Privacy Policy

When you register and use an account, we collect:

• Account & profile: name, email, phone number, profile photo, birth date, gender, workplace, and your assigned protected area.
• Content you create: incident reports (including the reported location), training records, news posts, discussion posts and comments, event posts, and photos you upload to the gallery.
• Location: the App requests device location (GPS) so you can attach a location to an incident report or see nearby points on the map. Location is only read in the foreground, while you're using that feature — never tracked in the background.
• Device & notifications: a push-notification token for your device, so we can deliver alerts (e.g. a new incident in your area).
• Sign-in data: if you sign in with Google, we receive your name, email, and profile photo from Google to create/match your account.

• To operate your account and show you the content relevant to your protected area.
• To let staff/admins coordinate incident response, training, and area management.
• To send push notifications and emails about activity relevant to you (e.g. area changes, replies).
• To produce aggregated, non-identifying statistics (e.g. incident counts) for conservation reporting.

Access is role-based and scoped to protected areas: members generally see content from their own area, while staff and admins can see the members and content of the areas they manage. We do not sell your data, and we don't share it with third parties for advertising.

The App relies on a small number of infrastructure providers to operate: Supabase (database and file storage), Vercel (web hosting), and Google (Sign in with Google, and push notification delivery on Android). Each processes data on our behalf under its own privacy and security terms; we don't use them for anything beyond running the App.

You can request deletion of your account and personal data at any time — see our Account Deletion page for how. Your data is permanently removed within 30 days of a verified request. Certain aggregated, non-personally-identifiable data (e.g. incident statistics) may be retained afterward for conservation reporting — no personal information is kept.

Passwords are stored hashed, never in plain text. Data in transit is encrypted (HTTPS), and access to personal data is limited by your role and protected-area assignment.

The App is intended for adult rangers and organization staff. We do not knowingly collect data from children.

We may update this policy as the App changes. We'll update the “Last updated” date above when we do.