Privacy

How BFCD Apps looks after your information

Last updated 23 October 2026

BFCD Apps is a small set of personal and family apps (Roamulus, reLight, Shelf, ePigeon, Bud, Primo, Fitness, Vault, Journey Cost and the others listed on bfcd.co.uk). They share one account at bfcd.co.uk. This page covers all of them. To ask anything about it, email info@bfcd.co.uk.

The short version

• We keep what you put into the apps so they can work, and nothing more.
• No adverts, no selling or sharing your information for marketing, and no tracking across other websites.
• Other people only see what you share with them in an app (for example, the people on a trip).
• You can delete your account, and everything in it, from your profile at any time.

What we keep

• Your account: your email address, the name and profile picture you choose, which apps you use, who you're connected with, and when you signed in (kept for 60 days, to keep accounts safe).
• Service reliability: which app your account successfully connects to and the latest observed time, kept for 90 days, help us understand usage and investigate problems. Detailed hub error and slow-response records are kept for 30 days and contain no account identity, request contents or full URLs. Administrative access and changes are recorded for up to a year for security; aggregate daily account totals are also kept for a year.
• What you add to the apps: for example trips, plans, bookings, costs, documents and diary entries in Roamulus; shared questions, answers and memories in reLight; books in Shelf; newsletter answers and photos in ePigeon; plants and photos in Bud; and health readings in Fitness. Private documents in Vault and the private journal in reLight are locked with your PIN.
• Your location, only when you ask: to find places near you, or, if you switch on "Show where I am" in Roamulus, to show the people on your trip where you are. It's only shown while it's less than 12 hours old, and it's deleted as soon as you switch it off.
• Alerts: if you turn on notifications, the address your device gives us for sending them.
• On your device: the apps keep a copy of your own information on your phone or computer so they open quickly and work with no signal. Signing out removes it.

Who else handles it

• Cloudflare runs the apps and stores their information.
• Resend sends our emails (sign-in codes, invitations and reminders you've chosen), so it receives your email address and the email.
• Lookups: when you search for a place, a book, a show or the weather, ask for an exchange rate or a route, or look up a flight number in Roamulus, the words, places or flight number you're looking up are sent to the service that answers them (OpenStreetMap, Photon, Open Library, Google Books, Spotify, Apple's iTunes Search, TVMaze, Open-Meteo, Frankfurter, ExchangeRate-API, postcodes.io, OSRM or adsbdb). They aren't sent who you are.
• Plant advice in Bud sends the plant's name and its photo to Anthropic, which writes the care advice. Anthropic doesn't use it to train its models.
• Maps and fonts are loaded from OpenStreetMap and Google Fonts, which see your device's internet address, as any website you visit does.

We don't share your information with anyone else unless the law requires it.

How long we keep it

For as long as you have an account. When you delete something, it's gone from the apps straight away. Backups, kept to recover from mistakes, are removed after 35 days, except a copy from the first of each month, which is removed after a year. So a year after you delete something, no copy of it is left.

Deleting your account

Go to your profile and choose Delete your account (in an app, it's under Settings). You're signed out of every app at once. Within about half an hour we email you a link to download a copy of everything you had, which works for 30 days. After those 30 days, every app erases your information and the account is gone. If you change your mind before then, email info@bfcd.co.uk and it can be stopped.

Your rights

You can see, correct, download or delete your information, and object to how it's used. Most of this you can do yourself in the apps; for anything else, email info@bfcd.co.uk. If you're in the UK you can also contact the Information Commissioner's Office (ico.org.uk).

Children

The apps are made for families. A child's information is looked after in the same way, and a parent or guardian can ask for it to be deleted.

Changes

If this page changes, the date at the top changes too. Anything that changes what we do with your information will be explained in the apps first.