Privacy Policy

Effective: October 1, 2026

What stays on your device

Whatever you enter is written to storage on your iPhone or iPad and nowhere else:

• your harvest start date and your list of preserve types;
• batches: date made, number of jars, container, keep-until date, optional cost and notes;
• storage places (pantry, cellar, freezer and any you add);
• use records, meaning the jars you opened, gave away or wrote off;
• plans for the next harvest;
• one photo per batch, if you take one, and one voice note per batch, if you record one: both are files kept in the app’s private storage on the device (see Permissions);
• the name of the person you gave jars to, as text on that use record;
• app settings, including reminder times; your PIN is kept in the iOS Keychain.

None of this is uploaded. The developer of Bumper Year cannot see it, recover it or delete it for you.

Backups

The app has no sync and no backup of its own. If you back up your device to iCloud or to a computer, iOS may include the app’s data in that backup. That backup is controlled by you and by Apple, and is covered by Apple’s terms, not by the developer of Bumper Year.

Network

The app does not connect to the internet. A network is involved only when you open one of these pages from the app in Safari, or when you send something out yourself with Share. These pages use no cookies, scripts, fonts or counters.

Permissions

The app asks for each permission only when you tap the feature that needs it, never at launch or while you browse. If you say no, that feature is unavailable and the rest of the app keeps working. You can change any of them later in iOS Settings.

Camera

WhyTo take a photo of a jar or its label and keep it with the batch, so you can recognize it on the shelf. One photo per batch.

WhenThe first time you choose to take a photo of a jar or its label in the batch form.

StaysThe photo is saved as a file in the app’s private storage on your device and linked to the batch. It is not added to your Photos library and is not sent anywhere. If you decline, the batch saves without a photo.

RevokeSettings → Bumper Year → Camera.

Contacts

WhyTo suggest the name of the person you gave jars to from your contacts, so you don’t have to type it.

WhenThe first time you ask for a name suggestion from your contacts while recording a jar as given away.

StaysThe app searches your contacts by the name you type. Contact cards are not saved and your address book is not copied or uploaded; only the recipient name you end up with is stored, as text with that use record on your device. If you decline, you type the name yourself.

RevokeSettings → Bumper Year → Contacts.

Face ID

WhyTo unlock your pantry records quickly, so you don’t have to type your PIN.

WhenAfter you set a PIN, and on the lock screen when you choose Face ID.

StaysiOS performs the check. The app only learns whether it succeeded and never receives your face data. Your PIN stays in the Keychain on the device.

RevokeSettings → Bumper Year → Face ID. The PIN keeps working.

Location, while using the app

WhyTo suggest a harvest start date for your area, so your balance counts down to the right day.

WhenThe first time you choose to detect the harvest start from your location in the harvest start settings. Not at launch and not during the introduction.

StaysThe app asks for your position once, while it is open, and uses only its latitude to pick a suggested date. The position is not stored or sent anywhere by the app. What you keep is the harvest start date you accept or change yourself. The app never uses location in the background. If you decline, you choose the date by hand.

RevokeSettings → Bumper Year → Location.

Microphone

WhyTo record a short voice note for a batch, so you can keep recipe details without typing. One note per batch, up to two minutes.

WhenThe first time you start recording a voice note in the batch form. Playing a note you already recorded needs no permission.

StaysThe recording is an audio file (AAC) kept in the app’s private storage on your device and linked to the batch, until you delete the note. The app records sound only; it does not turn speech into text, and the audio is not uploaded or sent anywhere. If you decline, the batch saves without a note.

RevokeSettings → Bumper Year → Microphone.

Photos, add only

WhyTo save a batch label image to your Photos, so you can print it later from any app.

WhenThe first time you choose to save a batch label image to Photos.

StaysA copy of that one label image is added to your library. The app has add-only access: it can add pictures and cannot read your library. From then on the copy belongs to Photos and follows your Photos settings. If you decline, printing and Share still work.

RevokeSettings → Bumper Year → Photos.

Notifications

WhyTo remind you which jars to open next.

WhenAt the last step of the first-run introduction.

StaysReminders are local: they are scheduled on your device and sent by no server.

RevokeSettings → Bumper Year → Notifications, or the switch inside the app.

Labels and PDFs you share

Jar labels are made on your device as a PDF or an image. They leave the app only when you pick a destination in the iOS Share menu, and from that point they are handled by the app or service you chose. The reference guides are PDF files packaged inside the app.

Deleting your data

Delete Bumper Year from your device and its data is erased with it. Nothing is stored anywhere else, so there is nothing further to delete. Copies you shared, images you saved to Photos, and device backups made earlier are outside the app and stay until you remove them.

Children

The app collects no data about anyone, including children. It has no accounts, no chat and no ads.

Changes to this policy

If the app ever changes what it does with data, this page will be updated first and the date at the top will change. The version published here is the current one.

Contact

Questions about this policy: remikaurpaju51@icloud.com. See also the Terms of Use.