Privacy Policy

Last updated: July 16, 2026

This Privacy Policy explains how BarnDesk LLC (“BarnDesk,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects information when you access or use BarnDesk farm management software, including our website at thebarndesk.com, our iOS and Android mobile applications, our web application at app.thebarndesk.com, and related services (collectively, the “Service”).

BarnDesk LLC is a Wyoming limited liability company based in the United States. We operate the Service from the United States.

The Service is intended for farmers and farm operators in the United States, the United Kingdom, and Australia. The Service is not currently intended for users located in the European Union or European Economic Area. If our supported regions change, we will update this Privacy Policy.

If you use the Service from outside the United States, your information will be transferred to and processed in the United States as described in this Privacy Policy. Additional region-specific rights for United Kingdom and Australian users are described in Sections 13 and 14.

1. Introduction

BarnDesk provides farm management software designed for small and mid-sized farms, including mixed livestock operations. This Privacy Policy applies to all users of the Service, including farm owners, members invited to a farm, and visitors to our website.

This Privacy Policy does not apply to third-party websites, services, or applications that you may access through the Service, even if they are linked from within the Service.

If you do not agree with our practices, do not access or use the Service. We may update this Privacy Policy from time to time as described in Section 15.

2. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information received from third parties.

2.1 Information You Provide Directly

We may collect the following information that you provide directly:

  • Account information: name, email address, password, and any profile details you choose to add. Passwords are stored using secure authentication systems and are not stored by BarnDesk in plain text.
  • Farm and livestock data: animal records, including identification, breed, sex, age, weight, acquisition information, breeding history, health events, FAMACHA scores, vaccination records, medication and withholding logs, pasture rotations if enabled, equipment logs, and any other data you enter to operate your farm.
  • Farm location: if you choose to add your farm’s location (such as a ZIP or postal code, or a city), we use it to determine an approximate point for local weather information. You control whether to provide this information.
  • Financial records: expense entries, income records, tax categorizations, receipt images, and related farm bookkeeping information. In the United States, this may include Schedule F-related categories where applicable to your farm. We treat your financial and farm operations data as sensitive and protect it accordingly, even where the data does not strictly meet a legal definition of “sensitive personal information.”
  • Communications: messages you send to support, feedback you submit, and the content of emails you send to or receive from us.
  • Subscription information: subscription tier, billing status, renewal dates, cancellation status, and related subscription events received from our subscription processor. We do not directly receive or store full payment card numbers. Payments are processed by Apple or Google.
  • Farm member information: when you invite another person to access your farm, we collect their email address for the purpose of sending the invitation. When they accept the invitation, they are treated as a separate account holder under this Privacy Policy.

2.2 Information Collected Automatically

We may automatically collect the following information:

  • Device and usage information: device type, operating system, app version, IP address, time zone, language settings, device identifiers, installation identifiers, and general usage activity within the Service.
  • Approximate location: we may infer coarse location from your IP address. We also use the farm location you provide (such as a ZIP/postal code or city), which we geocode to an approximate point, for weather-related features. We do not collect precise GPS coordinates of your device.
  • Log data: server logs that record requests made to our infrastructure, including timestamps, URLs accessed, device or browser details, and error states. Log data is used for security monitoring, debugging, and service reliability.
  • Attribution data: when you install the app after clicking one of our links, campaigns, or ads, our attribution provider may record which marketing source led to the install using device or installation identifiers. We use this information to measure marketing effectiveness. We do not use this information to build cross-app advertising profiles.
  • Cookies and equivalent technologies: our website and web application may use cookies and similar technologies. Our mobile applications may use local storage, SDK identifiers, authentication tokens, and similar technologies. See Section 11 for more information, including how we obtain consent for non-essential technologies where required by law.

We do not use third-party behavioral advertising cookies, third-party behavioral analytics tools, or cross-site advertising trackers.

2.3 Information Received From Third Parties

We may receive information from third parties in the following circumstances:

  • Authentication providers: if you sign in using Apple ID or Google, we receive your name, email address, and a unique identifier from the provider, in accordance with the permissions you grant.
  • Subscription providers: our subscription management provider sends us status events, such as active, expired, refunded, grace period, cancellation, or renewal events, so we can grant or revoke access to paid features.
  • Attribution provider: our mobile attribution provider may send us information about the marketing source associated with your app install.

3. Sensitive Information

Some information you submit may be sensitive, including financial information and information related to the health or management of your livestock.

Although livestock health information is not human health information, we treat livestock health records, financial records, and farm operations data with additional care. We protect this information through encryption in transit, encryption at rest through our infrastructure providers, role-based access controls, and limited access by BarnDesk personnel.

We do not use sensitive information to infer personal characteristics about you. We do not sell sensitive information. We do not share sensitive information with third parties for advertising purposes.

4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service.
  • Create, authenticate, and secure your account.
  • Process subscriptions and grant access to paid features.
  • Process receipt images and animal registration certificates submitted by you to extract structured data, as described in Section 5.
  • Provide local weather information based on farm location information you choose to provide.
  • Measure the effectiveness of BarnDesk marketing campaigns and referral sources.
  • Send transactional communications, including password resets, security alerts, account notices, subscription notices, and service updates.
  • Send service-related communications, feature announcements, and reminders where permitted by law or where you have opted in.
  • Respond to support requests and feedback.
  • Detect, investigate, and prevent fraudulent, abusive, unauthorized, or illegal activity.
  • Monitor, debug, and improve the reliability and security of the Service.
  • Comply with legal obligations and enforce our Terms of Service.
  • Generate aggregated or de-identified analytics about how the Service is used.

The legal bases on which we rely for users in the United Kingdom are described in Section 4A.

4A. Legal Bases for Processing for United Kingdom Users

Where UK data protection law applies, we rely on the following legal bases:

  • Performance of a contract: to create and maintain your account, provide the Service and its features, process your subscription, and provide customer support.
  • Legitimate interests: to secure the Service, prevent fraud and abuse, debug and improve the Service, measure BarnDesk marketing effectiveness, provide weather features, and operate our business, where these interests are not overridden by your rights and interests.
  • Consent: for optional communications, optional features that request consent, non-essential cookies and similar technologies, and any processing for which consent is required by law. You may withdraw consent at any time.
  • Legal obligation: to comply with tax, accounting, regulatory, security, and other legal requirements.

5. Document Image Processing and Artificial Intelligence

When you upload certain images or documents, we send them to a third-party artificial intelligence provider for optical character recognition and structured data extraction. This currently applies to two kinds of uploads:

Receipt images. The provider extracts information such as vendor name, date, amount, tax category, and line items, and returns that information to us so we can populate your expense record.

Registration certificates and pedigree documents. If you use the pedigree scan feature, the provider extracts information such as animal name, registration number, registry, birth date, and ancestor names and registration numbers, and returns that information to us so we can populate the animal’s record and pedigree.

We use this processing only to help you enter farm records more efficiently.

  • Data minimization: only the image or document you submit is sent to the AI provider. We do not send your password, payment card information, unrelated farm records, or other uploads alongside the item being processed.
  • No routine human review: processing is automated. BarnDesk personnel do not routinely review the contents of your images and documents. The AI provider does not routinely review them for BarnDesk’s business purposes.
  • No model training: under our agreement with the AI provider, your images, documents, and extracted text are not used to train artificial intelligence models.
  • Provider retention: the AI provider may retain inputs and outputs for a limited period for trust, safety, abuse monitoring, or legal compliance purposes. After that limited retention period, the provider deletes the data from its systems in accordance with its policies and agreements.
  • Our retention: we retain receipt images in our storage while your account remains active and the related expense record exists. If you delete an expense, the corresponding receipt image is deleted within 30 days. Pedigree scan images are retained while your account remains active and the related animal record exists, and are deleted on the same schedule as receipt images. If you close your account, images and documents are deleted following the account-deletion grace period described in Section 7, unless we are required to retain certain records for legal, tax, accounting, or security purposes.
  • Your control: extracted data is used to populate editable fields. You can correct, edit, or delete extracted information.

This automated processing supports data entry only. It does not make decisions that produce legal or similarly significant effects about you.

You are responsible for maintaining your own tax and accounting records. We recommend exporting your receipts and financial data regularly using the export tools provided in the Service.

Voice logging (optional)

If you use voice logging, your spoken command is captured by your device’s microphone and converted to text by your device’s speech-recognition service — Apple on iOS, Google on Android — which process the audio under their own privacy policies. The resulting text is sent to our servers to interpret the command, and only when our on-device rules cannot interpret it, to our AI provider, Anthropic, solely to turn it into a log entry. We do not store the audio recording, and we do not store the text of your spoken command — only the structured record you confirm (such as a treatment or weight) is saved, exactly as if you had typed it. See the privacy policies of Apple, Google, and Anthropic for how they handle speech data.

6. How We Share Your Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

We share information only in the limited circumstances described below.

6.1 Service Providers

We share information with vendors who process information on our behalf to operate, support, secure, and improve the Service. These providers are authorized to use the information only to provide services to BarnDesk and are expected to maintain appropriate security safeguards.

Current service providers include:

  • Supabase, Inc.: database, authentication, file storage, and serverless function hosting.
  • Vercel Inc.: hosting and delivery of our web application and APIs.
  • Resend, Inc.: transactional and opt-in email delivery, including delivery and engagement reporting.
  • RevenueCat, Inc.: subscription state management and Apple App Store / Google Play webhook processing.
  • AppsFlyer Ltd.: mobile install attribution to measure which BarnDesk marketing source led to an app install. We use AppsFlyer for BarnDesk marketing measurement, not cross-app advertising profiling.
  • Anthropic, PBC: vision-based optical character recognition and structured extraction of images and documents you submit, including receipt images and animal registration certificates, as described in Section 5.
  • Open-Meteo: weather forecast data. When you use weather features, your farm’s approximate coordinates may be sent to obtain a local forecast. No BarnDesk account identifiers are sent to Open-Meteo.
  • Functional Software, Inc. d/b/a Sentry: application error monitoring and crash reporting. Sentry is not used by BarnDesk as a behavioral advertising tool.
  • Apple Inc. and Google LLC: authentication services that you may optionally use to sign in.
  • Apple Inc. and Google LLC: payment processing for subscriptions purchased through the Apple App Store or Google Play.

6.2 Other Members of Your Farm

BarnDesk is structured around farms. When you create or are invited to a farm, you become a member of that farm.

Members of a farm may be able to view, create, edit, or manage records belonging to that farm, depending on their permissions. The farm owner controls access to the farm workspace and is responsible for managing invited members.

When a member is removed from a farm, that person loses access to the farm’s data. Records they previously created may remain part of the farm’s records.

6.3 Legal Requirements

We may disclose information if we believe in good faith that disclosure is necessary to:

  • Comply with applicable law, legal process, court order, subpoena, or governmental request.
  • Enforce our Terms of Service.
  • Protect the rights, property, or safety of BarnDesk, our users, or others.
  • Investigate fraud, security incidents, abuse, or technical issues.
  • Prevent harm or illegal activity.

6.4 Business Transfers

If BarnDesk is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, your information may be transferred as part of that transaction.

If a transaction materially changes how your personal information is used or controlled, we will provide notice as required by applicable law.

6.5 With Your Consent or Direction

We may share information with your consent or at your direction, such as when you invite another person to join your farm.

7. Data Storage, Security, and Retention

BarnDesk is operated from the United States. Information collected through the Service is stored and processed in the United States.

We use commercially reasonable technical and organizational safeguards to protect the information we collect, including encryption in transit, encryption at rest through our infrastructure providers, role-based access controls, and access logging where appropriate.

No method of transmission over the Internet or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

We maintain an internal incident response process. If we confirm a security incident that requires notice under applicable law, we will notify affected users and applicable regulators as required, including under the UK GDPR breach-notification rules and the Australian Notifiable Data Breaches scheme where applicable.

We retain your information for as long as your account is active or as needed to provide the Service.

When you request to delete your account, your account first enters a grace period during which you can cancel the request and restore your account. After the grace period ends, we delete or de-identify your personal information within 30 days, except where we are required or permitted to retain information for legal, tax, accounting, dispute-resolution, fraud-prevention, security, or compliance purposes.

Transaction records, billing records, tax-related records, security logs, and similar records may be retained for longer periods where required or permitted by law. Access to retained records is limited to the purpose for which they are retained.

Receipt images are retained while your account remains active and the related expense record exists. Receipt images are deleted within 30 days after the related expense record is deleted or after account closure, subject to any legal or compliance retention requirements. Pedigree scan images are retained while your account remains active and the related animal record exists, and are deleted on the same schedule.

Extracted structured receipt data, such as vendor, amount, date, category, and line items, remains part of the related expense record until the expense record is deleted or your account is deleted. Extracted pedigree data remains part of the related animal record until the animal record is deleted or your account is deleted.

8. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights:

  • Access: request a copy of the personal information we hold about you.
  • Correction: request that we correct inaccurate or incomplete information.
  • Deletion: request that we delete your personal information, subject to legal exceptions.
  • Portability: request to receive your information in a portable, machine-readable format. The Service provides export tools for farm data.
  • Objection or restriction: object to or restrict certain processing where applicable law provides that right.
  • Withdrawal of consent: withdraw consent where processing is based on consent.
  • Complaint: lodge a complaint with a data protection authority. UK users may contact the Information Commissioner’s Office. Australian users may contact the Office of the Australian Information Commissioner. We ask that you contact us first so we can try to resolve your concern.

California residents may have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know, delete, correct, limit the use of sensitive personal information, and opt out of the sale or sharing of personal information.

BarnDesk does not sell personal information and does not share personal information for cross-context behavioral advertising. As a result, no opt-out of sale or sharing is technically required for our current practices. You may still submit a “Do Not Sell or Share” request to us using the contact information in Section 16, and we will confirm that no such activity occurs.

We honor the Global Privacy Control browser signal where applicable law requires. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of any sale or sharing of your personal information.

To exercise privacy rights, contact us at support@thebarndesk.com. We may need to verify your identity before fulfilling your request.

We will respond within the timeframe required by applicable law. In general, we aim to respond within 45 days for California requests, within one month for UK requests, and within a reasonable period for Australian requests.

9. Multi-Tenant Farms and Member Data

BarnDesk is organized around farm workspaces. A farm has one owner and may have additional members invited by the owner.

The farm owner controls access to the farm workspace and is responsible for managing invited members.

Members may create, view, or modify farm data depending on their permissions.

When a member is removed from a farm, that person immediately loses access to the farm’s data. Records previously created by that member may remain part of the farm’s records.

A privacy rights request submitted by an individual member affects that member’s personal account information. It does not automatically delete the farm’s operational records. To delete a farm and its records, the farm owner must initiate deletion of the farm workspace.

Inviting another person to your farm requires them to accept the invitation through their own BarnDesk account before they are added as a member.

10. Children’s Privacy

The Service is not directed to children, and we do not knowingly collect personal information from children.

We do not knowingly collect personal information from children under 13 years old or the equivalent minimum age in your jurisdiction.

If you are a parent or guardian and believe your child has provided us with personal information, contact us at support@thebarndesk.com. If we learn that we have collected personal information from a child without appropriate consent, we will delete that information.

11. Cookies and Tracking Technologies

This section describes how we use cookies and equivalent technologies on our website, web application, and mobile applications.

We do not maintain a separate Cookie Policy. The practices described in this section are the complete description of our use of cookies and equivalent technologies.

11.1 What Cookies Are

Cookies are small text files placed on your device when you visit a website. Similar technologies, including web beacons, pixels, software development kit identifiers, authentication tokens, and local storage, may serve comparable purposes.

We refer to all of these technologies collectively as “cookies” in this section.

Cookies set by the operator of the website you are visiting are called first-party cookies. Cookies set by parties other than the website operator are called third-party cookies.

11.2 Categories of Cookies and Similar Technologies We Use

We group the cookies and similar technologies used by BarnDesk into the following categories:

  • Strictly necessary technologies: these are essential for the Service to function. Examples include authentication session cookies, authentication tokens, cross-site request forgery protection, and load balancing. You cannot disable these technologies and continue to use the Service.
  • Error monitoring technologies: these help us detect, diagnose, and fix technical problems, crashes, and service errors.
  • Preference technologies: these remember choices you make, such as dashboard layout, sort order, theme preference, units, currency, language settings, and similar preferences. Disabling preference cookies may require you to re-set preferences each time you use the Service.
  • Subscription and app functionality technologies: these help manage subscription status, app installation, account access, and feature availability.
  • Attribution technologies: these help us measure which BarnDesk marketing sources led to app installs. We use this information to understand whether our own marketing campaigns are effective. We do not use attribution technologies to sell personal information or build cross-app advertising profiles.

We do not use third-party behavioral analytics tools such as Google Analytics, Mixpanel, or Segment. We do not serve advertising through the Service. We do not use advertising cookies.

11.3 Consent for Non-Essential Technologies

Where required by applicable law — for example, in the United Kingdom under the Privacy and Electronic Communications Regulations — we obtain your consent before setting non-essential cookies and similar technologies (such as error-monitoring and attribution technologies) on our website and web application. Strictly necessary technologies do not require consent. You can give, decline, or change your consent through the cookie-consent controls provided in the Service, and you can also manage cookies through your browser settings as described in Section 11.6.

11.4 Third-Party Cookies and SDKs

Some cookies, SDKs, and identifiers are provided by third-party services we use to operate the Service. We do not control third-party technologies outside of our relationship with those providers, and you should review the provider’s own privacy and cookie policies for details.

Third parties currently used include:

  • Supabase, Inc.: authentication and session management.
  • Functional Software, Inc. d/b/a Sentry: session and error identifiers used to correlate crash reports and technical errors.
  • Resend, Inc.: email delivery tools, including delivery and engagement reporting.
  • RevenueCat, Inc.: SDK identifiers used to manage subscription state and entitlement access.
  • AppsFlyer Ltd.: SDK and device or installation identifiers used to attribute app installs to BarnDesk marketing sources.
  • Apple Inc. and Google LLC: sign-in, authentication, app store, and payment services.

11.5 How Long Cookies Last

Session cookies expire when you close your browser or end your session.

Persistent cookies remain on your device for a set period or until you delete them.

The maximum lifetime for any persistent cookie we set directly is 12 months, unless a longer period is necessary for security, fraud prevention, legal compliance, or account functionality.

11.6 How to Manage Cookies

Most browsers allow you to control cookies through their settings. You can typically refuse all cookies, refuse third-party cookies, delete cookies after each session, or be prompted before a cookie is stored.

Disabling strictly necessary cookies will prevent the Service from functioning correctly. For example, you may not be able to sign in or remain signed in.

To manage cookies, review the settings or help documentation for your browser.

11.7 Global Privacy Control and Do Not Track

BarnDesk honors the Global Privacy Control browser signal where applicable law requires. If your browser sends a Global Privacy Control signal, we will treat it as a request to opt out of any sale or sharing of your personal information for cross-context behavioral advertising.

BarnDesk does not currently sell personal information or share personal information for cross-context behavioral advertising.

There is no industry-standard interpretation of the older “Do Not Track” signal, and we do not respond to Do Not Track signals separately from Global Privacy Control.

11.8 Equivalent Technologies in Our Mobile Applications

Our iOS and Android applications do not use traditional browser cookies in the same way websites do. They use equivalent technologies, including local device storage, authentication tokens, SDK identifiers, installation identifiers, and device identifiers.

The categories described in this section apply to the mobile applications as well.

Apple and Google provide system-level controls for certain identifiers and tracking permissions. Where platform rules require consent for tracking or access to device identifiers, we will request permission through the applicable iOS or Android system prompt before using those identifiers.

12. International Users and Data Transfers

BarnDesk is operated from the United States. The information we collect is stored and processed in the United States.

If you use the Service from the United Kingdom, Australia, or another supported region outside the United States, your information will be transferred to and processed in the United States. The United States may have data protection laws that differ from those in your country.

United Kingdom

Where we transfer UK personal data to the United States or another country that has not been found adequate under UK data protection law, we rely on appropriate safeguards, including the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as applicable, together with contractual, technical, and organizational protections.

You may contact us at support@thebarndesk.com for more information about these safeguards.

Australia

Your information is stored and processed in the United States. We may also use service providers located in the United States and other countries where our service providers operate. We take reasonable steps designed to ensure that overseas service providers handle personal information consistently with the Australian Privacy Principles, including through contractual, technical, and organizational safeguards. Additional information for Australian users is provided in Section 14.

13. United Kingdom Users

If you are located in the United Kingdom, the following applies in addition to the rest of this Privacy Policy.

  • Controller: BarnDesk LLC is the controller of your personal account information.
  • UK representative: BarnDesk LLC is not established in the United Kingdom. At this time, we have not appointed a UK representative. Based on our current UK activity, we understand our processing of UK personal data to be limited in scale, not directed at children, not involving large-scale special category or criminal-offense data, and unlikely to result in a high risk to individuals’ rights and freedoms. We will reassess this position if our UK user base, UK marketing activity, processing activities, or legal obligations materially change. If we determine that a UK representative is required, we will update this Privacy Policy with the representative’s contact details.
  • Legal bases: our legal bases for processing are described in Section 4A.
  • Your rights: you may have the right to access, correct, delete, port, object to, or restrict the processing of your personal data, and to withdraw consent where processing is based on consent.
  • Complaints: you have the right to lodge a complaint with the UK Information Commissioner’s Office. We ask that you contact us first so we can try to resolve your concern.
  • Retention: we retain information as described in Section 7.

14. Australian Users

If you are located in Australia, the following applies in addition to the rest of this Privacy Policy.

We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 where those laws apply to BarnDesk.

  • Access and correction: you may request access to, or correction of, your personal information by contacting us at support@thebarndesk.com. The Service also provides export tools for farm data. We will respond to access and correction requests within a reasonable period.
  • Overseas disclosure: BarnDesk is operated from the United States. Your personal information is stored and processed in the United States, and we may disclose personal information to service providers located in the United States and other countries where our service providers operate. Before disclosing personal information to overseas service providers, we take reasonable steps designed to ensure that those providers handle personal information consistently with the Australian Privacy Principles, including through contractual, technical, and organizational safeguards.
  • Data breaches: where the Privacy Act 1988 applies to BarnDesk, we will comply with the Notifiable Data Breaches scheme. If an eligible data breach occurs, we will notify affected individuals and the Office of the Australian Information Commissioner where required by law.
  • Complaints: if you have a privacy concern or complaint, contact us at support@thebarndesk.com and include enough detail for us to understand and respond to the issue. We will acknowledge and respond to privacy complaints within a reasonable period. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will notify you by posting a notice in the Service, sending an email to the address associated with your account, or both.

Unless a different effective date is stated, updates are effective when posted.

Your continued use of the Service after the effective date of an updated Privacy Policy means you acknowledge the updated Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Email: support@thebarndesk.com

Postal address:
BarnDesk LLC
30 N Gould St Ste N
Sheridan, WY 82801
United States

If you need to contact us about a privacy rights request, please include enough information for us to verify your identity and locate your account.