Privacy policy

Version 1.0 · effective 3 November 2026.

This is a translation. The authoritative text of this Privacy policy is the Serbian original; if this translation differs from it, the Serbian original prevails. The Serbian original is available at: https://www.mybeediary.com/sr/privatnost-aplikacije/

1. Controller

MCo d.o.o., Kraljevačkih žrtava 5, Beograd, Serbia, tax identification number (PIB) 106639869, company registration number (MB) 20649992.

Contact for all questions about your data: jovan@mco.rs

2. What data we collect and why

About your account. Your email address and password — without them you cannot sign in. Your first and last name only if you enter them; they are optional. Your language and script, so that the app speaks your language. A profile picture only if you set one (your own or one of our icons): we store it on the server without location data, it is visible to the team members of the accounts you belong to, it does not use up your Storage, and it is gone when you remove it or delete your account.

We do not store your password. Only its bcrypt hash is stored, from which the password cannot be recovered.

What you enter yourself. Apiaries with their name, address and geographic coordinates; hives, colonies, inspections, treatments, honey extraction, feeding, stock, income and expenses. In addition, photos, documents and voice notes that you add yourself — see section 4.

These are data about your beekeeping. Apiary coordinates are location data and we treat them as such: they are used to show the apiary on the map and for the weather forecast. For the forecast, our server sends them, rounded to about 1 km, to the Norwegian Meteorological Institute (MET Norway) and, if it does not respond, to the Open-Meteo service. Your IP address is not sent to them. App versions earlier than 1.0.0+128 send the exact coordinates and the phone’s IP address directly to Open-Meteo until they are updated. When the map around an apiary is on screen, OpenStreetMap can tell from the map tiles which area is shown. On their way to the server, the coordinates pass through Cloudflare. Apart from these recipients listed in section 5, we do not give them to anyone.

Problem reports. When you report a bug or make a suggestion (by shaking the phone, from the bar shown after an error, or from “More”), we send along with your message the screen you were on, the app version, the phone model and operating system, the app’s activity log and, if you leave it switched on, a screenshot. The screenshot may contain anything that was on the screen at the time (apiary names, notes) — which is why you can remove it before sending. We keep the report in order to fix the problem and reply to you; it is also emailed to support. Shaking only opens the report; it never sends it by itself, and it can be switched off in the settings.

Technical data. On every sign-in attempt, and when you request a new password or an address confirmation, we record a hash of the IP address and a hash of the email address. When you create an account, we record only a hash of the IP address. When you send feedback, we record a hash of the IP address and a hash of the account identifier. Each record also includes the time. This is how we limit the number of attempts and protect your account against break-ins. We delete the record of a successful sign-in immediately; if it was shortly preceded by failed attempts, the time of the successful sign-in remains recorded with them. We keep other records for no longer than 12 months, in order to monitor abuse — attempts to break into accounts, sending mail to other people’s addresses and fake registrations — and then delete them. When you delete your account, we also delete the records linked to your email address and account; records by IP address remain until the retention period expires.

Language suggestion. To suggest a language to you, the app asks the server which country the request comes from. The country (a two-letter code, e.g. RS) is determined from the IP address by Cloudflare; the server does not record it, and it is stored only on your device. For the same purpose the app also reads the time zone of the device (phone or browser) and, on Android, the country of the SIM card — for the language suggestion, this does not leave the device.

“Ask the diary” counter. To know how often the search fails to understand a question, and in which language, the app counts two things: how many questions you have asked in “Ask the diary” and how many times the answer remained “I didn’t understand”. It sends the server only those two numbers, together with the day, the app language and the account you are working in. The text of your questions does not reach us — not a single word. If you dictate a question, the same applies to the audio as to dictating a note (section 5).

3. What we do NOT collect

We do not collect your contacts. We do not track your movements. We do not see your photo gallery — only the pictures you choose yourself. We do not use advertising identifiers. We have no analytics of your behaviour in the app, apart from the “Ask the diary” counter described in section 2, which carries only two numbers. We do not profile you and we do not make automated decisions about you. We do not listen through the microphone in the background: it works only while you keep the dictation or recording button switched on; dictation audio does not reach us (section 5), and a voice note is sent to our server only when you save it yourself with an entry (section 4).

4. Photos, documents and voice notes

What and why. You can add a photo to an inspection, treatment, honey extraction, feeding, expense (receipt) or to the apiary itself. You add farm documents — decisions, registrations, warranties, contracts — in “My profile”, as a PDF or an image. You can add a voice note (a recording of up to 3 minutes, at most 3 per entry) to an inspection, treatment, honey extraction or feeding, so that you can listen to it later. We store them so that you have them at hand on every device. We do nothing else with them.

Where from. From the camera or the gallery. The gallery is opened by the operating system, so the app receives only the pictures you select. For receipts and documents there is also a document scanner, and the app reads the QR code from a picture of a receipt. Scanning and QR code reading are done by the phone itself. On Android, the scanner is provided by Google Play services, and on iPhone by Apple. On Android, the QR code is read by Google’s ML Kit tool, built into the app, and on iPhone by Apple. The content of the picture or document stays on the phone. Google, as the maker of these tools, receives technical data about how the tool works: device model and operating system, app version, an installation identifier, performance and errors (section 5). A voice note is recorded by the phone’s microphone only while you keep the “Record” button switched on; nothing is recorded in the background, and a recording shorter than one second is not kept.

Location is removed. Phones often write into a photo where it was taken. Our server deletes that location as soon as it receives the photo, before storing it. The same applies to a document sent as a JPEG. Other data in the photo remain: the date and time it was taken, the make and model of the phone, the camera settings and, if the phone wrote them, the serial number or the name of the device owner. Anyone who can see the photo receives these data together with it. A document captured with the scanner in the app does not, as a rule, carry such data.

Where the location remains. The phone on which the photo was taken keeps its original, with the location. The server cleans only the copy it holds. On its way to the server, the photo travels with the location, through Cloudflare (section 5). We do not modify documents in PDF or PNG format: if such a file contains a location, an author or a date, that remains. The voice note recorder does not write a location, and the server rejects a recording that contains one.

Where they are stored. On our server (section 6) and on your device. Photos, documents and recordings that you have opened once also remain on the phone, so that you can see and hear them without a signal.

Who can see them. A photo attached to an apiary or an entry can be seen by the account owner and by the helpers who can see that apiary. A picture of a receipt can be seen by the owner and by the helpers who have access to Profit. Farm documents can be seen only by the account owner, by no helper. A photo can be deleted by anyone who can see it. A voice note can be heard by anyone who can see that apiary, as with photos, and can be deleted by anyone who can hear it.

When you narrow a helper’s access, the photos they may no longer see disappear from their phone at the next synchronisation. When you remove them from the team, what they have already downloaded may remain on their phone.

No one analyses them. We currently do not send photos, documents or voice notes to anyone for analysis, neither to people nor to artificial intelligence. The server does not interpret their content: it only scans them with an antivirus program, removes the location from photos and reads nothing from a recording except its duration. We do not listen to recordings. If we ever introduce analysis (for example converting a recording to text), it will be only with your separate consent.

Antivirus. Every file is scanned by an antivirus program when it is received. The program runs on our own machine, alongside the server, and does not send the file anywhere.

Fiscal receipt from a QR code. The phone sends our server only the address contained in the QR code. From that address, the server retrieves the receipt from the tax authority. We store the seller, the amount, the date and the full text of the receipt. If you gave your personal identification number (JMBG) or tax identification number (PIB) at the till, it is also in that text. It can be seen by anyone who can see Profit.

How long they are kept. Until you delete them, or until you delete the hive, apiary, expense or account to which they belong. They do not disappear on their own.

When you delete a photo, document or recording, the file is removed from the server immediately and disappears from the backups within a further 60 days. A short record without the file remains on the server.

For a photo, this record keeps when the photo was added, who added it, its size, its dimensions, what it was attached to and a fingerprint of its content (sha256). The fingerprint makes it possible to establish that this particular photo was uploaded. The record reaches the devices of everyone who could see the photo, so that the photo disappears from them as well.

For a document, the record keeps when it was added, who added it, its size, a fingerprint of its content and its type. We delete the title together with the file. This record is not shown to anyone.

For a voice note, the record keeps when it was added, who added it, its size, its duration, what it was attached to and a fingerprint of its content. The record reaches the devices of everyone who could hear it, so that it disappears from them as well.

All these records are deleted together with the account.

A fiscal receipt is not deleted separately, not even when you delete the expense. It remains for as long as the account exists, and you may request its deletion (section 8).

When you delete your account, all its photos, documents and voice notes are deleted as well (section 7). Photos and recordings that you added as a helper to someone else’s account remain with that account, no longer linked to your account. Data that your phone wrote into a photo remain in it.

When you sign out, the app deletes the account data from the phone, including photos, documents and recordings. Exception: if there is anything on the phone that has not yet been sent, everything remains, so that no work is lost.

Export. The data export (section 8) contains only a list of photos, documents and recordings, not the files themselves. You can share or print a PDF document. If you need all your photos, documents and recordings, send a request (section 8).

Other people’s data are your responsibility. If a photo shows someone’s face, a recording contains someone else’s voice, or a document contains the name of another person (for example the other party to a contract), you are responsible for that. Upload only what you need for beekeeping. Do not send personal identification numbers (JMBG), bank account numbers or health data unless you need them — cover them before taking the picture. Do not photograph or record people who do not want that.

5. Who we share data with

With no one for advertising purposes. Data are shared only with those who help us run and improve the service:

OpenStreetMap sees your IP address and which part of the map you are viewing, because the map tiles on the location screen come from there.

MET Norway (the Norwegian Meteorological Institute) provides the weather forecast for the apiary. Our server sends it the apiary location rounded to about 1 km; it does not see your IP address. Open-Meteo receives the same, only when MET Norway does not respond. Older versions of the app (earlier than 1.0.0+128) still send the exact coordinates and the phone’s IP address directly to Open-Meteo until they are updated. If you tap “Data: MET Norway” in the forecast details, their forecast for that place opens on yr.no (location rounded to about 1 km); that is a visit to their website, so they then also see your IP address.

The email provider sees the address and content of the messages we send you — address confirmation, new password, invitation, account deletion notice — and of the feedback you send us from the app, with a screenshot if you left it in.

Sentry receives error and stability reports from the app and the server, so that we can see and fix faults. A report contains a description of the error and technical data: app version, device model and operating system, language and time zone. We do not send performance measurements. The server does not include the content of the requests you sent (password, email, entries) in the report. Like any server, Sentry also sees the IP address from which the report arrives. Its servers are in Germany (European Union).

Google receives, from the scanning and QR code reading tools, technical data about how the tool works (section 4). It does not receive the content of the picture or document.

Speech recogniser (Google or Apple). When you dictate a note or a question in “Ask the diary”, the audio is processed by your phone’s speech recogniser. If the phone can handle that language on its own, the audio stays on the phone. If it cannot, Android sends it to Google and iPhone to Apple, and they return the text; in that case they see your voice and IP address, under their own rules and the settings of your account with them. We do not receive or store the audio — only the text of a note that you save yourself reaches us, and a dictated question does not reach us at all. The microphone works only while the button is switched on; before your first dictation, the app tells you this and only then asks for microphone permission.

The hosting provider technically hosts the server on which the app runs.

Cloudflare sits in front of the server (protection and delivery): it sees your IP address and the content of the traffic in both directions, including photos, documents and voice notes. It sees photos while they still contain the location, because the server removes it only once it receives them. All newer versions of the app go through it; the oldest connect directly to the server.

The tax authority of the country in which the receipt was issued (Serbia, Montenegro or Republika Srpska) receives from our server the address of the fiscal receipt whose QR code you scanned, so that the server can retrieve the receipt. It receives nothing about you.

Outside Serbia. OpenStreetMap, MET Norway, Open-Meteo, Sentry, Google, Apple and Cloudflare are not in Serbia, so the data they receive leave the country. For each of them: [ZEMLJA I OSNOV PRENOSA]. You may request a copy of the safeguards protecting your data with them at jovan@mco.rs.

If we introduce a new recipient, for example for push notifications, we will add it to this list beforehand.

Helpers whom you invite to your team see what you have allowed them to see. You are responsible for that choice.

6. Where the data are stored

On a server in Serbia. Photos, documents and voice notes are files on a disk in the same local network as the server. A copy of the data you have entered is also kept on your device, so that the app works without a signal.

If you have backup switched on on your phone (Google or iCloud), the operating system may include the app’s data in it, with photos, documents and recordings. That backup is in your Google or Apple account, not with us.

7. How long we keep data

Account and diary — for as long as your account exists.

Photos, documents and voice notes — until you delete them, but no longer than the account they belong to exists (section 4).

After a request to delete the account — the account is switched off immediately and no one can see it any longer, not even helpers. What helpers have already downloaded to their phones may remain there. The account is permanently deleted after 30 days, together with photos and documents; until then you can restore it by signing in. If you do not want to wait, you can also choose immediate deletion. Data disappear from the backups as the backups are rotated, within a further 60 days at the latest.

Technical records from section 2 (sign-ins, mail requests, account creation, feedback) — no longer than 12 months, in order to monitor abuse; the record of a successful sign-in is deleted immediately; records linked to the account are deleted together with the account.

Problem reports — the message for as long as it is needed for the fix; the screenshot for no longer than 90 days; the screenshot and the activity log are also deleted when you delete your account, while the message remains without any link to you.

The latest forecast for the apiary (rounded location and forecast data) — on our server for no longer than 14 days, so that it can be shown even when the source does not respond; it is also deleted together with the account.

The “Ask the diary” counter (two numbers per day and language) — no longer than 12 months; it is also deleted together with the account.

Data that the law requires us to keep, for example our subscription invoices — for as long as the law requires.

8. Your rights

You have the right to see which data we hold about you, to correct inaccurate data, to delete your account and data, to export your data in a readable format, and to restrict processing or object to it.

Data export. The account owner downloads the account data themselves, as CSV tables in a single ZIP file: “More” → “Report and export” → “Export data”. For anything not included in the file, they send a request. In this way a helper exports only their own account; for what they have entered into someone else’s account, they send a request.

Right to object. We process some data on the basis of our legitimate interest: error reports (so that we can see and fix faults), sign-in records (protection against break-ins and monitoring of abuse), antivirus scanning (protection of the service and other users), protection against attacks through Cloudflare, and the “Ask the diary” counter (so that we can see where the search fails to understand questions). You may object to this processing specifically.

You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.

Send your request to jovan@mco.rs. We reply within 30 days.

9. Security

Passwords are stored as a bcrypt hash. The connection to the server uses HTTPS. Team invitation tokens and session renewal tokens are stored hashed. The link for a new password is not stored anywhere and is valid for one hour. As a result, even a copy of the database is not a list of usable links.

Every file is scanned by an antivirus program when it is received. Photos, documents and recordings can be downloaded only when signed in, and there are no public links to them.

Only staff who need access to the data to operate the service have such access.

10. Children

An account may be created by a person who has reached the age of 16. Younger persons may use the service only with the consent of a parent or guardian.

11. Cookies

The app does not use advertising or analytics cookies. On the web it uses only one cookie, which is necessary to keep you signed in, and the browser’s local storage, for an indication that you are signed in and for the data that the app must have even without a signal.

12. Changes

We publish changes in the app, and we also notify you of significant changes by email.