Privacy Policy

Bush Coding builds software that works in very different ways. Some of our apps keep everything on your device, others need an account and a server. This policy explains, for each product, what personal information we handle, why, who helps us process it, how long we keep it and how you can control it.

1. Who we are

"Bush Coding", "we" and "us" refer to Bush Coding, a software studio based in Cahuita, Talamanca, Limón, Costa Rica, with a presence in Montreal, Quebec, Canada. We are responsible for the personal information described in this policy, except where section 8 says otherwise. You can reach us, including our person in charge of the protection of personal information, at contact@bushcoding.com.

We do not sell personal information, we do not share it for cross-context behavioural advertising from inside our apps, and we only use it for the purposes described here.

2. Our products at a glance

3. Classify

Classify sorts the electronic invoices (XML and PDF files issued under Costa Rica's Ministry of Finance system) that accountants receive from their clients.

• Your invoices never leave your device. Files are read, sorted and zipped inside your web browser. We do not upload, store or see the invoices, ID numbers, names or amounts they contain, and we cannot recover them for you.
• No account is needed for the free plan. If you create one (to subscribe to Classify Pro), we store your name, email address, a hashed password (or your Google identity if you sign in with Google), your plan and subscription status, your preferences (such as sign-in alerts) and, if you turn it on, the secret for two-step verification.
• Sessions: for each signed-in browser we keep the IP address, the browser's user agent and the approximate country derived from the IP address, so you can review and close your sessions.
• Email: we send account emails (confirmation, password reset, optional sign-in alerts). Accounts that are not confirmed within 24 hours are deleted automatically.
• Payments: Classify Pro is billed by Stripe. We receive your Stripe customer and subscription identifiers and status, never your card details.
• Analytics: the Classify website uses Google Analytics to understand which pages are visited.

4. Aptly

Aptly lets businesses (called hubs) publish their services and staff and take appointments. It has two kinds of users: people who run a business and people who book with it. Both use an Aptly account.

• Account data: name, email address, hashed password (or Google identity), preferences (language, time format, reminder timing) and, if enabled, two-step verification.
• Business data: the hub's name, description, contact details, address and map location, logo, schedules, services, prices and staff names. Logos and service images are stored with Cloudinary.
• Appointment data: the business, service, staff member and time you book, the phone number and note you choose to add, and the appointment's status.
• What the business sees: when you book, the business's owners and admins can see your name, email address, phone number and note for that appointment, so they can serve you. The business is responsible for how it uses that information outside Aptly.
• Reminders and notices are sent by email: appointment reminders (which you can turn off), cancellation notices and account emails. Business owners also receive billing emails.
• Sessions and security: IP address, device type and approximate country (looked up through an IP geolocation service when you sign in).
• Maps: maps are loaded from OpenStreetMap-based tile servers, which receive your IP address when the map is displayed.
• Payments: Aptly Premium is a subscription for businesses, billed by Stripe on the web or by Google Play or the App Store in the mobile app. Customers never pay through Aptly; prices shown are paid directly to the business.
• Automatic deletion: each business chooses how long past appointments are kept (one day to one year; one week by default). After that they are deleted.

5. Stash

Stash stores and shares secrets (API keys, passwords, environment variables) for development teams, through a web app and a command-line tool (CLI).

• Account and team data: email address, username, first and last name, hashed password, two-step verification data, organizations, members, roles and invitations.
• Secrets: secret values are encrypted with AES-256-GCM before they are stored, and the 20 most recent versions of each secret are kept. Secret names (keys) are stored unencrypted. Encryption happens on our servers: Stash is not an end-to-end or "zero-knowledge" service, because the service must decrypt values to deliver them to you and to the tokens you authorize. We do not view secret values as part of normal operations, never write them to logs or notifications, and only access stored data when needed to keep the service running and secure or when the law requires it.
• Audit log: to protect your team, we record who did what (for example, revealed or changed a secret), when and from which IP address. Secret values are never recorded. Entries are deleted after 365 days.
• Sessions and sign-in alerts: we keep the IP address and device of each session and email you when a new device signs in.
• The CLI saves its sign-in tokens and your selected project in a configuration file on your computer, readable only by your user. It checks GitHub for new versions; it sends no telemetry.
• Integrations: if you connect Vercel or GitHub, we store the access token you provide (encrypted) and send the secrets you choose to that provider when you sync.
• Payments: Stash Pro is billed by Stripe. We never receive your card details.
• Stash has no analytics or advertising.

6. Germina and other on-device apps

Some of our mobile apps keep everything on your device. They have no accounts, no servers of ours, no analytics and no advertising, and we collect no personal information through them.

• Germina, a focus timer where each completed session grows a plant, stores your focus sessions (date, length, plant, result and the optional intention you type) and your settings (daily goal, theme, ambient sound and reminder time) only on your device. Uninstalling the app deletes them.
• Optional reminders are local notifications scheduled on your device; no push service is used. Ambient sounds are bundled with the app; the microphone is never used.
• The optional home-screen widget reads the same on-device data. Garden backups are files that you create and send wherever you choose with your phone's share menu; the app never uploads them.
• Germina Plus is an optional one-time purchase processed entirely by Google Play or the App Store. The app only asks the store whether your store account owns it.
• These apps request a permission only when you use the feature that needs it (for example, notifications for reminders). They do not access your camera, microphone, location, contacts or photos.

If one of these apps ever starts handling data differently, we will update this section before that version is released.

7. bushcoding.com, the blog and job applications

• Analytics: we use Google Analytics to measure visits to bushcoding.com and the blog.
• Advertising: the blog shows ads served by Google AdSense. Google and its partners may use cookies to show ads based on your visits to this and other websites. You can turn off personalized ads in Google's ad settings and read how Google uses information from sites that use its services.
• Email: when you write to us (for example to request a quote or send your CV to careers@bushcoding.com), we use what you send only to reply and, for applications, to evaluate them. We keep applications for up to 12 months unless you ask us to delete them sooner.

8. Software we build for clients

When we build or maintain software for a client, the client decides what personal information that software collects and why. In that case we process the data on the client's behalf and following its instructions, and the client's own privacy policy applies to its users. Questions about those apps should go to the client first.

9. What applies to all accounts

For Classify, Aptly and Stash we use personal information to:

• create and run your account and provide the features you use (performance of our agreement with you);
• process subscriptions and send receipts and billing notices (agreement and legal obligations);
• keep accounts secure: sign-in alerts, session lists, two-step verification and abuse prevention (legitimate interest);
• send service emails you need, such as confirmations, password resets and important changes (agreement);
• comply with tax, accounting and other legal obligations.

We do not send marketing emails from these products without your consent, and every such email will let you unsubscribe. Our apps store your sign-in token in your browser's local storage or your phone's secure app storage; they do not use advertising or tracking cookies.

10. Service providers

We share personal information only with providers that help us run our products, under contracts that limit their use of it, or when the law requires it.

11. How long we keep data

• Accounts: while your account is open. When you delete it, its data is deleted right away, except what the law requires us to keep.
• Unconfirmed accounts: deleted after 24 hours (Classify, Aptly) or 48 hours (Stash).
• Sessions: until they expire or you sign out (web sessions last up to 7 days).
• Aptly appointments: according to each business's setting, from one day to one year after the appointment.
• Stash: up to 20 versions per secret; audit log entries for 365 days.
• Billing records: kept as long as tax and accounting law requires, and detached from your account when you delete it.
• Job applications: up to 12 months.

12. Your rights

Depending on where you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy, in a portable format where applicable;
• correct information that is wrong or incomplete;
• delete your information, or stop or limit a particular use of it;
• withdraw a consent you gave, without affecting what was done before.

You can delete your Classify, Aptly or Stash account yourself from its account settings. For anything else, write to contact@bushcoding.com. We answer within 30 days and may ask you to confirm your identity. You can also complain to your local data protection authority, such as PRODHAB in Costa Rica or the Commission d'accès à l'information in Quebec.

13. Security

We use HTTPS for all traffic, hash passwords, offer two-step verification, encrypt sensitive values such as Stash secrets and two-step verification secrets, limit access to production systems and review our dependencies. No system is completely secure; if a breach affects your personal information in a way that may cause you serious harm, we will notify you and the competent authorities as the law requires.

14. International transfers

Our providers may process data outside your country, including in the United States. When that happens we rely on providers that offer appropriate safeguards for personal information.

15. Children

Classify, Aptly and Stash are meant for adults and businesses and are not directed to children under 13 (or the minimum age in your country). We do not knowingly collect their personal information; if you believe we have, contact us and we will delete it. Our on-device apps collect no personal information from anyone.

16. Changes and contact

We will update this page and the date at the top when our practices change. If a change is significant, we will also tell account holders by email or in the app before it takes effect.

Bush Coding
Email: contact@bushcoding.com
Cahuita, Talamanca, Limón, Costa Rica