Privacy Policy

This Privacy Policy explains what Bitfield collects when you use the Bitfield platform at https://bitfield.so, why, who it is shared with, and the choices you have. This policy describes what we actually do; if our practices change materially, we will notify you and obtain your consent before applying new practices to data we already hold. Contact: hello@bitfield.so.

What we collect:

Account information (name, email, password credentials); billing records via Stripe (transaction amounts, status, billing identifiers, never full card numbers); the applications, configurations, and content you create on the platform; operational telemetry needed to run and sync your apps (device identifiers for your enrolled devices, app activity/health signals, error logs); support communications.

Why we collect it:

Operating and syncing your applications across your devices; billing and account management; measuring usage-billed dimensions (app count, active devices) to compute your bill; securing the platform and preventing abuse; support; improving reliability.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Who processes data on our behalf (service providers / subprocessors):

Stripe (payments); Fly.io (cloud hosting for deployments you place in the cloud); Amazon Web Services (email delivery and storage where used); AI model providers listed in the AI section for AI features you invoke.

Each provider receives only what its function requires, under terms restricting use to providing the service. Beyond these providers, we disclose personal information only if required by law or to protect the safety and integrity of the service.

AI processing. When you use AI features, the content you submit to those features is processed by third-party AI model providers (such as Anthropic and OpenAI) as subprocessors, only to provide the feature you invoked.

We do not use your applications, content, or personal information to train AI models, and we do not permit our AI providers to train on it under our agreements with them.

Connected accounts. Where you connect external accounts to your applications, we access them only within the scopes you grant, to perform the actions you direct; you can revoke a connection at any time from your account.

Payments are processed by Stripe. We do not receive or store your full card number; Stripe processes payment data under its own privacy policy, and we receive transaction records (amount, status, billing identifiers) needed to run your account.

Retention. We keep account and application data while your account is active. After closure, we delete or de-identify personal information within 90 days except records we must keep for legal, billing, or security purposes. Backups roll off on a fixed schedule.

Security. We use reasonable technical and organizational measures appropriate to the data we hold, including encryption in transit and access controls. No system is perfectly secure, and we do not promise absolute security; if a breach affecting your personal information occurs, we will notify you as required by law.

Your rights. Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. We honor these rights regardless of which US state you live in and respond within the time the applicable law requires. To exercise them, email hello@bitfield.so from the address associated with your account; we will verify the request and will not discriminate against you for making one. Authorized agents may submit requests where the law provides for it. If we deny a request you may appeal by replying to our decision.

Children. The platform is not directed to children under 13 and we do not knowingly collect their personal information; if we learn we have, we delete it.

Changes to this policy. Every version is identified by its document identity and effective date. If we materially expand how we collect, use, or share personal information, we will notify you via email to your account address and a notice on the site and obtain your affirmative consent BEFORE the new practice applies to data collected under the old policy. We will never change this policy quietly or retroactively.

Document identity: sha256:0997b02776801f062ba770a3b95800af58d5a859bf06971b7d8c2eabd39a5a9a · Business: Bitfield · Effective date: set at publication. Questions: hello@bitfield.so