Privacy Policy

This Privacy Policy explains how Bird Identifier: Scan by Photo (the "App") collects, uses, stores, processes, and shares information when you use the App and related services (collectively, the "Service").

This Policy is intended to explain our privacy practices clearly. If you have any questions, contact us at support@ghappsdigital.com .

1) Summary (TL;DR)

2) Information We Collect & Sources

A. Information You Provide Directly

Depending on how you use the App, you may provide:

• Photos or images captured with your camera or selected from your photo library for bird identification.
• Messages or questions submitted to an AI bird assistant or chat feature, where available.
• Optional names, labels, notes, or other information associated with saved birds.
• Support communications if you contact us, including your email address and message content.

B. Information Collected Automatically

When you use the App, certain information may be processed automatically, depending on the technologies enabled in the production version.

• Authentication identifiers: An anonymous or technical identifier may be generated to authenticate requests to backend services.
• Notification token: If notifications are enabled, an APNs or Firebase Cloud Messaging registration token may be processed to deliver notifications.
• Usage data: Events such as screen views, feature interactions, or button taps may be processed for analytics.
• Device and app information: Device model, operating system version, app version, language, and technical identifiers.
• Diagnostics: Crash reports, request logs, technical errors, and performance data.
• Purchase information: Subscription or entitlement status when you purchase Paid Features.

C. Information Generated by the App

The Service may generate:

• Bird names;
• Species identification results;
• Identification confidence information;
• Species descriptions;
• Habitat information;
• Bird characteristics;
• Saved bird profiles;
• Timestamps associated with saved records.

D. Information We Do Not Intentionally Request

Unless a future feature clearly requires it and this Privacy Policy is updated, we do not intentionally request:

• Precise GPS location;
• Contacts;
• Calendars;
• Microphone recordings;
• Health information;
• Complete credit or debit card information.

3) Device Permissions We Request

Depending on which features you use, the App may request:

• Camera access: to take a photo of a bird for identification.
• Photo library access: to select an existing bird photo for identification.
• Add-only photo library access: where supported, to save photos captured through the App to your photo library.
• Notifications: where enabled, to send App-related notifications.
• iCloud / CloudKit: where implemented and enabled, to sync saved bird records across your Apple devices.

You can manage these permissions at any time through your iOS Settings.

4) How We Use Information

We may use information to:

• Identify birds from photos you submit;
• Generate bird profiles and species information;
• Provide AI-generated bird-related responses where chat features are available;
• Save and display your bird collection;
• Synchronize supported information through iCloud;
• Operate and maintain the App;
• Diagnose errors and performance problems;
• Understand how features are used;
• Improve usability and application functionality;
• Manage subscriptions and premium access;
• Restore purchases;
• Respond to customer support inquiries;
• Authenticate requests and prevent abuse;
• Comply with applicable legal obligations.

5) Local Storage vs. Cloud / Server Processing

A. Information Stored on Your Device

Depending on the App configuration, information stored locally may include:

• Saved bird records;
• Bird names and identification results;
• Confidence scores;
• Species profile information;
• Local images associated with saved birds;
• Timestamps;
• Favorites or personal labels;
• App preferences;
• Onboarding completion;
• Interface and notification preferences.

B. iCloud / CloudKit

If iCloud synchronization is implemented and enabled:

• Some saved bird records may sync between your Apple devices;
• Synchronization is controlled in part by your Apple ID, iCloud settings, and iOS configuration;
• Apple's privacy terms and security systems apply to iCloud/CloudKit processing.

C. Backend and AI Processing

Certain identification or AI features may require data to be transmitted to backend infrastructure.

Bird Identification

When you submit a bird image:

• The image may be uploaded temporarily to cloud storage;
• A backend service may receive a request to analyze the image;
• The image may be provided to an AI or image-recognition provider to generate a bird identification profile;
• The resulting information is returned to the App;
• Temporary uploads may be deleted after processing according to our backend design and provider configuration.

AI Bird Chat

If an AI chat feature is available:

• Messages you submit may be transmitted to backend infrastructure;
• The messages may be sent to an AI model provider to generate a response;
• We may design the Service not to permanently store chat history, but providers may process logs or content under their own security and retention practices.

6) Third-Party Services & Sharing

Depending on the technologies enabled in the App, we may use third-party providers for:

• Authentication;
• Backend processing;
• Cloud functions;
• Temporary image storage;
• Push notifications;
• Server logs and diagnostics;
• Artificial intelligence;
• Image recognition;
• App Store purchases;
• iCloud synchronization;
• Subscription management;
• Paywalls;
• Analytics.

These providers may process information only as necessary to perform their services or according to their respective privacy terms.

Examples of Providers

If enabled in the production version, these may include:

• Google Firebase — authentication, backend processing, cloud storage, notifications, logs, and related infrastructure.
• Google Gemini API or another AI provider — processing bird photos and/or bird-related chat messages.
• Apple — App Store purchases, subscriptions, device permissions, and iCloud/CloudKit.
• Superwall or another subscription provider — paywall, entitlement, and subscription management.
• Mixpanel or another analytics provider — analytics and usage events where enabled.

7) Purchases and Subscriptions

The App may offer subscriptions, premium features, or other in-app purchases.

Purchases through Apple's App Store are processed by Apple. We do not receive or store your complete payment card information.

We or our subscription provider may process limited information such as:

• Subscription status;
• Product identifier;
• Entitlement status;
• Transaction identifiers;
• Purchase restoration information.

8) Data Retention & Deletion

A. Saved Birds and Local Data

Saved bird records may remain on your device until you delete them within the App or remove the App from your device.

If iCloud synchronization is enabled, deletion may require additional time to synchronize across your devices.

B. Bird Identification Uploads

Images uploaded for bird identification may be temporarily processed by backend infrastructure or AI service providers.

Where the Service is configured to delete uploaded files after processing, deletion may be performed on a best-effort basis. Rare technical failures may delay deletion.

C. Chat Content

Where AI chat is available, messages may be transmitted for processing. We may not intentionally store permanent chat histories on our own servers, but providers may retain limited information under their own policies.

D. How to Delete Your Data

Depending on the functionality available, you can:

• Delete individual saved birds in the App;
• Delete saved photos or records where supported;
• Remove the App to delete locally stored application data;
• Contact us at support@ghappsdigital.com regarding additional eligible deletion requests.

9) Your Privacy Rights

Depending on your jurisdiction, you may have rights concerning your personal information.

A. GDPR / UK GDPR

If applicable, these rights may include:

• Access to your personal data;
• Correction of inaccurate data;
• Deletion of eligible data;
• Restriction of processing;
• Objection to certain processing;
• Data portability;
• Withdrawal of consent;
• Lodging a complaint with an applicable supervisory authority.

B. California — CCPA / CPRA

California residents may have rights including:

• Knowing what personal information is collected;
• Knowing how information is used and disclosed;
• Requesting deletion;
• Requesting correction;
• Opting out of certain legally defined sale or sharing;
• Limiting certain uses of sensitive personal information where legally applicable;
• Not being discriminated against for exercising privacy rights.

C. Brazilian Users — LGPD

Users in Brazil may have applicable rights under the Lei Geral de Proteção de Dados Pessoais (LGPD — Law No. 13,709/2018).

Depending on applicable law, these rights may include:

• Confirmation of processing;
• Access to personal data;
• Correction of inaccurate or incomplete information;
• Anonymization, blocking, or deletion where applicable;
• Portability where applicable;
• Information about data sharing;
• Withdrawal of consent where applicable.

D. Other Jurisdictions

Users in other countries may have additional rights under applicable privacy and data protection laws.

To exercise an applicable privacy right, contact: support@ghappsdigital.com .

10) Legal Bases for Processing

Where applicable law requires a legal basis, we may rely on:

• Performance of the Service: processing necessary to provide bird identification, AI responses, and requested App functionality.
• Legitimate Interests: maintaining, improving, securing, and protecting the Service.
• Consent: where required for permissions, notifications, analytics, or other optional processing.
• Legal Obligations: processing required by applicable laws or lawful requests.

11) International Data Transfers

Our service providers may process information on servers located outside your country of residence.

Where required, we rely on appropriate safeguards or contractual protections provided by our service providers.

12) Data Security

We use reasonable technical, organizational, and administrative safeguards designed to protect information.

Security measures may include:

• iOS platform security features;
• HTTPS/TLS network communications;
• Access controls;
• Backend security controls;
• Apple iCloud/CloudKit security;
• Cloud-provider security controls;
• Error monitoring and diagnostics.

No system or method of electronic transmission can be guaranteed to be completely secure.

13) Analytics, Tracking and Advertising

The App may process analytics events such as screen opens, feature interactions, or other usage events to improve the Service.

Analytics providers may process device or application identifiers, depending on their configuration.

We do not sell personal information in the traditional sense.

If advertising or tracking practices materially change, this Privacy Policy will be updated accordingly.

14) Children's Privacy

The App is not intended to knowingly collect personal information from children in violation of applicable law.

If you believe a child has provided personal information without required authorization, please contact us and we will take reasonable steps to address the request.

15) Changes to This Privacy Policy

We may update this Privacy Policy periodically.

When material changes are made, we may:

• Update the "Last Updated" date;
• Publish an updated version of this page;
• Provide an in-app notice where appropriate.

16) Contact Us

For privacy questions, concerns, or requests, contact:

17) Apple App Privacy “Nutrition Label” Summary

This section is provided as a practical informational summary. The official App Store Connect privacy disclosure must reflect the final production implementation and all enabled SDKs.

Data Used to Track You

Depending on analytics or subscription SDK configuration, identifiers may potentially be used for attribution or legally defined tracking.

Data Linked to You or Your Device

• User Content: Photos submitted for bird identification.
• User Content: AI chat messages, if the chat feature is available.
• Identifiers: Anonymous backend or Firebase identifiers where used.
• Identifiers: Push notification tokens where notifications are enabled.
• Purchases: Subscription and purchase status.
• Usage Data: Feature interaction analytics where enabled.

Data Not Linked to You

• Diagnostics: Aggregated or de-identified technical logs, crash data, and performance information may fall into this category, depending on implementation.