Last Updated: November 2, 2026

Privacy Policy

Effective Date: October 23, 2026

Last Updated: November 2, 2026

---

1. Introduction

BuildLog.diy ("BuildLog.diy," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website at buildlog.diy (the "Site"), API, and any related services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the collection and use of information in accordance with this policy.

---

2. Information We Collect

2.1 Information You Provide

Account Information:
- Email address
- Password (hashed and stored securely)
- Display name
- Profile picture (if provided via third-party sign-in)

Third-Party Sign-In Data:
When you sign in with Apple or Google, you authorize those providers to share certain information with us:
- Apple: Your name and email address (if you choose to share)
- Google: Your name, email address, and profile picture

User Content:
- Project names, descriptions, and status
- Task names, descriptions, and completion status
- Work session notes and durations
- Materials and cost information
- Photos and videos uploaded to the Service
- Time-lapse videos generated from your session photos

Beta Waitlist:
If you sign up to beta test BuildLog.diy at [buildlog.diy/beta](https://buildlog.diy/beta), we collect:
- The email address you use for the App Store or Google Play
- Which phone you use (iPhone, Android or both)
- Your country, so we know when the beta is open where you live
- Your name and a short note about what you build, if you choose to give them

Communications:
- Messages you send to us
- Feedback and support requests

2.2 Information Collected Automatically

Device Information:
- Device type and model
- Operating system and version
- Unique device identifiers
- App version

Usage Information:
- Features accessed within the Service
- Session duration and frequency
- Crash logs and diagnostic data
- Network connectivity status

Log Data:
- IP address (stored temporarily for security)
- Browser type and version
- Referring/exit pages
- Date and time of access

Note: We do not store personally identifiable information (PII) in our server logs.

2.3 Information from Third Parties

We may receive information from:
- Apple (when you sign in with Apple ID)
- Google (when you sign in with Google)
- Analytics providers (aggregated, non-identifying data)

---

3. How We Use Your Information

We use your information to:

Provide the Service:
- Create and manage your account
- Authenticate your identity
- Process sign-in via email/password or third-party providers
- Sync your data across devices
- Generate time-lapse videos from your photos

Run Our Beta Program:
- Keep the beta waitlist and invite testers in batches, in the countries where the beta is open
- Send your beta invite through Apple TestFlight or Google Play
- Send you beta updates and ask for your feedback

Improve the Service:
- Monitor and analyze usage patterns
- Fix bugs and improve performance
- Develop new features
- Respond to support requests

Security:
- Detect and prevent unauthorized access
- Identify and address security vulnerabilities
- Enforce our Terms of Service

Communication:
- Send service-related notifications (account changes, security alerts)
- Respond to your inquiries
- Send marketing communications (with your consent, where required)

Legal Compliance:
- Comply with applicable laws and regulations
- Respond to valid legal requests

---

4. Data Security

We take security seriously and use industry-standard measures to protect your data:

4.1 Encryption


- All data sent between the BuildLog.diy app or website and our servers is encrypted
- Your personal details (such as your email address, username and display name) are encrypted when stored on our servers
- We never store your password itself, only a secure one-way hash of it

4.2 Access to Your Data


- Your projects, photos and videos are only shown to your signed-in account
- On the Free plan, time-lapse videos stay on your device and are not uploaded to our servers. Photos are backed up within the Free plan's storage allowance
- Our support team can see account details such as your email address, plan and storage usage when helping you

4.3 Account Protection


- Sign-in sessions expire automatically, and signing out ends your session
- We limit repeated sign-in attempts to protect against password guessing

---

5. Data Storage and Retention

5.1 Local Storage


- BuildLog.diy stores data locally on your device using SQLite
- You are responsible for backing up your local data
- Uninstalling the app may result in permanent data loss if not synced to the cloud

5.2 Cloud Storage


- When cloud sync is enabled, your data is stored on our secure servers
- Photos and videos count toward your storage quota
- Storage usage is tracked and metered

5.3 Data Retention


Data TypeRetention Period

Account dataUntil account deletion

Project/task/session dataUntil account deletion

Photos and videosUntil account deletion or manual deletion. If a paid plan ends, cloud copies over your plan's storage are removed after 60 days' notice (see our Terms of Service)

Server logs30 days (rotated)

Crash logs90 days

5.4 Data Deletion


You can delete your account online by signing in at [https://buildlog.diy/account](https://buildlog.diy/account) and selecting Delete My Account. Once you confirm the deletion, we automatically begin deleting your account and associated data.

When you delete your account:
- Your account and profile data are deleted within 30 days
- Project, task, and session data are permanently deleted
- Uploaded media is removed within 30 days
- Some data may be retained longer if required by law

---

6. Third-Party Services

6.1 Authentication Providers

Apple Sign-In
- Privacy Policy: [https://www.apple.com/legal/privacy/](https://www.apple.com/legal/privacy/)
- Data collected by Apple is governed by Apple's privacy policy

Google Sign-In
- Privacy Policy: [https://policies.google.com/privacy/](https://policies.google.com/privacy/)
- Data collected by Google is governed by Google's privacy policy

6.2 Analytics

We may use third-party analytics services to understand how users interact with our Service. These services may collect:
- App usage statistics
- Feature engagement metrics
- Device and browser information

Analytics data is aggregated and does not personally identify you.

6.3 Cloud Infrastructure

Your data may be stored on cloud infrastructure operated by third-party providers. These providers are selected for their security and compliance standards.

6.4 Beta Testing

If you join the beta waitlist:
- Your sign-up is stored on our servers, and your email address is encrypted when stored
- Our team is notified of new sign-ups in a private, team-only channel on Discord, which includes the details you entered
- When we invite you, we give your email address to Apple (TestFlight) or Google (Google Play) so they can send your invite and let you install the beta. Their use of it is governed by their privacy policies: [Apple](https://www.apple.com/legal/privacy/) and [Google](https://policies.google.com/privacy/)

6.5 Third-Party Links

Our Service may contain links to external websites. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies.

---

7. Cookies and Tracking Technologies

7.1 Cookies

We use minimal cookies for:
- Authentication (session management)
- Security (CSRF protection)
- Remembering your preferences

7.2 Mobile App Tracking

Our mobile app may use:
- Local storage for caching and offline functionality
- Device identifiers for analytics and crash reporting
- Network state monitoring for sync functionality

7.3 Do Not Track

We do not currently respond to "Do Not Track" browser signals. We use essential cookies and tracking that is necessary for the Service to function.

---

8. Your Rights

8.1 Access

You have the right to access your personal data. You can view your account information and data within the BuildLog.diy app or website.

8.2 Correction

You have the right to correct inaccurate or incomplete data. You can update your profile information and edit your projects, tasks, and sessions within the app.

8.3 Deletion

You have the right to delete your account and associated data:
- Through the website: Sign in at [https://buildlog.diy/account](https://buildlog.diy/account) and select Delete My Account. Once confirmed, deletion of your account and associated data begins automatically.
- Through the app: Settings → Account → Delete Account
- By contacting us: [email protected]

To leave the beta waitlist, email [email protected] and we will remove your sign-up.

8.4 Portability

You can export your data in a commonly used format. Contact us for data export requests.

8.5 Restriction

You may request that we restrict processing of your data in certain circumstances. Contact us to exercise this right.

8.6 Objection

You may object to our use of your data for marketing purposes. You can opt out of marketing emails via the unsubscribe link in each email.

8.7 lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with your local data protection authority.

---

9. Children's Privacy

BuildLog.diy is not intended for use by children under 13 years of age.

We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will take steps to delete that information.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected].

---

10. International Data Transfers

If you are located outside the United States, your data will be transferred to and processed in the United States, where BuildLog.diy operates.

By using the Service, you consent to the transfer of your data to the United States and other countries, which may have different data protection laws than your country.

---

11. Data Sharing

11.1 We Do Not Sell Your Data

BuildLog.diy does not sell, rent, or trade your personal information to third parties.

11.2 Situations Where We Share Data

We may share your information:

Beta waitlist sign-upsUntil the beta program ends, or sooner if you ask us to remove you

ReasonInformation SharedRecipient

Service providersMinimal necessaryCloud infrastructure, analytics

Legal requirementsAs requiredGovernment or law enforcement

Protection of rightsAs necessaryLegal counsel, authorities

11.3 Service Providers

We share data with trusted service providers who:
- Host and maintain our infrastructure
- Provide analytics services
- Process payments (if applicable)
- Run our beta program (Apple TestFlight, Google Play, and our private team channel on Discord)

These providers are contractually obligated to protect your data and use it only to provide services to us.

---

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

- Right to Know: Request disclosure of personal information collected, used, disclosed, or sold
- Right to Delete: Request deletion of personal information
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt Out: Opt out of the sale or sharing of personal information
- Right to Limit Use: Limit use of sensitive personal information
- Right to Non-Discrimination: Not be discriminated against for exercising your rights

To exercise these rights, contact us at [email protected] or through the app settings.

12.1 "Shine the Light" Law

California residents may request information about our disclosure of personal information to third parties for marketing purposes. Contact us to make such a request.

---

13. European Economic Area (EEA) Rights (GDPR)

If you are located in the EEA, you have the following rights under the General Data Protection Regulation (GDPR):

- Right of Access: Obtain confirmation of whether we process your data and access your data
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent where processing is based on consent

13.1 Legal Basis for Processing

Business transfersAll dataAcquirer in merger/acquisition

Processing PurposeLegal Basis

Account creation and authenticationContract performance

Providing the ServiceContract performance

Security and fraud preventionLegitimate interests

Analytics and improvementsLegitimate interests

Marketing communicationsConsent

Beta waitlist and invitesConsent

13.2 Data Protection Officer

For GDPR-related inquiries, contact us at [email protected].

13.3 Supervisory Authority

You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.

---

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

- We will update the "Effective Date" and "Last Updated" at the top of this policy
- We will post the revised policy on the Site
- For material changes, we will provide notice via email or in-app notification
- We will give you 30 days' prior notice for significant changes

Your continued use of the Service after changes take effect constitutes acceptance of the revised Privacy Policy.

---

15. Data Security Incidents

15.1 Incident Response

In the event of a data breach that affects your personal information:
- We will notify affected users within 72 hours of becoming aware of the breach
- We will describe the nature of the breach and recommend steps to protect yourself
- We will report the incident to relevant authorities as required by law

15.2 What We Cannot Guarantee

While we implement robust security measures, no system is completely secure. We cannot guarantee 100% security of your data. You use the Service at your own risk.

---

16. Contact Information

For questions, concerns, or requests regarding this Privacy Policy, contact us:

BuildLog.diy
Email: [email protected]
Website: https://buildlog.diy

For data subject requests (access, deletion, correction), please include:
- Your account email address
- A description of your request
- Verification of your identity

---

17. Related Policies

For complete information about your rights and obligations when using BuildLog.diy, please review:

- [Terms of Service](/terms) — governs your use of the Service
- [Cookie Policy](/cookies) — information about our use of cookies (if applicable)

---

*Thank you for trusting BuildLog.diy with your DIY project tracking needs.*

*Copyright © 2026 BuildLog.diy. All rights reserved.*

Legal complianceLegal obligation