Privacy Policy
Last updated 23 July 2026 · Effective 23 July 2026
Land & Herd is management software for ranches, farms, and homesteads, available on the web at app.landandherd.com and as mobile apps for iOS and Android. This policy explains what we collect, why, who we share it with, and how to get it deleted. It covers the website, the web app, and the mobile apps.
The short version. We collect the account details you type in and the ranch records you enter. We use them to run the product — nothing else. We do not sell your data, we do not use it for advertising, and we do not track you across other apps or websites. You can delete your account, and everything in it, from inside the app at any time.
1. Who we are
Land & Herd is the data controller for the information described below. You can reach us at [email protected] for any privacy question, request, or complaint.
Land & Herd can also be self-hosted. If you use an installation run by your own organisation, that organisation is the controller of your data and this policy describes the software's behaviour rather than their practices.
2. What we collect
Information you give us
| Data | Why we have it |
|---|---|
| Name and email address | To create your account, sign you in, identify you to other members of your ranch, and send account email. |
| Password | Stored only as a bcrypt hash. We never store or can read your actual password. |
| Operation details — ranch name, operation type, and optionally a ZIP code or coordinates | To set up your workspace and show a local weather forecast if you provide a location. |
| Ranch records you enter — animals, breeding and health records, tasks, production, inventory, pastures, crops, equipment, finances, and daily log entries | This is the content of the product. We store it so you and the people you invite can use it. |
| Assistant conversations, if you use the AI assistant | To answer your question and let you revisit the conversation later. |
Information collected automatically
| Data | Why we have it |
|---|---|
| Device model name (mobile app only, e.g. "iPhone 15") | Labels the sign-in in your device list so you can tell your sessions apart. |
| Session and access tokens | Keeps you signed in. Stored hashed on our servers, and in the operating system keychain (iOS Keychain / Android Keystore) on your device. |
| Server logs — IP address, timestamp, requested URL | Security, abuse prevention, and debugging. Retained for up to 30 days. |
| Product analytics events — which features are used, and when | To understand what to build and fix. Events carry identifiers and feature names only, never the contents of your records or messages. |
We do not collect precise device location, contacts, photos, camera or microphone data, health data, or advertising identifiers. The mobile apps request no runtime permissions beyond network access.
3. How we use it
- To provide the product: your account, your ranch, and the records in it.
- To keep it secure — detecting abuse, investigating incidents, and rate limiting.
- To support you when you write in.
- To improve the product using aggregate usage analytics.
- To meet legal obligations.
We do not use your data for advertising, we do not sell or rent it, and we do not share it with data brokers. We do not use your ranch records to train machine-learning models.
4. Who we share it with
We use a small number of processors, each limited to what its job requires:
| Provider | What it receives | When |
|---|---|---|
| Our hosting and database provider | All application data, encrypted in transit | Always — this is where the app runs |
| PostHog (product analytics) | A user identifier plus event names and feature metadata | When analytics is enabled on the installation |
| Anthropic, OpenAI, or AWS Bedrock (AI model providers) | The message you send to the assistant and the ranch context needed to answer it | Only when you use the AI assistant |
| Open-Meteo (weather forecasts) | Approximate coordinates for your operation — no account identifier | Only if you set a location |
| Zippopotam.us (ZIP code lookup) | The ZIP code you entered — no account identifier | Only when you save a ZIP code |
We may also disclose data if we are legally required to, or where necessary to protect our rights or someone's safety. If Land & Herd is ever acquired, we will tell you before your data moves to a new controller.
5. Sharing inside a ranch
Land & Herd is collaborative. When you join or are invited to a ranch, the other members of that ranch can see your name and email address, the records you create there, and your daily log entries. Anything you enter into a shared ranch is visible to that team. Ranch owners can invite and remove members.
6. How long we keep it
- Account and ranch data: for as long as your account exists.
- Deleted accounts: removed from the live database immediately (see section 7). Encrypted backups roll off within 30 days.
- Server logs: up to 30 days.
- Analytics events: up to 12 months.
7. Deleting your account and data
You can delete your account yourself, and it is permanent. There is no waiting period and no need to contact us.
- In the mobile app: tap the ranch menu on the dashboard → Account, privacy & terms → Delete my account.
- On the web: Settings → Account → Delete my account.
- Full instructions: landandherd.com/delete-account.
Deleting your account removes your profile, your password hash, your sign-in sessions and device tokens, and the log entries and assistant conversations you authored. Any operation where you were the last remaining member is deleted with it, including its animals, tasks, records, and finances. Operations that still have other members remain — your personal data is removed from them and your name is unlinked from records that stay behind.
You can also email [email protected] to request deletion, a copy of your data, or a correction. We respond within 30 days.
8. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. Residents of California have the right to know what personal information is collected and to request its deletion; we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not discriminate against anyone for exercising these rights. Exercise any of these at [email protected].
9. Security
Traffic is encrypted with TLS. Passwords are stored as bcrypt hashes. Mobile access tokens are stored in the device keychain rather than general app storage, hashed at rest on our side, and excluded from Android's automatic cloud backup. Access to production systems is limited to those who need it. No system is perfectly secure, but we take this seriously and will notify affected users promptly if a breach ever puts their data at risk.
10. Children
Land & Herd is not directed at children and is not intended for anyone under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, write to [email protected] and we will delete it.
11. International transfers
Land & Herd is operated from the United States, and the processors listed above may process data in the United States and other countries. Where required, we rely on Standard Contractual Clauses or an equivalent transfer mechanism.
12. Changes to this policy
If we change this policy we will update the date at the top, and for material changes we will notify you in the app or by email before the change takes effect.
13. Contact
Privacy questions and requests: [email protected]
General support: [email protected]