Effective Date: April 29, 2026 Last Updated: April 29, 2026
Table of Contents
- Introduction and Our Privacy Commitments
- Information We Collect
- How We Use Your Information
- Legal Basis for Processing (GDPR)
- How We Share Your Information
- Data Retention
- Data Security
- Your Rights and Choices
- Children's Privacy
- International Data Transfers
- Feature-Specific Privacy Notices
- Third-Party Links and Services
- Cookies and Tracking Technologies
- California Residents — CCPA/CPRA
- App Store and Play Store Disclosures
- Changes to This Policy
- Contact Us
1. Introduction and Our Privacy Commitments
1.1 Who We Are
This Privacy Policy is published by Bield, operated by CedarRow Ventures and its associated operating entities (collectively, "Bield," "we," "us," or "our"). We operate three applications — Bield Hunt, Bield Fish, and Bield Farm — and three websites: bieldhunt.com, bieldfish.com, and bieldfarm.com (collectively, the "Services").
This single Privacy Policy applies to all three Bield applications and websites. Where our practices differ by product, those differences are clearly noted.
For privacy-specific inquiries, contact us at privacy@bieldfish.com.
1.2 What This Policy Covers
This Privacy Policy describes:
- What personal information we collect from you
- How we use that information
- With whom we share that information
- How long we retain it
- How we protect it
- Your rights with respect to your information
- How to exercise those rights
This Policy applies to information collected through the Bield applications, Bield websites, email communications, and any other interaction you have with us. It does not apply to the data practices of third-party services linked from our Services, which have their own privacy policies.
1.3 Our Core Privacy Commitments
We want to be direct and specific about what we do and do not do with your data:
We do not sell your personal data. We will never sell, rent, or trade your personal information to any third party for their own use.
Your observation, catch, and farm data belongs to you. The hunting observations, fishing catches, farm records, field boundaries, and financial data you enter into the Services belong to you. We use this data only to provide the Services to you and as described in this Policy.
We do not share your location with other users. Your property locations, stand locations, water body coordinates, and field boundaries are private to your Account and are never visible to other users.
We do not run advertising. The Bield applications and websites do not display advertisements. We do not share your data with advertising networks, data brokers, or marketing platforms.
You can export your data anytime. Pro Subscribers can export their data in CSV format. All users can request a data export regardless of subscription status.
You can delete your data anytime. Deleting your Account removes your personal data from our systems, subject to limited exceptions for legal compliance and backup retention as described in Section 6.
2. Information We Collect
2.1 Information You Provide Directly
2.1.1 Account Registration Information
When you create an Account, we collect:
- Email address
- Display name or username
- State or region (used for season and regulation lookups and for weather data calibration)
- Authentication method (Apple ID, Google account, or email and password)
If you sign in with Apple or Google, we receive limited profile information from those providers as authorized by you at the time of authentication.
2.1.2 Subscription and Payment Information
When you purchase a Pro Subscription, we receive from the applicable payment processor:
- Subscription tier (Pro Monthly or Pro Annual)
- Subscription status (active, expired, canceled, or in trial)
- Subscription start date and renewal date
- Transaction receipt tokens or identifiers necessary for subscription validation
We do not receive or store your credit card number, bank account number, CVV, or other sensitive payment credentials. All payment transactions are handled directly by Apple Inc., Google LLC, or Lemon Squeezy, as applicable.
2.1.3 User-Generated Content
The following describes the types of User Content you may create within each application. All User Content is private to your Account and is not visible to other users.
Bield Hunt — User Content includes: Properties and their names, boundaries drawn on maps, and associated metadata; stand and location markers with coordinates, types, and notes; observation records including date, time, species (deer or turkey), result, behavior, estimated size or age, distance, wind direction, temperature, conditions; sit records (sessions without observations); weather conditions captured automatically at log time; photographs you attach to records; and voice notes you record.
Bield Fish — User Content includes: Water bodies and their names, types, and boundaries; spot markers with coordinates, types, depth, and notes; catch records including date, time, species, result, length, weight, method, lure or bait, retrieve, fishing depth, water temperature, water clarity, notes, and automatically captured environmental conditions; session records including start time, end time, duration, and catch count; tide records for saltwater catches; hatch records for river catches; photographs you attach to catches; voice notes; and catch amendment notes added after the initial log.
Bield Farm — User Content includes: Field and plot records including names, boundaries, types, soil data, and metadata; planting records including crop, variety, method, spacing, seed source, and dates; harvest records including quantity, quality, and dates; input records including fertilizer, pesticide, herbicide, irrigation, and cultivation events; soil test results including pH, nitrogen, phosphorus, potassium, organic matter, and micronutrients; animal records including species, breed, identification, sex, lineage, and status; animal health records including observations, treatments, vaccinations, and deworming; breeding records; production records including milk, eggs, and body weights; feed event records; grazing rotation records; perennial plant records; orchard event records; equipment and maintenance records; task and chore records; and financial records including income and expense entries per enterprise.
All Applications: Account profile information you provide; customer support communications you send to us; feedback or survey responses you submit.
2.1.4 Communications
When you contact us for support, submit feedback, or communicate with us through any channel, we collect and retain those communications for customer service purposes.
2.1.5 Newsletter and Marketing Subscriptions
If you subscribe to a Bield newsletter through any of our websites, we collect your email address and any preferences you indicate. Subscription is always opt-in.
2.2 Information Collected Automatically
2.2.1 Location Data
What we collect: When you log an observation, catch, or farm event, the application captures the GPS coordinates of your device at the moment of logging if location permission has been granted. The application also uses location data to detect when you are within 500 meters of a saved property, water body, or field to prompt automatic association.
Precision: We capture precise GPS coordinates because precise location is a core feature of the Services — stand performance, spot performance, and field performance analysis requires accurate location data.
When we access location: We access location data only when you initiate a logging action or when the application is running in the foreground and you have granted location access. We do not track your location continuously or in the background.
Your control: You can revoke location permission at any time in your device settings. Revoking location permission will prevent automatic location capture during logging (you will need to select your location manually) and will disable the proximity auto-detection feature.
Storage: Location data is stored as part of your User Content records and is subject to the same protections and retention policies.
2.2.2 Device and Technical Information
When you use the Services, we automatically collect limited technical information including:
- Device type and model
- Operating system and version
- Application version
- Unique device identifier (used for crash reporting; not linked to your personal identity in analytics)
- Time zone
- Network type (Wi-Fi or cellular, not your IP address for general collection)
2.2.3 Crash Reports and Error Logs
The Services use Sentry for error tracking and crash reporting. When the application encounters an error or crash, a report is automatically generated and transmitted to Sentry. Crash reports may include device information, application state at the time of the crash, and a stack trace. Crash reports are used exclusively for identifying and fixing software bugs. We configure Sentry to minimize the personal data included in crash reports.
2.2.4 Usage Information
We collect limited information about how you use the Services, including which features you use and how frequently, in-app navigation patterns, and performance metrics such as screen load times. This information is collected in aggregate and is used to improve the Services.
2.2.5 Website Cookies and Similar Technologies
Our websites use the following types of tracking technologies:
Strictly necessary cookies: Session cookies required to operate the website, including authentication session tokens. These cannot be disabled.
Analytics: We use Plausible Analytics (or a comparable privacy-respecting alternative), which does not use cookies and does not collect personal identifiers. Analytics data is aggregated and anonymized.
No advertising cookies: We do not use advertising cookies, third-party tracking pixels, or any technology that enables targeted advertising.
A cookie preference banner is displayed to users in jurisdictions where consent is required by law. Essential session cookies do not require consent.
2.3 Information from Third-Party Sources
2.3.1 Authentication Providers
If you sign in using Apple Sign In or Google Sign In, we receive the information you authorize at authentication. For Apple Sign In, this typically includes your name and either your real email address or an Apple-generated relay address. For Google Sign In, this typically includes your name, email address, and profile picture. We do not receive any other information from your Apple or Google account.
2.3.2 Payment Processors
When you purchase a subscription, the applicable payment processor (Apple, Google, or Lemon Squeezy) provides us with transaction confirmation and subscription status information necessary to activate and maintain your Pro access. We do not receive your payment credentials from these processors.
2.3.3 Public Data Sources
We incorporate data from the following public data sources into your records:
- Apple WeatherKit: Current weather conditions including temperature, wind speed, wind direction, barometric pressure, humidity, and precipitation, retrieved based on your GPS location at the time of a logging event.
- NOAA Tides and Currents (Bield Fish): Tide predictions and current tide stage for saltwater fishing sessions.
- USGS Water Services (Bield Fish): Real-time river flow rate and gauge height for river fishing sessions.
- NOAA CoastWatch ERDDAP (Bield Fish): Sea surface temperature data for offshore fishing sessions.
This environmental data is incorporated into your records and stored as part of your User Content. It is not used to infer sensitive information about you.
2.4 Information We Do Not Collect
To be clear about the limits of our data collection:
- We do not collect Social Security numbers or government identification numbers.
- We do not collect credit card numbers, bank account numbers, or payment credentials.
- We do not collect health or medical information protected by HIPAA.
- We do not collect information about other people without their knowledge or consent.
- We do not collect information from children under 13 knowingly.
- We do not collect information from your device contacts, calendar, or other applications.
- We do not collect information about your browsing history outside of our websites.
3. How We Use Your Information
3.1 To Provide and Operate the Services
We use your information to:
- Create and maintain your Account
- Authenticate your identity when you sign in
- Store, sync, and display your User Content across your authorized devices
- Process your User Content through the Pattern Engine to generate insights and recommendations
- Validate and manage your subscription status
- Deliver weather, tide, and other environmental data at the time of logging
- Enable the GPS proximity detection feature
- Provide AI-powered photo identification (Bield Fish and Bield Farm)
- Process voice notes and transcribe them
- Enable data export in supported formats
3.2 To Maintain and Improve the Services
We use aggregated, anonymized information derived from usage patterns to:
- Identify and fix bugs, errors, and crashes
- Optimize application performance
- Understand which features are most used and valued
- Develop new features and improvements
- Conduct A/B testing of interface changes
This use does not involve any identifiable personal data. We will not use your specific User Content for product improvement purposes.
3.3 To Communicate With You
We use your contact information to:
- Send account-related notifications (subscription confirmations, renewal notices, password resets, email verification)
- Respond to your support requests
- Send newsletters you have subscribed to
- Notify you of material changes to these Terms or this Policy
- Communicate about beta programs you have enrolled in
3.4 For Safety, Security, and Legal Compliance
We use your information to:
- Detect and prevent fraud and abuse
- Enforce our Terms of Service
- Protect the rights, property, and safety of Bield, our users, and the public
- Comply with applicable legal obligations
- Respond to lawful requests from government authorities
3.5 What We Do Not Use Your Data For
We will never use your data for the following purposes:
- Sale to any third party
- Sharing with advertising networks or data brokers
- Building advertising profiles
- Training third-party artificial intelligence or machine learning models
- Sharing your hunting or fishing locations with any other person
- Sharing your farm operational data with any third party without your explicit consent
- Any purpose not described in this Privacy Policy
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data on the following legal bases as required by the General Data Protection Regulation (GDPR):
4.1 Performance of a Contract (Article 6(1)(b))
We process the following data to fulfill our contractual obligations to provide the Services:
- Account information necessary to create and maintain your Account
- Subscription information necessary to manage your Pro access
- User Content necessary to operate the Pattern Engine and provide insights
- Location data to deliver core features of the Services
4.2 Legitimate Interests (Article 6(1)(f))
We process the following data based on our legitimate interests, subject to your rights to object:
- Crash reports and error logs to maintain and improve the Services
- Aggregated analytics to understand usage patterns and improve performance
- Security monitoring to detect fraud and protect the Services
When we rely on legitimate interests, we have assessed that our interests are not overridden by your interests or fundamental rights and freedoms.
4.3 Consent (Article 6(1)(a))
We process the following data based on your consent:
- Marketing and newsletter emails (you may withdraw consent by unsubscribing at any time)
- Optional analytics participation (where applicable)
- Beta program participation
4.4 Legal Obligation (Article 6(1)(c))
We may process your data to comply with legal obligations, including tax record retention, responding to lawful legal process, and fulfilling regulatory requirements.
4.5 Withdrawing Consent
Where we rely on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Withdrawal of consent for newsletter emails may be done by clicking the unsubscribe link in any email. Withdrawal of consent for other processing may be requested by contacting privacy@bieldfish.com.
5. How We Share Your Information
We are very specific about how we share your information because your data — particularly your hunting locations, fishing spots, and farm data — is sensitive and private.
5.1 Service Providers Who Process Data on Our Behalf
We share your data with the following service providers solely to operate the Services. These providers are prohibited from using your data for any purpose other than providing services to us, and they are required to maintain appropriate security and confidentiality.
Supabase, Inc. — Provides database storage, authentication infrastructure, and backend computation (Edge Functions) for the Services. Your User Content, Account information, and subscription data are stored on Supabase servers. Data is encrypted in transit and at rest. Supabase servers are located primarily in the United States.
Vercel Inc. — Provides website hosting for all three Bield websites. Web session data and analytics may flow through Vercel's global CDN infrastructure.
Sentry — Provides crash reporting and error tracking for the Bield applications. Crash reports include technical device and application state information and are stored on Sentry's servers in the United States.
Plausible Analytics (or comparable privacy-respecting alternative) — Provides website analytics without cookies and without collecting personal identifiers. Data is aggregated and anonymized.
Apple Inc. — Processes iOS subscription purchases and provides weather data through WeatherKit. For subscription purchases, Apple processes payment information and provides us with subscription status. For WeatherKit, your approximate location is transmitted to Apple's servers to retrieve weather data. Apple's privacy policy governs their handling of this data.
Google LLC — Processes Android subscription purchases and provides Google Sign In authentication. Google's privacy policy governs their handling of this data.
Lemon Squeezy — Processes web subscription purchases. Lemon Squeezy's privacy policy governs their handling of payment data.
Google Workspace — Provides email hosting for our support, legal, and privacy email addresses. Support communications you send to us are processed through Google's email infrastructure.
Resend or Postmark (transactional email provider) — Delivers transactional emails including subscription confirmations, password resets, and account notifications.
Anthropic PBC (Bield Fish and Bield Farm only) — Provides AI-powered photo identification services. When you use the AI photo identification feature, the photograph you submit is transmitted to Anthropic's API for processing. Anthropic returns the identification result to us and delivers it to your device. Per Anthropic's API usage policies, they do not use data submitted through the API to train their models. Anthropic's privacy policy governs their handling of transmitted images. See Section 11.2 for additional details.
Mapbox, Inc. — Provides mapping tiles, satellite imagery, and geographic data displayed within the Services. Your approximate location is transmitted to Mapbox servers to retrieve map tiles for the area you are viewing. Mapbox's privacy policy governs their handling of this data.
NOAA National Oceanic and Atmospheric Administration (Bield Fish only) — Provides publicly available tide data (NOAA Tides and Currents) and sea surface temperature data (NOAA CoastWatch). Geographic coordinates of your fishing location are transmitted to NOAA APIs to retrieve this public data. NOAA is a U.S. federal government agency.
USGS United States Geological Survey (Bield Fish only) — Provides publicly available river gauge data. River gauge station identifiers are transmitted to USGS APIs to retrieve public flow data. USGS is a U.S. federal government agency.
ConvertKit, Mailchimp, or comparable CRM platform (newsletter subscriptions only) — Stores email addresses and preferences for newsletter subscribers. Used only for newsletter delivery.
5.2 What We Do Not Share
We will never share your data with:
- Advertising networks or demand-side platforms
- Data brokers or data aggregators
- Insurance companies
- Government agencies (except as required by lawful legal process — see Section 5.4)
- Competing applications or services
- Any third party for their own marketing purposes
- Any third party for a purpose not described in this Privacy Policy
5.3 Business Transfers
If Bield is involved in a merger, acquisition, reorganization, asset sale, or similar transaction, your personal data may be transferred as part of that transaction. We will notify you by email and by posting a prominent notice within the Services at least 30 days before your data is transferred and becomes subject to a different privacy policy. If you do not consent to the transfer, you may delete your Account before the transfer takes effect.
Any acquirer of Bield's business will be required to honor the data ownership commitments described in this Policy as a condition of the transfer.
5.4 Legal Disclosure
We may disclose your personal data if we believe in good faith that disclosure is necessary to: (a) comply with a law, regulation, or binding legal process such as a court order, subpoena, or search warrant; (b) protect the rights, property, or safety of Bield, our users, or the public; or (c) detect, prevent, or address fraud, security issues, or technical problems.
When legally permitted, we will notify you before disclosing your data in response to legal process so that you may seek legal protection. We will review all legal requests and object to requests that we believe are improper, overbroad, or unlawful.
5.5 With Your Explicit Consent
We may share your data with third parties for any purpose with your explicit, informed consent. We will never treat your continued use of the Services as implicit consent to any sharing not described above.
6. Data Retention
6.1 Active Account Retention
Your User Content and Account information are retained for the duration of your active Account. We do not automatically delete data from active Accounts. Multi-season data accumulation is a core feature of the Services, and we preserve your historical data for as long as your Account remains active.
6.2 Account Deletion
When you delete your Account through the Settings section of a Bield application, the following occurs:
- Your Account and all associated User Content are marked for deletion immediately.
- Your data is removed from our primary databases within 14 days.
- Your data is purged from backup systems within 30 days of the deletion request.
- Data shared with service providers is subject to their respective deletion processes per our data processing agreements.
A 14-day grace period exists during which you may reactivate your Account and recover your data. After 14 days, deletion is irreversible and data cannot be recovered.
6.3 Specific Retention Periods
The following retention periods apply to specific categories of data:
| Data Category | Retention Period |
|---|---|
| Account information | Duration of Account + 30 days after deletion |
| User Content | Duration of Account + 30 days after deletion |
| Payment records and receipts | 7 years (tax and legal compliance) |
| Support communications | 2 years from last interaction |
| Crash logs and error reports | 90 days |
| Website analytics | Rolling 24 months (aggregated, anonymized) |
| Newsletter subscriber records | Until unsubscribe + 30 days |
| Legal correspondence | 7 years |
6.4 Retained Data After Deletion
Some data may be retained after Account deletion for the following legally required purposes:
- Transaction records and payment receipts for tax and financial compliance (7 years)
- Data subject to active legal hold or litigation
- Data required to resolve outstanding disputes with you
- Aggregated, anonymized data that cannot be used to identify you
6.5 Inactive Accounts
Accounts with no login activity for 24 consecutive months may be reviewed for deletion. We will send a notice to your registered email address at least 30 days before taking any action. You may prevent deletion by logging in to your Account.
7. Data Security
7.1 Technical Safeguards
We implement the following technical security measures to protect your personal data:
Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. We do not transmit personal data over unencrypted connections.
Encryption at Rest: Database contents are encrypted at rest using industry-standard encryption provided by Supabase.
Row-Level Security: Our database uses row-level security policies on every user-owned table, ensuring that even within our own infrastructure, one user's data cannot be accessed from another user's session.
Authentication: We use industry-standard authentication mechanisms including OAuth 2.0 for Apple and Google sign-in, bcrypt password hashing for email accounts, and short-lived session tokens that require re-authentication.
Access Controls: Internal access to production data is restricted to authorized personnel on a need-to-know basis and is logged.
Regular Backups: User data is backed up regularly to enable recovery from data loss events.
7.2 Security Limitations
No security system is perfect or impenetrable. While we implement the above measures, we cannot guarantee that your personal data will be completely secure from unauthorized access, disclosure, alteration, or destruction. We will not be liable for any breach of security that is beyond our reasonable control.
7.3 Data Breach Notification
In the event of a data security breach that affects your personal data, we will:
- Notify affected users by email within 72 hours of becoming aware of the breach, where technically feasible, or as soon as possible thereafter.
- Notify applicable regulatory authorities within the timeframes required by applicable law, including the 72-hour requirement under GDPR.
- Provide details about the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the measures we have taken or propose to take.
7.4 Your Role in Security
You can help protect your Account by: using a strong, unique password (if using email sign-in); not sharing your credentials with others; logging out of shared devices; enabling two-factor authentication on your Apple ID or Google account (which extends to Apple Sign In or Google Sign In); and notifying us immediately at support@bieldfish.com if you suspect unauthorized account access.
8. Your Rights and Choices
8.1 Rights Available to All Users
Regardless of your location, you have the following rights with respect to your personal data:
8.1.1 Right to Access
You may request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of your request. Pro Subscribers can access and export most of their data directly through the application. For other requests, contact privacy@bieldfish.com.
8.1.2 Right to Correct
You may correct inaccurate personal data directly within the application (for User Content and Account information accessible through the app) or by contacting us at privacy@bieldfish.com for data not accessible within the app.
8.1.3 Right to Delete
You may delete your Account and all associated data at any time through the Settings section of the application. See Section 6.2 for details on the deletion process. You may also request deletion of specific data without deleting your entire Account by contacting privacy@bieldfish.com.
8.1.4 Right to Data Portability
You may request your personal data in a portable format. Pro Subscribers can export data in CSV format through the application. All users may request a data export regardless of subscription status by contacting privacy@bieldfish.com. We will fulfill reasonable export requests within 30 days at no charge.
8.1.5 Right to Opt Out of Marketing
You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting privacy@bieldfish.com. Unsubscribing from marketing emails does not affect transactional communications related to your Account or subscription.
8.1.6 Right to Withdraw Consent
Where we process your data based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
8.2 How to Exercise Your Rights
To exercise any of the rights described in this Section, contact us at privacy@bieldfish.com with the subject line "Privacy Rights Request." To protect your privacy, we will verify your identity before processing your request. We will respond to all verified requests within 30 days, or within the shorter timeframe required by applicable law. If we need additional time, we will notify you within the initial 30-day period and provide an estimated completion date.
We will not discriminate against you for exercising any of your privacy rights.
8.3 California Residents — See Section 14
California residents have additional rights under the CCPA/CPRA. See Section 14 for the California-specific disclosures required by law.
8.4 European Users — GDPR Rights
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following additional rights under GDPR:
Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances, such as while a correction request is pending.
Right to Object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds.
Right to Avoid Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. Bield does not make any such automated decisions about users.
Right to Lodge a Complaint: You have the right to lodge a complaint with the supervisory authority in your country of residence. In the EU, supervisory authorities are listed at edpb.europa.eu/about-edpb/about-edpb/members_en.
9. Children's Privacy
9.1 Age Restriction
The Services are not directed to children under the age of 13 and we do not knowingly collect personal information from children under 13. The Services are not intended for children under 13, and creating an Account requires affirmative representation that you are at least 13 years of age (or that a parent or guardian has consented on your behalf).
9.2 Discovery of Child Data
If we discover or are notified that we have collected personal information from a child under the age of 13 without verifiable parental consent, we will promptly delete that information and the associated Account. If you believe we have collected data from a child under 13, please contact us at privacy@bieldfish.com.
9.3 Parental Rights
Parents or legal guardians of minor users may contact us at privacy@bieldfish.com to: (a) review the personal information collected from their minor child; (b) request deletion of that information; or (c) request that we discontinue collecting information from their minor child.
10. International Data Transfers
10.1 Where Your Data Is Stored
Your personal data is primarily stored on servers operated by Supabase, Inc. in the United States. Website data may be processed through Vercel's global CDN infrastructure. Analytics data is processed by Plausible Analytics (or comparable provider), which may store data in the European Union.
10.2 Cross-Border Data Transfers
If you access the Services from outside the United States, your personal data is transferred to and processed in the United States, which may have different data protection laws than your country of residence. We implement the following safeguards for international data transfers:
Standard Contractual Clauses: For transfers of personal data from the European Economic Area, United Kingdom, or Switzerland to the United States, we rely on European Commission-approved Standard Contractual Clauses (SCCs) and equivalent mechanisms.
Adequacy Decisions: Where the European Commission has issued an adequacy decision for the destination country, transfers may be made on that basis.
Contractual Safeguards: We require our service providers to maintain appropriate technical and organizational safeguards for personal data transferred to them.
10.3 Your Choices
If you do not wish to have your data transferred to and processed in the United States, you should not use the Services. We cannot offer geographically limited processing at this time.
11. Feature-Specific Privacy Notices
11.1 GPS Location Tracking
What is captured: Your precise GPS coordinates are captured each time you initiate a logging event (observation, catch, or farm record) if you have granted location permission.
Why we capture it: Precise location is fundamental to the Services. Stand performance, spot performance, and field productivity analysis requires accurate GPS coordinates. Location is also used to auto-detect your proximity to saved locations.
When location is accessed: Only when you are actively using the application in the foreground and have initiated a logging action, or when the proximity auto-detect feature is active. We do not access your location in the background.
EXIF data in photos: Photographs taken with your device camera may contain embedded GPS coordinates in EXIF metadata. When you upload photos to the Services, EXIF location data is stored with the photo as part of your User Content.
Your control: Revoke location permission in your device OS settings at any time. Without location permission, you can still use the Services but must manually select your location during logging, and the proximity auto-detect feature will be unavailable.
Who sees your location: Only you. Your hunting locations, fishing spots, and field locations are never shared with other users, third parties, or Bield employees for any purpose other than providing the Services to you.
11.2 AI Photo Identification (Bield Fish and Bield Farm)
What happens: When you use the AI photo identification feature, the photograph you capture or select is transmitted over an encrypted connection to Anthropic's Claude API for processing. Anthropic returns an identification result, which we display to you and store as part of your record.
What Anthropic receives: The photograph and a request for identification. We do not transmit your name, Account information, or other personal data to Anthropic in connection with this request.
Anthropic's data practices: Per Anthropic's API usage policies, Anthropic does not use data submitted through their API to train their models, and they do not retain API inputs beyond what is needed to process the request. We encourage you to review Anthropic's privacy policy at anthropic.com/privacy for current information.
Free Tier limits: Free Tier users are limited to three lifetime AI photo identifications per application. Pro Subscribers have unlimited identifications.
Your control: The AI photo identification feature is entirely optional. You are never required to submit a photo to use the Services.
11.3 Voice Notes and Audio Recording
What is captured: If you choose to use the voice note feature, the application accesses your device microphone to record your voice. The audio is processed by speech recognition software to produce a text transcript.
Processing: Audio transcription may occur on-device (using operating system speech recognition capabilities) or may involve transmission to a speech processing service, depending on your device and operating system configuration.
Storage: The text transcript of your voice note is stored as part of the associated User Content record. Audio files are retained for 90 days after creation, after which the transcript remains but the audio file is deleted.
Your control: Microphone permission can be revoked in your device OS settings at any time. Without microphone permission, the voice note feature is unavailable, but all other features function normally.
11.4 Property Boundaries and Field Boundaries
What is captured: When you draw a property boundary (Bield Hunt), water body boundary (Bield Fish), or field boundary (Bield Farm) on the map, we store the boundary as geographic coordinate data (GeoJSON polygon or line) associated with your Account.
Sensitivity: We recognize that property and field boundaries reveal specific information about land ownership, land use, and farming operations. This data is among the most sensitive User Content in the Services.
Privacy protections:
- Property, water body, and field boundaries are strictly private to your Account.
- This data is never displayed to other users.
- This data is never shared with any third party, including landowners, neighbors, government agencies, or agricultural companies.
- This data is never used in aggregated form in any way that could reveal the location of a specific user's land.
11.5 Farm Financial Data (Bield Farm)
What is captured: If you use the financial tracking feature in Bield Farm, we store income and expense records you enter by enterprise category, including amounts, dates, categories, and descriptions.
Sensitivity: Financial records about your farming operation are highly sensitive commercial information.
Privacy protections:
- Farm financial data is strictly private to your Account.
- This data is never shared with any third party, including tax authorities, banks, lenders, insurance companies, agricultural lenders, or government agencies.
- This data is not used for any credit or financial assessment.
- This data is stored with the same encryption as all other User Content.
Important: Bield's financial tracking feature is not a system of record for tax reporting, regulatory compliance, or legal financial documentation. You remain solely responsible for maintaining appropriate financial records for all legal and compliance purposes.
11.6 Livestock and Animal Records (Bield Farm)
What is captured: If you use the livestock features in Bield Farm, we store animal records including species, breed, individual identification, health records, breeding records, and production data.
Sensitivity: Livestock records may reveal commercially sensitive information about your herd, flock, or other animal operations.
Privacy protections:
- Livestock and animal records are strictly private to your Account.
- This data is never shared with government livestock agencies, veterinary licensing boards, pharmaceutical companies, livestock markets, or any other third party.
- Health and treatment records do not constitute veterinary records for regulatory purposes.
12. Third-Party Links and Services
The Bield websites and applications may contain links to or integrations with third-party websites and services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party service you access through the Services. We are not responsible for the privacy practices or content of third-party websites.
13. Cookies and Tracking Technologies
13.1 What We Use
Our websites use the following tracking technologies:
Session cookies: Essential cookies placed by our hosting infrastructure (Vercel) to maintain your authenticated session. These are strictly necessary and cannot be disabled without breaking site functionality.
Analytics: We use Plausible Analytics or a comparable privacy-preserving analytics service that operates without cookies and does not collect personal identifiers. This service collects aggregated, anonymized page view data to help us understand how our websites are used.
13.2 What We Do Not Use
We do not use:
- Advertising cookies or tracking pixels
- Third-party retargeting technologies
- Social media sharing buttons that track your activity
- Heat mapping or session recording tools that capture personal data
- Cross-site tracking technologies
13.3 Cookie Consent
In jurisdictions where cookie consent is required by law (including EU member states under the ePrivacy Directive), a cookie consent banner is displayed. Only essential session cookies are placed before consent is given.
13.4 Do Not Track
Some browsers send "Do Not Track" (DNT) signals. Because we already use privacy-preserving analytics that do not track individual users across sessions, our analytics practices are consistent with DNT principles regardless of your browser setting.
14. California Residents — CCPA/CPRA
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information. This Section describes those rights and how to exercise them.
14.1 Categories of Personal Information We Collect
We collect the following categories of personal information as defined by the CCPA:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Email address, username, device identifier | Yes |
| Personal information (Cal. Civ. Code § 1798.80) | Name, email | Yes |
| Characteristics of protected classes | None | No |
| Commercial information | Subscription status, purchase history | Yes |
| Biometric information | None | No |
| Internet/network activity | Usage information, crash logs | Yes |
| Geolocation data | Precise GPS coordinates (User Content) | Yes |
| Sensory data | Photographs, audio recordings | Yes |
| Professional/employment information | None | No |
| Education information | None | No |
| Inferences | None — we do not create consumer profiles | No |
| Sensitive personal information | Precise geolocation | Yes |
14.2 Sources of Personal Information
We collect personal information from: you (directly through the Services), Apple and Google (authentication), Apple, Google, and Lemon Squeezy (payments), and automated collection as described in Section 2.2.
14.3 Purposes for Collecting Personal Information
We collect personal information for the purposes described in Section 3 of this Privacy Policy.
14.4 Categories of Third Parties With Whom We Share Information
We share personal information with the service providers listed in Section 5.1 for the purposes described therein. We do not share personal information with third parties for their own marketing or commercial purposes.
14.5 Your CCPA/CPRA Rights
Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it. This Policy provides that information. You may also make a verifiable consumer request for this information.
Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions. Account deletion through the app is the most direct way to exercise this right. See Section 6.2.
Right to Correct: You have the right to request correction of inaccurate personal information.
Right to Opt Out of Sale or Sharing: We do not sell personal information and we do not share personal information for cross-context behavioral advertising. Because we do not engage in these activities, there is nothing to opt out of. A "Do Not Sell or Share My Personal Information" link is provided on our websites as required by law, and exercising this right will have no adverse effect on your use of the Services.
Right to Limit Use of Sensitive Personal Information: Precise geolocation data qualifies as sensitive personal information under CPRA. We use precise geolocation only to provide the core features of the Services (logging events and proximity detection) and do not use it for any inferred purpose, advertising, or profiling. You may limit our use of precise geolocation by revoking location permission in your device settings, with the feature limitations described in Section 11.1.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you the Services, charge you different prices, or provide a lower quality of service because you exercised your rights.
14.6 How to Submit a CCPA Request
To submit a verifiable consumer request, contact us at privacy@bieldfish.com with the subject line "California Privacy Rights Request." We may need to verify your identity before processing your request. We will respond within 45 days of receiving a verifiable request, and may extend this period by an additional 45 days with notice if the extension is necessary.
14.7 Authorized Agents
California residents may designate an authorized agent to submit requests on their behalf. We may require written authorization or a power of attorney and may verify the consumer's identity directly before processing the request.
14.8 Shine the Light
California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for direct marketing purposes, so this law does not apply to us in this context.
15. App Store and Play Store Disclosures
15.1 Apple App Store Privacy Nutrition Labels
The following categories of data are disclosed in the App Store Privacy Nutrition Labels for Bield applications. This information reflects the data practices described in this Privacy Policy.
Data Linked to You:
- Contact Info — Email Address (Account registration)
- Location — Precise Location (User Content logging, GPS features)
- User Content — Photos, Audio Data (photo attachment, voice notes)
- Identifiers — User ID (Account management)
- Usage Data — Product Interaction (feature usage analytics)
- Diagnostics — Crash Data, Performance Data (Sentry crash reporting)
Data Not Linked to You:
- Diagnostics — aggregated, anonymized analytics data
Data Not Collected:
- Financial Info (payment handled by Apple/Lemon Squeezy; we do not receive card data)
- Health and Fitness
- Contacts
- Browsing History
- Search History
- Sensitive Info
15.2 Google Play Data Safety
The Google Play Data Safety disclosure for Bield applications reflects the same data practices described in this Privacy Policy. Key disclosures include:
- Location data: Precise location, used for App Functionality, collected only when app is in use
- Photos and videos: Photos submitted for AI identification
- Account info: Email address and username
- App activity: Crash logs and app interactions
- Data encrypted in transit: Yes
- You can request data deletion: Yes — through in-app Account deletion or by contacting privacy@bieldfish.com
16. Changes to This Policy
16.1 How We Notify You of Changes
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by: (a) sending an email to your registered address; and (b) posting a prominent notice within the Services and on our websites. We will provide at least 30 days advance notice before material changes take effect.
Material changes include, but are not limited to: new categories of data collected, new purposes for using data, new categories of third parties with whom data is shared, and material changes to your rights.
16.2 Your Choices After Changes
If you do not agree with material changes to this Privacy Policy, you may delete your Account before the changes take effect. Continued use of the Services after the effective date of changes constitutes your acceptance of the revised Policy.
16.3 Version History
We maintain a record of prior versions of this Privacy Policy and will make prior versions available upon request by contacting privacy@bieldfish.com.
17. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Privacy Inquiries: Email: privacy@bieldfish.com Subject line for rights requests: "Privacy Rights Request"
Bield — Bield Hunt: support@bieldhunt.com
Bield — Bield Fish: support@bieldfish.com
Bield — Bield Farm: support@bieldfarm.com
Mailing Address: CedarRow Ventures 405 E Laburnum Ave, Ste 3 #558, Richmond, VA 23222
We will respond to all privacy inquiries within 30 days. For requests that require longer to process, we will acknowledge receipt within 10 business days and provide an expected response date.
For GDPR-specific matters, you may also contact us at privacy@bieldfish.com and identify your request as a GDPR inquiry. We will ensure your request is routed to personnel with GDPR expertise.
This Privacy Policy was last updated on April 29, 2026. For the history of material changes to this Policy, contact privacy@bieldfish.com.