The second part of the summary of the draft Privacy Policy, version 2.4 (29 October 2026). A draft, not yet in force, and not legal advice; the policy prevails. The first part is Privacy Policy: summary.
Security #
- Encrypted server disks and database volume; photos on the encrypted volume.
- Encrypted backups, messages included.
- HTTPS, with an encrypted tunnel between the relaying service and the server.
- Passwords stored only as strong hashes; two-factor sign-in (always on for password sign-in; an authenticator app or passkeys can be added); short-lived access tokens; refresh tokens stored only as hashes.
- A separate database schema per account and role-based access; messages in their own schema with their own database login.
- No third-party analytics or crash reporting.
On your device the app encrypts your data with your own key, fetched at a fresh sign-in and unlocked by your sign-in or your device's own unlock. "My account" > "Data & storage" has "Lock after leaving the app" and a "Recovery key". Your device's own security (screen lock, updates) is your responsibility.
Messages #
Messages are stored on the server, encrypted at rest but not end-to-end, so BreedMap could technically read them. Staff read only a message that a user reports, plus a few messages before and after it in the same conversation (by reporting, you agree to that). Nothing else is read, except where the law or an authority requires it or a security incident must be investigated. Message content is never used to train AI models or for analysis.
A message is kept until a user deletes it; the sender can also delete it from the recipient's mailbox. Messages in the Other mailbox are deleted 12 months after they were received. When an account is deleted, its messages stay visible to their recipients with the sender shown as "Former member". Friends, contacts, blocks, messaging settings and the push device token are deleted with the account.
A push notification shows a generic text unless you choose the sender's name or a preview in "Messages settings" > "What a push shows"; the name or preview then passes through the device platform's push service. Messages in the Other mailbox never cause a push. See Messages.
Support requests #
When you ask a person for help in the help assistant ("Send to support"), your request and the last assistant answers in that chat are read by BreedMap's administrators and owners, who answer as "Breedmap support" in Messages. Moderators cannot see support requests. Support requests and replies are kept only as long as needed to answer and follow up.
Help assistant #
Normal help assistant questions are not stored; chats stay on your device unless you turn on "More" > "Sync chat history", which keeps a sealed copy on the server until you clear it, turn sync off, or 12 months pass without a change. Questions that break the rules, and questions it could not answer, are logged briefly (time, category and a short snippet of the question, kept 90 days) so the help can be improved. Rating an answer sends that question and answer to BreedMap.
Breaches and changes #
Personal data breaches are handled under the GDPR, with notice to the supervisory authority and to the people affected where required. The policy may change when the law, the service or the controller's details change; material changes are announced in the service or by email.