Scope
Caprine Compass is the name of a software service owned and operated by Vaught Family Farm, LLC, an Indiana limited liability company. In this Privacy Policy, references to “we,” “us,” “our,” or the “operator” mean Vaught Family Farm, LLC as the owner and operator of the service.
This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use the Caprine Compass website, progressive web app, mobile-distributed versions, family invitations, notifications, and related services.
Information we collect
Account and family information. We may collect your name, email address, account/user identifiers, authentication information, family/herd membership, role, invitation history, account settings, and information needed to operate and secure the service.
Password safety screening. When a new password is created or an existing password is changed or reset, Caprine Compass checks it against known compromised passwords using the Have I Been Pwned Pwned Passwords service. The candidate password is hashed on the Caprine Compass server solely for this check. Only the first five characters of the SHA-1 hash are sent to the Pwned Passwords range API; the full password, complete password hash, account email, and family information are not sent to that service.
Herd and project information. Information you or another authorized family member enter may include goat profiles and pedigrees, animal health and care records, weights, breeding and kidding records, dairy production, show records and judge feedback, tasks, goals, learning results, expenses and income, notes, photos, documents, and related project records. References to animal health in this policy are livestock records and are not human medical records.
Activity and audit information. Caprine Compass may record actions such as creating, updating, completing, importing, or deleting family records, together with the account identifier, time, affected record, and limited action details. This supports family accountability, troubleshooting, security, synchronization, and data integrity.
Device and service information. We may process browser/device information, authentication/session identifiers, security and diagnostic information, push-notification subscription identifiers and browser information, and information needed to synchronize records. When Offline Fair & Barn Mode is used, selected herd/show information and queued records may be stored locally on that device until they are synchronized or removed.
Support and feedback. If you contact us or submit feedback, we process the information you provide, the related account/family identifier, and limited page or service context so we can respond, troubleshoot, and improve the service.
Subscription and payment information. If paid subscriptions are enabled, Stripe processes payment-card and billing information on our behalf. We do not store complete payment-card numbers. Caprine Compass may store or receive subscription-related information such as the applicable plan or tier, trial status, a Stripe customer identifier, and subscription status needed to provide paid features and prevent duplicate or orphaned subscriptions.
Where information comes from
We receive information directly from account holders and authorized family members, automatically from the browser/device when needed to provide or secure the service, and from service providers that support authentication, hosting, email delivery, storage, password safety, and payments.
How we use information
We use information to provide herd and project features; authenticate users; keep family records synchronized; enforce family roles and plan limits; maintain family audit history; operate offline queues; deliver requested notifications; process invitations, account recovery, exports, reports, and subscriptions; screen newly selected passwords against known compromised-password data; prevent abuse and unauthorized access; diagnose problems; maintain service reliability; and improve Caprine Compass.
Family sharing and permissions
Caprine Compass is a family-scoped service. People in the same family/herd can see information according to their assigned role. Owners and administrators control family access. Some records identify the family member who created, updated, or completed an item so the family can maintain an audit trail. Removing a person from a family ends future access but does not automatically erase shared herd history created while that person had access.
Service providers
We use service providers to operate Caprine Compass, including Vercel for hosting and application delivery, Supabase for authentication/database/private storage, Resend for transactional email, Have I Been Pwned Pwned Passwords for privacy-preserving compromised-password screening, and Stripe for subscription payments when billing is enabled. These providers process information on our behalf or as otherwise described by their own terms and privacy notices.
No sale of personal data or targeted advertising
We do not sell personal information and do not use personal information for third-party targeted advertising. We do not operate an advertising network or provide family/herd records to data brokers.
Notifications
Browser push notifications are optional. If you opt in, we store the push-subscription information required to reach that browser, which can include a unique push endpoint, encryption keys, browser/user-agent information, notification preferences, and delivery status. Notifications can be disabled in Caprine Compass or through your browser/device settings.
Children and youth exhibitors
Caprine Compass is intended primarily for adults managing dairy-goat families, herds, and livestock projects, with limited access for invited teen exhibitors. Children under 13 may not create or operate their own Caprine Compass account.
Direct account creation is for users age 18 or older. A user age 13 through 17 may create an account only through an adult-managed family invitation and only with permission from a parent or legal guardian. Parents, guardians, leaders, or other responsible adults may enter livestock-project information about youth participants and decide what information belongs in the family account.
If we learn that a child under 13 created an account or directly provided personal information through an account without an appropriate lawful basis, we may suspend the account, delete the information, and work with the parent or guardian as appropriate. A parent or guardian may also request access to or deletion of a minor's personal information by using the family/account tools or contacting us as described below.
Your choices and privacy rights
Caprine Compass provides tools to review and update account and family records, export family data, remove family members, delete eligible individual accounts, and permanently delete an owned family. Depending on where you live, you may also have legal rights to request access, correction, deletion, portability, or information about how personal data is used. We will honor applicable rights and may also honor reasonable requests when a specific law does not require us to do so.
We may need to verify your identity and authority before acting on a privacy request, especially when a request involves shared family records or a minor.
Data retention and deletion
We keep account and family information for as long as reasonably necessary to provide the service, maintain shared family history, comply with legal obligations, resolve disputes, prevent fraud or abuse, and enforce agreements. Family Owners can permanently delete an owned family through the Account & Data workflow. Eligible users can delete their individual login. Owners must transfer ownership or delete owned families before deleting their login.
Family deletion is intended to remove the family's application records and referenced private cloud files. Payment processors and other providers may retain records required for fraud prevention, accounting, tax, security, or other legal obligations. Deleted information may also persist temporarily in provider backups until those backups cycle out under normal retention schedules.
If you cannot sign in or no longer have the app installed, you can use our public Account Deletion page to request deletion.
Exports and backups
Owners and administrators can use Data Safety tools to export family information. Exported backups and file manifests are outside the service's security controls after download, so the person downloading them is responsible for keeping them secure.
Security
Caprine Compass uses encrypted network connections, authenticated access, family-scoped authorization, row-level security, private file storage, server-only privileged secrets, role checks, compromised-password screening for newly selected passwords, duplicate protections, and other technical and organizational safeguards designed to reduce unauthorized access or loss. No internet service can guarantee absolute security.
Changes to this policy
We may update this Privacy Policy as the product, legal requirements, or service providers change. The effective date above will be updated when a revised policy is published. Material changes may also be communicated in the app or through account communications when appropriate.
Contact and privacy requests
Signed-in users can use the in-app Feedback page for privacy questions, access/deletion requests, or account concerns that are not handled by the available self-service tools. You may also contact privacy@caprinecompass.com directly. If you cannot sign in, use the public Account Deletion page for deletion requests.