Privacy

Last updated 3 August 2026

EquiDiary is a private journal for your horse. We keep only what the app needs to work, and we don't sell it, share it, or track you.

What we store

• Your account — your first name, surname, and email, plus your password stored only as a salted hash (never in plain text).
• Your horse records — the horses, people, and events you enter: dates, categories, treatments, notes, and prices.
• Photos and documents (such as PDF vet reports) you upload for a horse, a person, or yourself.
• Messages you send us from the Help page — your question, idea, or problem report, kept so we can read it and reply to your account email.
• Where your account came from — recorded once when you register, and only ever one short label: the tag on one of our own links (say a campaign we ran), or otherwise the name of the site you followed a link from, such as facebook.com. Never the page you were on, never anything about what you were reading, and nothing at all if you came here directly.
• A sign-in cookie so you stay logged in. It's the only cookie we set, and it exists purely to keep your session.
• A note that an account existed — one line when an account is created and one when it is deleted, holding the dates and a scrambled form of the email address, never the address itself. It is the only thing that outlives a deleted account, and it exists so we can answer "was there ever an account here?" when something looks wrong. The scrambling is one-way and uses a key only the app holds, so nobody who gets at the database can read an address out of it — we can only check it against an address someone already gives us.

What we don't do

• No advertising, no ad networks.
• No analytics or third-party trackers — nothing follows you around the web.
• We never sell or rent your data, and we don't share it with anyone outside the people you choose.

Photos, documents & voice notes

Photos and documents are stored in Cloudflare's object storage and are private — a horse's files are visible only to its owner and the people that horse is shared with. When you dictate a note, the short audio clip is sent to Cloudflare's on-platform AI to turn it into text and is not kept afterwards; only the text you save stays in your journal.

Sharing is yours to control

A horse's owner decides who can see it. When you invite a rider, coach, vet, or farrier, you choose whether they can view only, or also add and edit events. You can remove anyone's access at any time, and doing so leaves the horse's record intact.

Where your data lives

EquiDiary runs entirely on Cloudflare — the app, the database, and the photo storage. Staging and admin areas are additionally protected behind Cloudflare Access.

Deleting your data

You can delete your account yourself under Account → Delete my account — it removes your horses, events, people, custom categories, photos and documents, the messages you sent us, and sessions immediately and permanently. The single exception is the one-line note described above — the dates the account was created and deleted, with the address kept only in the scrambled form that can't be read back. Prefer we do it? Email support@equidiary.com from your account address.