A little less admin. A lot more connection.·By AnyBizHub
AnyBizHubExplore My BNI
CLEAR INFORMATION. INFORMED CHOICES.

Privacy policy

A clear distinction between this information website, app data, optional features and the choices available to you.

My BNI draft prepared: 23 September 2026Provider: AnyBizHub
CAKE BUILDER · PRIVACY

Cake Builder privacy notice

Effective: 21 October 2026. Cake Builder (com.soance.cakebuilder) is provided by Soance Innovations LLP. This notice covers the Android and iOS apps and the cake studio at cakebuilder.soance.com. The notices for Quotation Builder, FitKadam and My BNI on this page apply to those separate products.

For Cake Builder support or privacy requests, email [email protected] or visit Cake Builder support.

All-ages design and adult account features

Anyone can browse the public cake menu and design a cake without an account. Accounts, order requests and creating or changing public links are for adults aged 18 or over. A neutral age check offers under 18, 18 or over, and prefer not to answer. Selecting under 18 or declining keeps those account features unavailable; browsing and local design remain available. We do not request a birth date, identity document or a child's account details.

The age eligibility choice is kept on the device. An adult confirmation is sent when adult features are enabled, and the website uses an eligibility cookie. We do not keep a date of birth or age-history record in the account database. Cloudflare Turnstile is loaded only after adult eligibility has been confirmed. Ordinary hosting and security processing still applies to requests for public pages and menu data.

Information we process and why

Registering provides your name and email address; your password is stored as a secure hash. We use account identifiers and sign-in records to authenticate you, manage your requests and recover your account.

An order request contains the customer name, phone number, preferred pickup date and time, cake specifications, both cake-message lines when filled, customer notes and an optional generated cake preview. Saved requests also contain price estimates, administrator quotes, status, timestamps and private preparation notes. Cake Builder's authorised administrators use these details to review and respond to the request and arrange fulfilment. A cake preview is generated from your design, not a photo taken from your camera or photo library.

We use technical request details, security checks and operational logs to deliver the service, investigate failures and limit abuse. If you contact support, we receive your message, contact details and any attachments you choose to send, and use them to respond. Please do not send passwords or unnecessary personal information.

Public cake and order links

Sharing is optional and requires acceptance of the Cake Builder community guidelines. We store the accepted guidelines version and acceptance time. A public cake link exposes the cake design; a public order link exposes cake specifications, estimates, status, any quote and creation/update information. Visibility controls let you choose whether the available name, cake message, customer notes and pickup/delivery schedule fields appear. The phone-number field and private preparation notes are excluded from public order responses. Avoid putting private contact information into messages or notes you choose to publish.

Hiding a field changes public visibility; it does not remove the complete design, order or private preview stored for your account and the administrators. Hiding a cake message suppresses both message lines. Uploaded preview images are not served publicly; public pages use the structured cake design and trusted menu thumbnails.

Anyone with a public link can view or forward it, and can customise a copy of the design. Messaging and social services may fetch and cache public link previews, including text you chose to publish. You can change visibility, revoke an order link, or delete its order. Cake links have no automatic expiry; account deletion removes your cake and order links. Changes cannot recall copies independently saved by other people or services.

Reporting and blocking

Public text is checked for objectionable language. You can report a shared cake or order without signing in. A report contains its link reference, selected reason, optional details and submission time; security controls may use a hashed network identifier to limit abuse. Do not include unnecessary personal information in a report. Authorised administrators review reports and can remove content or disable an account's public sharing.

Public links contain a random creator key for the block feature, not the creator's email address or internal account identifier. Blocking keeps that creator's content hidden on the current device/browser. The blocked-key list is stored locally, is not account-synced and can be reset by clearing the relevant app or browser data.

Device storage, sessions and permissions

The native app stores favourites, saved design names and details, cake messages, timestamps, preview PNGs and preferences in app-private device storage. These local designs are not account-synced unless you submit or share them. Sign-in tokens and cached account identity are kept in protected device storage. The website and embedded studio also use browser storage for a cake draft and cookies for sign-in and adult eligibility.

Local drafts can remain after signing out. In-app account deletion clears the native favourites and saved-design collection on that device, but does not erase the studio's browser draft or copies on other devices. Remove saved designs in the app, and clear the relevant browser or app website data to remove remaining local drafts. Uninstalling the app alone does not delete your server account.

Server sign-in tokens are stored as hashes. Sessions expire after 30 days; one-use native-app-to-studio sign-in tickets expire after 60 seconds. Session expiry is not a promise that every historical security record is immediately erased. Requests use HTTPS. The release has no advertising or analytics SDK and does not request camera, microphone, contacts or precise-location permission. We do not sell your personal information.

Service providers

Cloudflare hosts the service, database, private preview storage and fonts, and processes network/device information, including IP address, browser/device details and country inferred from network requests, for delivery, abuse prevention and operational logging. We store hashed rate-limit identifiers for security. Adult account and order actions use Cloudflare Turnstile; Cloudflare may also use its security signals to improve its bot-detection service under its own privacy practices. When you request password recovery, Resend receives your account email address and a message containing a short-lived reset link for transactional email delivery, not your account password.

Fonts are packaged with the app or served by Cake Builder's own website; the studio does not request them from Google Fonts. Providers may process information outside your country. External email, browser, app-store and sharing services you choose operate under their own privacy practices.

Retention, deletion and your choices

Account information, orders and shared cake records remain in the active service until removed. You can delete individual orders in My orders; deleting an order also removes its active public order link and attached preview. You may request deletion of specific information without deleting your whole account by emailing the privacy contact below.

For account deletion, use Account → Delete account in the app or the Cake Builder account deletion page. After password confirmation, deletion removes your active account, sign-in sessions, reset tokens, owned order/share records, their attached previews and public links. Deletion is permanent. Security identifiers, operational logs, backups and independently retained copies are separate from those active account records; this notice does not promise immediate erasure of every historical copy.

You can request access, correction or deletion of information you have supplied to us by emailing [email protected]. Identify Cake Builder and the email used for your account; do not email your password. We may need to verify that the request is yours. Contact us if you believe a child has supplied personal information through an adult feature, so we can investigate and remove it as appropriate.

Physical orders and notice updates

Cake Builder sends requests for physical cakes. No payment or card details are taken in the app. An authorised Cake Builder administrator must confirm availability, the final design, price and pickup arrangements. Account or order deletion does not cancel arrangements already confirmed outside the service; contact Cake Builder support about those arrangements.

Only include information necessary for your cake request, including when a cake is for a child. We will update this notice and its effective date when Cake Builder's data practices change.

QUOTATION BUILDER · PRIVACY

Quotation Builder privacy notice

Effective: 13 October 2026. Quotation Builder (com.soance.quotationbuilder) is provided by Soance Innovations LLP. This notice applies to Quotation Builder on iOS and Android. The notices for other products on this page apply separately. For support and privacy questions, contact [email protected].

Information on your device

The app stores the information you enter on your device: company details, optional logo and header/footer artwork, product and service descriptions and prices, customer contact details, quotation contents, settings and templates. Drawn or uploaded signature images, entered signer names and roles, recorded signing times, public certificate details and signed PDFs are stored with the quotation when you use signing features. This information is used to organise your workspace, fill quotation details from saved products, and generate or retain PDFs and email drafts.

Quotation Builder does not require an account and does not send your workspace to our servers. This version includes no advertising, analytics, tracking or cloud-sync service. We do not collect or sell your quotation, product or customer data through the app.

Files, sharing and email

You choose logo, header, footer or signature images, JSON files and signed PDFs through the device file picker. Exported PDFs and JSON backups contain the information you selected or stored. A quotation signing copy contains the selected quotation, its letterhead and any recorded signatures or archived signed PDF; it does not include unrelated quotations, customer lists or catalog items. When you choose a share target, printer or email application, the selected content is passed to that service. Email drafts are not sent by Quotation Builder; sending is controlled by your email application. Review recipients and attachments before sharing. The privacy practices of services you choose apply to copies they receive.

Certificate signing

When you select a compatible PFX or P12 certificate, the certificate file, private-key information and password are used temporarily in memory on your device to sign the PDF. The app does not save those signing credentials in its workspace, backups or signing copies, and does not send them to our servers. Your original certificate file remains in the location you selected. Signed PDFs contain public certificate and signature information that can be seen by recipients. If you use a separate DSC tool or signing provider, its own privacy practices apply. Do not send certificate files, private keys or passwords to another party or to support.

Retention, deletion and security

Saved workspace information remains on the device until you edit or remove it, replace it by importing a backup, or remove the app's local data through your operating system. We cannot remotely access or delete this local workspace. Exported files, sent emails and copies held by other applications or device backup services must be managed separately. Use device access controls and keep exported files in a location appropriate for their contents. PDF and JSON exports are not password encrypted by this app.

Support and changes

If you contact support, we receive the message, your contact details and any attachments you choose to send, and use them to respond to your request. Do not send passwords or unnecessary customer information. You can ask about access, correction or deletion of information you have supplied to support using the contact above. The app is intended for business use and is not directed to children. We update this notice when the app's data practices change.

FITKADAM · PRIVACY AND ACCOUNT DELETION

FitKadam privacy notice

Effective: 10 October 2026. FitKadam is provided by Soance Innovations LLP. This section covers FitKadam; the My BNI draft below applies to a separate product. For FitKadam support and privacy requests, contact [email protected].

Information used by FitKadam

When you create an account, we process your email, account identifier and profile information. Information you choose to enter can include your name, age, body measurements, goals, fitness preferences and health considerations; workouts, activities and GPS routes; food, hydration, steps, sleep, mood and recovery entries; journal notes, coach messages and memories; meal and progress photos; and feedback. Purchase references and entitlement status support optional Plus access. Notification tokens support optional notifications.

Account data is stored using Supabase. Account features require sign-in; guest previews can keep data on your device. Member activity and health entries can be saved locally while cloud sync is pending. Data remains associated with your account until you remove it or delete the account.

Optional permissions and AI

Camera access is used when you take a meal or progress photo. Location access is used for optional foreground route tracking, which pauses when you leave the app. On supported Android devices, Health Connect optionally imports recent step and sleep totals when you choose to connect or sync; FitKadam does not write Health Connect records. The current iOS build uses manual steps and sleep entries and does not request Apple Health access. You can decline or revoke permissions and use manual entries.

OpenAI is the configured provider for FitKadam's optional AI coaching, personalized plans and meal-photo estimates. Selected messages, conversation context, profile preferences and goals are sent through our backend for these features; meal estimation sends the selected meal photo. Progress photos are not sent for AI analysis. AI requests use the provider's API with response storage disabled. This does not eliminate separate provider security or abuse-monitoring retention. AI estimates and wellness advice are not medical diagnosis or treatment.

Other recipients and security

Firebase Messaging supports notifications. Apple and Google process store payments; FitKadam receives purchase and entitlement references, not your payment-card details. Route maps request tiles from OpenStreetMap infrastructure, which receives the network address and requested map area. Speech input and spoken replies can use your device's selected platform speech services. Internet requests use encrypted transport. Providers may process information outside your country.

Delete your FitKadam account or request data deletion

Request FitKadam account or data deletion

In the app, sign in, open Settings, choose Delete account, and confirm. Successful deletion removes the account, account-owned records and uploaded meal/progress photos, and clears that account's tracking cache on the requesting device. Archived coach messages remain stored when you only clear the chat; they are excluded from future coaching context and removed with account deletion. Disconnecting Health Connect does not remove existing FitKadam logs.

You can request deletion without installing or signing in to the app by emailing [email protected]. Include your registered email and say whether you want the entire account or specific records deleted. Never send a password or verification code. We may verify ownership before taking action.

Active account data is removed when account deletion succeeds. Exported files, caches on other devices, app-store billing records, support correspondence and provider backups or security logs may require separate handling. Any records retained for legal, billing, fraud-prevention or security obligations remain only for their applicable purpose and retention period. In our response to an email request, we explain its completion timeframe and any retained categories and applicable periods. Provider retention is governed by the service and its configured controls; response storage being disabled is not a promise of zero retention.

Account deletion does not cancel an Apple or Google subscription. Cancel renewal through the store separately. You can also request access or correction, or withdraw optional permissions. FitKadam is intended for adults aged 18 and over. We update this notice when the app's processing changes.

Draft for business approval — not yet effective. The proposed policy below must be checked and approved by AnyBizHub before publication or payment onboarding. Existing app-store terms continue to govern current store purchases.

Questions about this policy? Contact [email protected], or visit our support page.