Privacy

• Account basics: email, password (hashed by Supabase Auth), display name, and your chosen timezone.
• Apiary & hive records: locations, USDA zone, photos, dates, equipment notes, and the inspection details you log.
• Inspection contents: free-text notes, photos, varroa counts, and any other fields you fill in.
• Conversations with Inara's chat: prompts, responses, and any images you attach.
• Optional: a Telegram chat ID if you choose to enable notifications.
• Optional: financial entries (expenses, revenue) if you log them.
• Optional: feedback you submit through the “Send feedback” affordance.

Everyone who is a member of your team can read everything your team has logged — apiaries, hives, inspections, tasks, chat conversations, and feedback. This is the point of the team feature.

Nobody outside your team can read your data via the app. Database-level access controls (row-level security) enforce this on every query.

Building a usable beekeeping app means routing some data through a handful of specialist services. Each one sees only what it needs:

• Supabase (Postgres + Auth + Storage) — holds every row and every uploaded photo. Hosted in the US.
• Anthropic (Claude API) — receives the chat prompts you send, including any attached images. Anthropic's zero-retention policy applies to API traffic. We do not opt into training-data sharing.
• OpenAI (embeddings only) — receives short text snippets when we index knowledge-base documents. No personal conversation text is sent.
• Mapbox — receives map-tile and reverse-geocoding requests with coordinates you set on apiary locations.
• Vercel — hosts the application. Has access to request logs and the runtime environment variables.
• Telegram (optional) — receives notifications you opt into.
• Resend (optional, when configured) — sends email notifications and team invitations.
• Tavily (optional, when configured) — receives chat queries that trigger a web-search tool call.
• Open-Meteo — receives apiary coordinates when auto-filling weather on inspections. No identity is attached.
• phzmapi.org — receives apiary coordinates when looking up USDA zone.

• Sell, rent, or share your data with advertisers.
• Profile you for ads or marketing.
• Include your data in any model training.
• Track you across other sites.

Settings → Account → Delete Account anonymizes your personal information (name, email, location) immediately. Your team's shared records remain so teammates aren't disrupted. If you want every row associated with you removed instead, email the operator (Moses) and we'll handle it manually.

Inara is not intended for users under 13. Minors using the app should do so under a parent or guardian's account.

If we change this policy, we'll update the “Last updated” date at the top of this page. Material changes that affect existing users will be flagged in the app.

For privacy questions, contact the operator directly. Inara is run by a single person, not a company.