Privacy policy
Last updated: 14 August 2026
The short version: Drover doesn't run a server that stores your farm records. Every record you enter stays on your phone. If you turn on cloud backup, your records are uploaded to your own Google Drive (Android) or iCloud (iOS), in an area only Drover can read — Drover Ltd has no access to your cloud-stored data either. Signing in and paying for a subscription happen through Apple and Google; what comes back stays on your phone too.
Who we are
Drover is operated by Drover Ltd, a company registered in England and Wales (company number 17288697), based in the United Kingdom. Contact: privacy@getdrover.co.uk.
What data Drover collects
Data stored locally on your phone
Drover stores the following on your device, in a local SQLite database that is never transmitted to Drover Ltd:
- Records you enter manually: treatments, medicine purchases, feed deliveries, compliance documents, farm map pins, etc.
- Photos and PDFs you attach to records (e.g. receipts and prescriptions).
- App preferences such as your selected farm assurance scheme and notification settings.
- Your sign-in details, if you sign in — see Signing in below.
Data stored in the cloud (only if you opt in)
If you enable cloud backup, Drover packages the local database and attached files into a single backup file and uploads it over an encrypted connection to:
- On Android: Google Drive's appDataFolder — a hidden namespace tied to your own Google account that only Drover can read. Drover Ltd has no access to it.
- On iOS: your iCloud private database via Apple's CloudKit. Drover Ltd has no access to it.
You can disable cloud backup or delete the cloud backup at any time from within the app. See how to delete your data.
Data we don't collect
Drover does not:
- Collect analytics or telemetry about how you use the app.
- Track your location for advertising or profiling purposes.
- Use the Android Advertising ID or any equivalent identifier.
- Show advertisements.
- Share your records with anyone — including third parties, farm assurance schemes, or the government — without your explicit action.
Signing in
Drover asks you to sign in for one reason: to know whether your subscription is active, and to let you restore it if you change phone. You sign in with an account you already have — Sign in with Google on Android, Sign in with Apple on iOS. Drover never asks you to create a password and never sees the one you use with Apple or Google.
What Drover receives back from Apple or Google, and keeps on your phone:
- A stable account identifier issued by the provider.
- Your email address. If you use Sign in with Apple and choose Hide my email, Drover only ever sees Apple's private relay address, not your real one.
- Your display name, if the provider supplies it.
These are stored in the app's own settings on your device. Because Drover Ltd operates no server, they are never transmitted to us and we hold no account record for you. Signing out removes them from the device.
Subscriptions and payments
Subscriptions are sold and processed entirely by the App Store and Google Play. Payment is handled under your existing Apple or Google account, and Drover Ltd never receives or stores your card details, billing address, or payment method — the app is told only whether an active subscription exists.
Apple and Google act as merchant of record for these sales and hold the transaction records; their respective privacy policies apply to that data. Manage or cancel your subscription in the App Store or Google Play, not in Drover. See also VAT invoices.
Device permissions
Drover asks for a small number of permissions, each tied to a specific feature. All of them work on the device; none of them send anything to Drover Ltd.
- Camera — scanning the barcode on a medicine box, and taking photos to attach to records.
- Approximate location — centring the farm map on where you are. Drover does not record a location history and does not track you in the background.
- Bluetooth — finding and connecting to EID tag readers. Android is told explicitly that Drover's Bluetooth scanning is never used to work out your physical location.
- Notifications — reminders that a withdrawal period is ending. These are generated on your phone; no reminder passes through a server.
Third-party services
Drover uses a small number of third-party services to function:
- Sign in with Google and Sign in with Apple (subscription sign-in): the provider authenticates you and returns the details listed above; Google's and Apple's privacy policies apply.
- Google Drive (Android cloud backup): your data lives in your own Drive account; Google's privacy policy applies.
- Apple iCloud (iOS cloud backup): your data lives in your own iCloud account; Apple's privacy policy applies.
- Mapbox (farm map tiles): when you view the farm map, Drover requests map imagery from Mapbox. Mapbox sees the IP address and approximate location of the map tile being viewed; Mapbox's privacy policy applies.
- App Store and Google Play (app distribution and subscription billing): standard app-store mechanics; their respective privacy policies apply.
Your rights (UK GDPR)
Because Drover doesn't run a server that holds your records, the practical exercise of these rights is mostly under your own control:
- Right to access: all your records are on your phone, viewable inside the app.
- Right to erasure: Settings → Delete all data wipes every record, attachment and setting from the phone and deletes the cloud backup. See how to delete your data.
- Right to portability: Settings → Export data downloads every record as a ZIP of CSV spreadsheet files, openable in Excel or any spreadsheet app. Drover also produces PDF reports for compliance audits. More export formats can be added on request.
- Right to object / rectify / restrict: all data is directly editable from inside the app.
If you have a complaint, contact us first at privacy@getdrover.co.uk. You have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
Retention
Drover Ltd does not retain any user data on any server. The local data on your phone and the cloud backup in your own Drive / iCloud are retained for as long as you want them — Drover never deletes them automatically.
When you uninstall the app, all local data is removed by the operating system, and the cloud backup is automatically deleted by Google Drive / iCloud shortly after.
Children
Drover is intended for adult professional use by livestock farmers and is not directed at children under 18.
Changes to this policy
We'll update this page if the policy changes. Material changes will be flagged in the app on next launch. The "Last updated" date at the top of this page reflects when it was last revised.