1. Information We Collect
We collect the following types of information:
Account Information: Email address, display name, date of birth, and password (stored securely via our authentication provider).
Sighting Data: Species identified, GPS coordinates of sightings, date and time, and associated photos or audio recordings you choose to upload.
Device Information: Device type, operating system version, and app version for debugging and compatibility purposes. If you turn on notifications, we also store a push notification token for your device so that we can send them. We do not store your device's name.
Location Data: GPS coordinates are collected when you log a sighting. Location data is stored with your sighting records. If you identify a bird by sound, your coordinates are also sent to our identification server, described in section 3. We never share location data with advertisers.
2. How We Use Your Information
We use your information to:
- Operate and improve the App
- Process and display your sightings, scores, and league standings
- Identify birds from audio recordings (processed via our BirdNET integration)
- Send you notifications about leagues, matchups, and App updates
- Enforce our Terms of Service
- Respond to support requests
3. Third-Party Services
We use the following third-party services to operate the App:
Supabase: Database hosting, authentication, and file storage (supabase.com). Your account data, sightings, and uploaded photos are stored on Supabase infrastructure.
Google (Gemini): When you identify a bird by photo, the photo is sent to Google's Gemini API for identification. Nothing is sent when you take or choose a photo. The photo stays on your device until you tap Identify this photo, and if you cancel instead, it is never sent. Only the image is sent. No user id, no location, and no account information goes with it. Google returns candidate species names, confidence scores, and a short description of the field marks visible in the photo.
BirdNET / Railway: Audio recordings you submit for bird identification are transmitted to our BirdNET analysis server hosted on Railway. If you have granted location access, your precise GPS coordinates are sent along with the recording to improve identification accuracy. No user id or account information is sent.
Expo: We use Expo to build the App and to deliver over-the-air updates. When the App checks for an update, Expo receives your device platform, the App version, and your IP address.
We do not sell your personal data to third parties. We do not use your data for targeted advertising.
4. Data Retention
We retain your account information and sighting data for as long as your account is active.
You can delete your account at any time from the Profile tab. Deletion happens immediately and cannot be undone.
Permanently deleted: your email address and password, every sighting you have logged including its GPS coordinates and notes, every photo you have uploaded, your date of birth, your Patch and everything recorded on it including its location, its journal and the local names you gave birds, every mystery post you have submitted together with its photo and the answers on it, your saved birds, your push notification tokens, your notification settings, your clan membership, and your league memberships.
Anonymized and kept: your profile record is kept as an anonymous placeholder so that other members' league history does not break. Your display name is replaced with "Former Member" and your avatar, bio, clan and date of birth are erased. The placeholder holds no personal information about you.
Kept under that placeholder: your badges, and your league standings, matchups and rosters. A matchup is one record shared by two players, so deleting your side of it would erase the other player's history of that game as well and rewrite everyone's season. These records stay attached to the placeholder and no longer identify you.
Kept: messages you posted in league chat stay visible to that league, shown as sent by "Former Member".
Legally required records: if the law requires us to retain a specific record relating to your account, such as a record of a legal request we have received, we keep only that record, only for as long as the law requires, and then delete it. This does not apply to anything listed above as permanently deleted.
5. Your Rights
Depending on your location, you may have the following rights:
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your account and personal data.
Portability: Request your data in a portable format.
Opt-Out: Opt out of non-essential communications.
California residents have additional rights under the CCPA, including the right to know what personal information is collected and the right to request deletion. To exercise any of these rights, contact us at birdleaguehq@gmail.com.
6. Children's Privacy
The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a user is under 13, we will promptly delete their account and associated data. Users aged 13 to 17 may use the App with parental consent.
7. Security
We implement reasonable technical and organizational security measures to protect your data, including encrypted data transmission (TLS), secure authentication, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by email. Continued use of the App after changes take effect constitutes acceptance.
9. Contact
Questions about this Privacy Policy? Contact us at birdleaguehq@gmail.com.