This policy covers the Berrynook Cloud workspace at berrynook.cc. The App Store / Play Privacy Policy URL remains the app and auth-server Privacy Policy. The workspace itself is VPN-only in production; this page is public.

Berrynook Cloud — Privacy Policy

Last updated: August 12, 2026

How Berrynook products differ

Product	What it is	Policy
Berrynook VPN	Encrypted tunnel in the Berrynook app, plus the auth-server account	Privacy · AUP
Berrynook Cloud	Private browser workspace at berrynook.cc (VPN required in production)	Privacy · Terms
Berryporch	Short 1:1 browser calls at meet.berrynook.cc	Privacy · AUP

1. Overview

Berrynook Cloud (berrynook.cc) is a browser-only workspace for Prepaid Pass and team invite accounts. This policy describes how personal data is processed on the Cloud instance. VPN and auth-server account data are covered by the Privacy Policy. Berryporch browser calls have separate policies on this host.

2. Controller

The controller is Gray Whale and Blue Heron Co., British Columbia, Canada. Privacy and support: help@berrynook.cc. Abuse and security: abuse@berrynook.cc.

3. Accounts and sign-in

Cloud accounts (bn-*) are provisioned from our auth server after Prepaid Pass setup or a team invite — there is no public Cloud self-registration form.
You must be 18 or older and use a Proton sign-in address.
Password and Proton email changes happen on our auth server, not in Nextcloud’s native change-password screens.
In production, private Cloud is reached through Berrynook VPN.
The app may use short-lived browser-login tickets and share-upload tickets (VPN-gated) so you can open Cloud or hand a file to Cloud without storing the Cloud password on the device. Those tickets are issued by the auth server — see the Privacy Policy.

4. Data we process

Account data: username, display name, email address, group membership, and quotas
User content: files, photos, calendar events, contacts, and messages you store in Berrynook Cloud
Cloud Talk: call and room metadata needed to connect browser video calls among workspace members (not recorded by default). Guest 1:1 calls are Berryporch on meet.berrynook.cc — see Berryporch Privacy
Office: document content while you edit in the browser
Technical data: IP addresses, browser type, access times, and security or error logs
Contact form (Settings → Help & privacy on Cloud): your Proton email address, subject, message, and signed-in username — stored on the Cloud server for admin review. When mail is configured, the server may email administrators a link-only alert (no message content in that email)

5. How we use data

Provide the browser workspace: files, Office, Talk, Calendar, Contacts, and Photos
Operate and secure the server, including abuse prevention and troubleshooting
Respond to support and privacy requests

Berrynook does not use third-party advertising, analytics trackers, or external tracking pixels on this instance.

6. Who can access your data

You: files you own are private unless you share them with another user or group
Group members: content in group folders is visible to members of that group
Group admins: can manage users and policies within their group, including group folder content
Server administrators: can access all data on the instance for operations, support, and security

User search and sharing are limited so you typically only see people in your own group. Public user directories are disabled.

7. Browser-only service

Mobile and desktop sync clients, native Talk apps, and CalDAV/CardDAV sync are blocked. You access Berrynook Cloud only through supported web browsers.

Your browser may still cache files, cookies, or history on your device. Use private windows or container tabs and clear site data when finished — see the in-Cloud browsing guide (Settings → Help & privacy).

8. Documents (Office)

Documents open in Secure View on office.berrynook.cc.

Download and export may be restricted by server-wide policy or your group admin. Do not assume you can always download a copy from the interface.

9. Talk (workspace video)

Group video calls among Cloud members run in your browser. Media is routed through Berrynook’s Talk stack (signalling at signal.berrynook.cc and STUN/TURN on this server). Calls are not recorded unless explicitly stated elsewhere. This is separate from Berryporch guest calls.

10. Storage, retention, and infrastructure

This instance runs on virtual private servers. User data, files, and logs are stored in a data centre located in Washington, USA.

Cloud files and database content remain until you delete them or the account is removed. Automated backups may retain deleted data for up to 90 days before rotation.

Data is encrypted in transit (TLS 1.3). Files on the server are not end-to-end encrypted — administrators with server access can read stored content.

Extra team Host storage is not offered to the public yet.

11. Subprocessors and services

Processing relies on infrastructure and software on this server and its subdomains, including:

Infrastructure hosting provider (physical infrastructure)
Let’s Encrypt (TLS certificates)
Office document server (office.berrynook.cc)
Talk high-performance backend (signal.berrynook.cc, Coturn, NATS, Janus)

See Open source & services for upstream projects.

12. International transfers

If you access Berrynook Cloud from outside the United States, your Cloud data is transferred to and processed in the United States, where this server is located. The controller is in British Columbia, Canada.

13. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction of processing, or portability of your personal data where technically possible.

Export and deletion may be limited by group download policy, shared content, or backup retention. Contact help@berrynook.cc or use Settings → Help & privacy → Contact on Cloud. Auth-server / VPN account deletion: gate.berrynook.cc/delete-account (that form does not delete Cloud files by itself).

14. Contact

Privacy questions: help@berrynook.cc or Settings → Help & privacy → Contact on Cloud. Abuse: abuse@berrynook.cc.