Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which Findexr ("we", "us", "our", or the "Company") collects, processes, stores, uses, transfers, and protects personal data and user content when you access or use the Findexr mobile application (the "App"), our website located at findexr.co.uk (the "Site"), and any associated API services (collectively, the "Services").

By creating an account, downloading, accessing, or using our Services, you acknowledge that you have read, understood, and agree to the data practices described in this Policy.

1. Information We Collect

We collect information you provide directly to us, as well as data automatically generated during your interaction with our Services:

A. User-Provided Information

• Account & Registration Credentials: Email address, username, password hashes, profile avatars, and preference settings.
• User Media & Uploads: Photos, images, recordings, comments, notes, and species descriptions submitted to the Services.
• Observation & Catch Data: Species identification requests, timestamp logs, species notes, catch-and-release statuses, and equipment notes.
• Support Communications: Name, email address, and message contents when submitting support inquiries, feedback, or data requests.

B. Automatically Collected Technical & Location Data

• Precise & Approximate Geolocation Data: GPS coordinates, latitude/longitude points attached to species logs or identification queries, and IP-derived location data.
• Device & Usage Metadata: Device hardware model, operating system version, unique device identifiers, language settings, and network status.
• Camera & Storage Permissions: System permission access to device camera hardware and photo library solely to process image uploads.
• Analytics & Diagnostic Telemetry: Crash logs, error diagnostics (via Sentry telemetry), API request timestamps, and performance metrics.

2. How We Use and Process Your Information

You grant us the right to collect, store, process, and use your information and content for the following operational and commercial purposes:

• Service Delivery & Machine Learning Training: Operating species identification algorithms, processing log entries, and training visual recognition AI models using uploaded photos and catch data.
• Data Analytics & Research: Aggregating, anonymizing, and analyzing species distribution, catch densities, seasonal trends, and ecological patterns. We reserve the full right to compile, publish, commercialize, or license aggregated, de-identified datasets.
• Platform Security & Moderation: Detecting, preventing, and responding to fraud, abusive behavior, illegal content uploads, or violations of our Terms of Service.
• Account Maintenance & Notifications: Managing your user profile, processing account password resets, sending transactional notifications, and providing customer support.
• Legal & Regulatory Compliance: Fulfilling obligations under applicable laws, responding to lawful government subpoenas, or enforcing our legal rights.

3. Licensing & Rights Over User-Uploaded Content

4. Data Sharing & Disclosure to Third Parties

We may share your information with third parties under the following circumstances:

• Infrastructure & Service Providers: Cloud hosting providers (e.g. AWS, Vercel, Cloudflare, PostgreSQL hosting), error logging services (Sentry), and push notification services (Expo).
• Business Transfers & Corporate Restructuring: In connection with any merger, sale of company assets, financing, acquisition, or bankruptcy proceeding, user data may be transferred as a business asset.
• Legal & Protection Requirements: If required by law, legal process, court order, or to protect the safety, property, or legal rights of Findexr, our users, or the public.
• De-identified & Aggregated Data: We may share anonymized datasets that cannot reasonably identify you with researchers, conservation bodies, commercial partners, or the public.

5. Data Retention & Account Deletion

We retain personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.

Account & Data Deletion Rights: You have the right to request deletion of your account and personal data at any time. In compliance with Apple App Store Guideline 5.1.1(v) and Google Play Safety policies:

• You may submit an online deletion request via our Support & Account Deletion Page.
• You may email your deletion request directly to [email protected].

Upon receipt of a verified deletion request, we will permanently delete or anonymize your personal account credentials and personal identifiers within 30 days, subject to legal recordkeeping exemptions.

6. Data Security

We implement administrative, technical, and physical safeguards (including HTTPS encryption, hashed credentials, and secure server infrastructure) designed to protect your personal data against unauthorized access, loss, alteration, or disclosure. However, no internet transmission or electronic storage system is 100% secure, and we cannot guarantee absolute security.

7. International Transfers & UK/EU GDPR Rights

If you access the Services from the United Kingdom or European Economic Area, you hold statutory rights under UK GDPR and Data Protection Act 2018, including the right to request access, rectification, erasure, restriction of processing, and data portability. To exercise these rights, contact us at [email protected].

8. Updates to This Privacy Policy

We reserve the right to modify or update this Policy at any time. Any changes will be posted on this page with an updated "Effective Date". Continued use of the Services following the posting of changes constitutes your acceptance of such changes.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

• Website: findexr.co.uk/support.html
• Email: [email protected]