Hearthstead Privacy Policy
Last updated: 30 October 2026
This privacy policy applies to Hearthstead, the farm-management mobile application and web service developed under the developer name PardonMyGoat. The Android package identifier is com.Farmlink.app. Hearthstead was previously named FarmLink; that former name remains in its package identifier and some service addresses.
Information we process
The information processed depends on the features you and your organisation use. Data can be supplied by you, by authorised colleagues or administrators, or generated when you use the service.
- Account and organisation details: names, username, email address, employee number, company and farm membership, roles, permissions, account status, authentication credentials and login activity.
- Farm and business records: deliveries, weighbridge readings, vehicle and driver details, supplier and customer contacts, purchase orders, inventory transactions, machinery servicing, employee attendance, feed records, notes, reports and accounting records entered or imported into Hearthstead. These records may include names, contact details, financial information, comments, timestamps and the identity of the person who made a change.
- Photos and files: images and other documents you choose to upload or import, and reports you choose to download or share. Only provide information that you are authorised to use.
- Farm locations: addresses, map searches, field boundaries and coordinates entered or selected for farm-management features. These are distinct from continuous tracking of a device's location.
- Subscription information: app or organisation identifiers, purchase tokens or receipts, transaction identifiers, subscription plan, purchase history and entitlement status. Mobile payments are processed by the app store; Hearthstead does not receive your full payment-card details from the store.
- Technical and support information: IP address, browser or device and operating-system information, request and error logs, app version, and messages or attachments you send for support. Hosting and integrated service providers may process technical information when your device connects to them.
How we use information
We use this information to create and authenticate accounts, apply organisation permissions, provide farm-management functions, synchronise offline work, produce reports, manage subscriptions, send operational emails, respond to support and privacy requests, investigate errors, protect the service and meet applicable legal obligations. The service is not operated to sell personal data or provide targeted advertising.
Device permissions and local storage
Image and file features may request access to photos, the camera or device storage, depending on your device and the feature used. You control those permissions in device settings. Declining access can prevent the related upload or export feature from working.
Hearthstead stores sign-in information, preferences, cached records and queued offline changes on your device or in browser storage. Queued changes are sent to the service when synchronisation runs with a connection. Clearing app or browser data can remove unsynchronised work. Exported files and copies you share remain outside the app's control.
Who may receive information
- Your organisation: authorised administrators and users can access records according to their roles and farm or company access. Your organisation determines how it uses the business records it enters.
- Operational recipients: purchase orders, delivery documents, reports and notifications may be sent to suppliers, customers, accountants, administrators or other recipients configured for your organisation. Information is also shared when you choose to export a file or use your device's sharing options.
- Hosting, database and communications providers: Google Cloud, MongoDB Atlas and email delivery providers process information to store and deliver the service and its operational communications.
- Subscriptions: Google Play or Apple App Store, as applicable, and RevenueCat process purchase and entitlement information. Hearthstead links RevenueCat identifiers to the relevant account or organisation to manage subscription access. See RevenueCat's privacy policy and Google's privacy policy.
- Maps, fonts and embedded services: Google Maps and Google Fonts receive technical requests when those resources load. Map searches and selected locations are processed for mapping features. WeatherLink or other organisation-configured embedded content can receive connection information when you view it and may use its own cookies or storage. These providers' privacy policies govern their own services.
- Legal and security needs: information may be disclosed where required by applicable law or reasonably necessary to investigate misuse, protect rights or respond to a lawful request.
Service providers and your organisation's recipients may process information in countries other than your own. Contact us if you need information about the processing of your account's data.
Security
The production service uses HTTPS, account authentication and role-based access controls. Password verification uses salted password hashes. Access to your organisation's records depends on its configured permissions. Protect your credentials and device, and tell us promptly if you suspect unauthorised access. No storage or transmission method can guarantee absolute security.
Retention and deletion
Account and business records are kept while needed to provide the service and support the organisation's records. Hearthstead does not automatically erase historical business records merely because a user is disabled, an app is uninstalled or a subscription ends. Deletion requests are handled manually.
When we receive a verified deletion request, we review the account and associated personal data for deletion or anonymisation, including relevant service-provider records. Information that must be retained for a legal obligation, fraud prevention, security or an unresolved dispute is restricted to that purpose for as long as that reason applies. We explain relevant exceptions and expected handling time when responding; disabling access alone is not treated as completed deletion.
Your organisation's shared records may contain information about other people or transactions that it is required to retain. We review these records with the organisation rather than deleting another person's data without authority. Backup copies and third-party records may require separate handling; we will explain any limits relevant to your request.
Your choices and privacy requests
You can request access to, correction of, or deletion of your personal information by emailing cameronbrettedwards@gmail.com. You may also contact your organisation's administrator about records it controls. Depending on applicable law, you may have additional rights to object to or restrict processing, withdraw consent, obtain a copy of your data or complain to a data-protection authority.
Request account and data deletion
We may ask for information needed to verify your identity or authority. Do not send your password, payment-card details or identity documents with an initial request. Deleting an account does not automatically cancel an app-store subscription; manage cancellation through the relevant app store.
Children
Hearthstead is intended for farm and business use, not directed to children. If you believe a child has provided personal information without appropriate authority, contact us so we can investigate and address it.
Changes to this policy
Updates will be published on this page with a revised date. Where a change requires additional notice or consent, that will be provided through the service or the relevant communication channel.