Testing environment — not the live site. Herd records here may be reset at any time.

Privacy

Last updated 29 September 2026.

This is the short version, and it is the whole version. Your herd records are yours. We do not sell them, we do not advertise against them, and nobody outside your own account can read them — including us, and including the feed dealer or association whose name is on the app.

What we hold

Who you are
Your name, and the email address or phone number you sign in with. There is no password: we send you a six-digit code instead, and those codes are stored hashed, used once, and expire in ten minutes.
Your records
The herd itself — animals, weights, breedings, calvings, health events and withdrawal periods, expenses, semen tank inventory, and the places you keep stock. Whatever you type in, and nothing you do not.
Your devices
A name for each phone you sign in on and when it last synced, so you can revoke one you have lost. No location, no contacts, no photos.
Nothing you say
You can speak a tag number and a weight instead of typing them, and the microphone is the only permission the app ever asks for. What you say is turned into text by your own phone and never leaves it — no recording is kept, nothing is uploaded, and the numbers are put in the boxes for you to check before anything is saved. If your phone cannot do the recognition by itself, the app does not offer the microphone at all rather than sending your voice somewhere.
Your membership
When it runs to, and whether a partner is paying for it. Payment itself is handled by Stripe — we never see or store a card number.
Email we send you
Whether a message reached you. A bounced address is recorded so somebody can fix it, because with no password an address that does not work means you cannot get in at all.

What the app does not do

The phone app contains no analytics, no crash reporting, no advertising SDK and no tracking of any kind. It talks to one server — ours — and to nothing else. That is still true with the microphone: speech is recognised by the phone itself, and where a phone cannot do that, the feature is switched off rather than falling back to somebody else's servers. There is a test in the codebase that fails the build if any of this stops being true.

The microphone is the only permission it asks for, and only when you tap the microphone button. Your records are held on the phone so the app works in a pasture with no signal, in the app's own storage, and your sign-in token is kept in the device keychain.

Who can see your herd

Every record belongs to an account — one operation — and that is the line the software is built around rather than a promise we are making. Only people you have added to your account can read it, at the role you gave them.

Partners cannot see your herd

If you reached Calf Book through a feed dealer or a cattlemen's association, their name and colours are on it, and they can see only whether a membership is current — your name, their own member number for you, the expiry, and who is paying. Not your animals, not your weights, not your sale prices, not how many head you run. They have no way to reach any of it; the records are not scoped to their brand at all.

We look only when you ask us to

Our support tools deliberately do not include a view of anybody's records. Staff can see accounts, sign-ins, devices, membership and what email went out — enough to answer a support call — and cannot open your herd.

Who else is involved

That is the entire list. Nobody is paid for access to your data, and there is no arrangement under which anyone could be.

How long we keep it

For as long as you have an account. Records you delete in the app are marked deleted and stop appearing straight away — that is how a deletion reaches your other phone — and are cleared out with the rest when an account goes.

Migrated accounts are the exception worth naming: if you were a customer of the old calfbook.com, your records were brought across so they were waiting for you. You can delete the account and take them with you, and you never have to sign in at all.

Getting your records out, or getting rid of them

Children

Calf Book is for people keeping livestock records and is not directed at children. Young people do show and keep stock, and a parent or guardian holds the account.

Changes, and how to reach us

If this ever changes in a way that affects what we hold or who can see it, we will say so by email rather than quietly editing this page.

Questions, or want a copy of what we hold: support@calfbook.dev.