servers (IP address, request header data, logs), when using the website (cookies, if any), and in the event of crashes and during use of the Application (Firebase Crashlytics, Google Analytics for Firebase);
  • from Google — when signing in with a Google account (at your choice): email address, name, profile photo, account identifier;
  • from the User's device — data transmitted from the phone/tablet and from devices connected via Bluetooth (hubs, scales) as part of the Application's functionality.

5.2. The Operator does not obtain personal data from third-party sources (advertising networks, third-party databases, etc.) for profiling or advertising purposes. Data necessary for the operation of the Service are provided by the User, generated in the course of using the Application, or transferred by Google when the User chooses to sign in with a Google account.

6. Personal Data Retention Period

6.1. Personal data are retained for as long as the User's Account exists and (where necessary) for the period established by legislation for the retention of certain categories of data (for example, accounting documents, correspondence on claims).

6.2. After the Account is deleted at the initiative of the User or the Administration, the data are deleted from the active (production) database within the time limits set by the technical regulations (as a rule, without undue delay). Data may be retained in backup copies for the duration of their rotation cycle (as a rule, up to 30 days), after which they are deleted irrecoverably.

6.3. Technical logs (IP addresses, request times, etc.) may be retained in depersonalised or restricted form for the period necessary to ensure security and investigate incidents, but not longer than the period permitted by applicable legislation.

6.4. Crash data are retained in Firebase Crashlytics for up to 90 days, and Application usage data in Google Analytics for up to 14 months, after which they are deleted automatically.

6.5. Upon expiry of the specified periods, personal data are destroyed or depersonalised in such a way that identification of the data subject becomes impossible.

7. Personal Data Protection

7.1. The Operator takes the necessary and sufficient organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, dissemination, as well as against other unlawful actions of third parties.

7.2. Such measures include, in particular:

  • storing passwords only in hashed form (the password cannot be recovered in plain text);
  • using secure communication channels (HTTPS/TLS) when transferring data between the Application and the servers;
  • restricting access to personal data to authorised persons only and only to the extent necessary for the performance of their official duties;
  • backing up data in compliance with confidentiality requirements;
  • assessing and mitigating risks within the available resources as technologies and threats evolve.

7.3. Notwithstanding the measures taken, data transmission over the internet and electronic data storage cannot guarantee absolute security. The User is aware of the associated risks and uses the Service at their own risk to the extent not contrary to applicable legislation.

8. Transfer of Personal Data to Third Parties

8.1. The Operator does not sell or transfer personal data to third parties for marketing or advertising purposes.

8.2. Personal data may be transferred to third parties only in the following cases:

  • hosting and infrastructure — placement of servers and data with a hosting provider (including outside the Republic of Belarus) under a contract obliging such provider to ensure the confidentiality and security of data in accordance with applicable requirements;
  • Google services (Google LLC and its affiliates): Firebase Crashlytics (crash data), Google Analytics for Firebase (usage data), Firebase Cloud Messaging (delivery of push notifications), Google account sign-in. Data are processed on Google servers, including outside the Republic of Belarus, in accordance with the Google Privacy Policy (https://policies.google.com/privacy);
  • Yandex.Metrica (Yandex LLC) — depersonalised traffic statistics of the Service website;
  • compliance with legislative requirements — upon a lawful request of authorised government bodies of the Republic of Belarus or other states in cases provided for by legislation;
  • protection of rights and legitimate interests — where necessary to protect the rights of the Operator, Users or third parties to the extent permitted by legislation (for example, when investigating violations).

8.3. When transferring data outside the Republic of Belarus, the Operator ensures compliance with the requirements of the legislation of the Republic of Belarus on cross-border transfer of personal data (if any).

9. Cookies and Similar Technologies (Website)

9.1. If the Service includes a website, cookies and similar technologies may be used on it for:

  • enabling authorisation (sign-in session);
  • correct display of pages and saving settings within a session;
  • depersonalised analysis of traffic and load (Yandex.Metrica service).

9.2. The User may disable or delete cookies in the browser settings; in that case, some features of the website (in particular, authorisation) may stop working.

9.3. The mobile Application may use local storage on the User's device (including for authorisation tokens and data cache) to the extent necessary for the operation of the Service. These data are not transferred to third parties for advertising or profiling purposes.

10. Rights of the Personal Data Subject

In accordance with the legislation of the Republic of Belarus, you have the right to:

10.1. Receive information about the processing of your personal data (including the scope of data, purposes and periods of processing), except where the provision of such information is restricted by law.

10.2. Request rectification (correction) of personal data if they are inaccurate or incomplete, including by editing the data in the Account settings or by contacting the Operator using the contact details provided in Section 12.

10.3. Request the cessation of processing and deletion of personal data — you may delete your Account at any time using the Application's functionality, which will result in deletion of the related personal data in the manner described in Section 6. Additional deletion requests may be sent to the Operator using the specified contact details.

10.4. Withdraw consent to the processing of personal data — withdrawal of consent does not deprive the Operator of the right to process data on other legal grounds (performance of a contract, legitimate interests, legal obligations). Ceasing to use the Service and deleting the account result in the cessation of processing to the extent not required for the purposes of the said grounds.

10.5. Appeal against actions (inaction) of the Operator to the authorised government body for the protection of the rights of personal data subjects in accordance with the legislation of the Republic of Belarus.

To exercise these rights, send a request to the Operator's contact email address (Section 12). The Operator will consider the request within a reasonable time (as a rule, within 30 calendar days), unless otherwise provided by legislation.

11. Changes to the Policy

11.1. The Operator may unilaterally amend this Policy. The new version takes effect upon its publication in the Application and/or on the Service website. The "Last updated" date indicates when the version takes effect.

11.2. Continued use of the Service after the changes take effect constitutes your acceptance of the updated Policy. If you do not agree with the changes, you must stop using the Service and delete your Account.

12. Operator Contact Details

For all questions related to the processing of personal data and the exercise of your rights:

  • Email: beehive.scale.service@gmail.com
  • Website: "Contacts" section (if any)

The details and status of the Operator (individual / individual entrepreneur / legal entity) may be specified in the User Agreement or on the Service website.

By using the Beehive Application, you confirm that you have read this Personal Data Processing Policy and agree to its terms.

    Articles, guide, FAQ