bujofy

Privacy Policy

Last updated

This Privacy Policy explains what information Bujofy collects, how we use it, who we share it with, and the choices you have. Bujofy is operated by Sandbox Labs ("we", "us", "our"). This policy applies to bujofy.com and the Bujofy app (the "Service").

The short version: we collect what we need to run your journal, we do not sell your data, and you can export or delete it whenever you want.

Information we collect

  • Account information: your name, email address, password (stored only as a secure hash), timezone, language, notification preferences, and two-factor authentication settings.
  • Your content: what you add to Bujofy, such as tasks, notes, events, subitems, collections, habits, habit logs, and reminders.
  • Billing information: Stripe collects your payment details when you subscribe. We never see or store your full card number. We keep your Stripe customer ID, plan, billing cycle, and subscription status.
  • Google Calendar data, only if you connect it: the tokens that let Bujofy access your calendar, the names of your calendars, and the title, description, and date and time of the events in the calendar you choose to sync.
  • Newsletter sign-ups, only if you subscribe: your email address, the language of the page, and where you signed up.
  • Technical information: your IP address, browser and device type, session data, server logs, and a history of changes made to your account and entries (an activity log).
  • Messages you send us: when you email support, we keep the conversation so we can help you.

How we use your information

  • To provide the Service: store and show your content, send the reminders you set up, and sync with Google Calendar if you connect it.
  • To process payments and manage your subscription.
  • To send service emails, such as email verification, password resets, reminders, billing notices, account deletion confirmations, and notices about changes to our Terms or this policy.
  • To send product news, only if you subscribed to our newsletter and confirmed your email address. Every newsletter email has an unsubscribe link.
  • To keep the Service secure and working: prevent fraud and abuse, investigate errors, and fix bugs.
  • To answer you when you contact support.
  • To meet legal obligations, such as tax and accounting rules.

We process your information to provide the Service you signed up for, for our legitimate interest in keeping it secure and working, to comply with the law, and, for the newsletter, with your consent.

We do not sell your personal information. We do not show ads, and we do not use your content for advertising. Your content is private: our team only accesses your account when you ask us for help, when we need to investigate a security or technical problem, or when the law requires it.

Google user data

Bujofy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • We use Google Calendar data only to provide the sync you turned on: showing your events in Bujofy and keeping your entries and the events in the calendar you chose up to date in both directions.
  • We do not use Google user data for advertising, we do not sell it, and we do not use it to train artificial intelligence or machine learning models.
  • People do not read your Google data unless you ask us to for support, it is needed for security, or the law requires it.
  • The tokens that give Bujofy access to your calendar are stored encrypted.
  • You can disconnect Google Calendar at any time in Settings. When you do, we revoke our access with Google. Events already copied into Bujofy stay in your journal until you delete them. You can also remove Bujofy's access from your Google Account settings.

Who we share information with

We share personal information only with the service providers that help us run Bujofy, and only what each one needs to do its job:

  • Stripe: payments, subscriptions, invoices, and billing records.
  • Google: Google Calendar sync, only if you connect your calendar.
  • Sentry: error monitoring. When something breaks, Sentry receives technical details about the error, such as the page, the browser, and the code involved.
  • Our email delivery provider: sends service emails, such as email verification, password resets, reminders, and billing notices.
  • Mailcoach: manages our newsletter list, only if you subscribe.
  • Hosting: the Bujofy app and database run on a server from our hosting provider, which we manage with Laravel Forge.

We may also share information:

  • when the law requires it, or to protect the rights, safety, and security of our users, the public, or Bujofy;
  • if Bujofy is sold or transferred to a new owner, in which case this policy keeps applying to your information;
  • with your consent.

International transfers

We and our service providers may process your information in countries other than the one where you live, including the United States. Wherever it is processed, we protect it as described in this policy.

How long we keep your information

  • Account information and your content: for as long as your account exists.
  • After you delete your account: we keep your data for 30 days in case you change your mind. Logging in during that time restores your account. After 30 days, your account and all of its content are permanently deleted.
  • Billing records: Stripe keeps invoices and billing records for as long as tax and accounting rules require.
  • Server logs and error reports: for a limited time, for security and troubleshooting.
  • Backups: deleted data may remain in backups until those backups expire.
  • Newsletter: until you unsubscribe.

Your rights and choices

  • Access and update: see and edit your profile in Settings.
  • Export: download your data as CSV files in Settings at any time while your account exists, with or without an active subscription.
  • Delete: delete your account in Settings. See "How long we keep your information" above.
  • Emails: manage reminder emails in Settings. Unsubscribe from the newsletter with the link in any newsletter email. Service emails, such as password resets and billing notices, are part of having an account.
  • Google Calendar: disconnect it in Settings at any time.

Depending on where you live, such as the European Union, the United Kingdom, Brazil, or California, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict some uses of it, and to withdraw your consent. To make any of these requests, email [email protected]. We will reply within 30 days, and we will not treat you differently for using these rights. You can also complain to your local data protection authority.

Cookies

We only use the cookies the Service needs to work: a session cookie that keeps you signed in, a security cookie that protects forms, and a "remember me" cookie if you choose to stay signed in. Your theme preference is stored in your browser. We do not use advertising or third-party analytics cookies. Stripe may set its own cookies on its checkout pages.

Security

We use encrypted connections (HTTPS), store passwords only as secure hashes, encrypt the tokens that give us access to Google Calendar, and offer two-factor authentication. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.

Children

Bujofy is not meant for anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy. The "Last updated" date at the top shows the current version. If a change is material, we will tell you by email or in the app before it takes effect.

Contact

Questions or requests about your privacy? Email us at [email protected].