← Back to ForestForay

🛡️ Privacy Policy

Effective Date: May 28, 2026  |  Last Updated: June 14, 2026

ForestForay ("we", "us", "our") is published by Amplified Ideas Consulting Inc. We are dedicated to safeguarding the privacy of families, children, and all users of our nature identification applications.

1. Information We Collect

Our applications collect only the minimum data necessary to provide nature identification and research features:

• Camera & Photos: We require camera access to perform AI-powered nature scanning. Photos are processed for identification and optionally stored locally in your device gallery. If you choose to contribute sightings, a resized copy may be uploaded to our servers.
• Location Data: GPS coordinates are used to provide regional context for species identification and to record sighting locations for citizen science research. Location sharing is optional and controlled via in-app settings.
• Device Identifiers: We collect a one-way hashed device identifier for anonymous sighting attribution. This cannot be used to identify you personally.
• Usage Analytics: We do not use third-party analytics or ad-tracking SDKs.

2. Children's Privacy (COPPA Compliance)

ForestForay includes a dedicated Kids Mode designed for children under 13. In Kids Mode:

• No GPS or device location tracking: The Kids app never requests GPS or device location. Regional context is determined server-side using approximate IP geolocation only.
• No ad-tracking networks: Kids Mode contains zero behavioral monitoring, Google Analytics, or advertising SDKs.
• No personal information collection: We do not collect names, email addresses, or any personally identifiable information from children.
• Parental gates: Access to external links, account settings, and subscription management requires passing a parental verification gate.
• No social features: Kids Mode does not include leaderboards, chat, or any social interaction features.

3. How We Use Your Data

• Species Identification: Photos and location context are sent to AI services (Google Gemini, PlantNet) for real-time identification. Photos are not permanently stored by these services.
• Citizen Science Research: With your consent (Adults Mode, location sharing enabled), anonymous sighting records contribute to biodiversity research databases.
• App Improvement: Aggregate, non-identifying usage patterns help us improve identification accuracy and app features.

4. Data Storage & Security

• Sighting data is stored on Supabase (PostgreSQL) with Row-Level Security (RLS) policies enforced.
• Photos are stored in encrypted cloud storage with access controls.
• All API communications use HTTPS/TLS encryption.
• Administrative access requires Firebase Authentication with email allowlisting.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties. Data is only shared with:

• AI Identification Services: Photos sent for species identification (not stored permanently).
• Infrastructure Providers: Supabase (database), Cloudflare (web hosting), and Firebase (authentication) under their respective privacy policies.

6. Your Rights & Data Deletion

• You can disable location sharing at any time in the app settings.
• You can request complete account and data deletion via the profile settings or by contacting us.
• Local Bio-Dex data can be cleared directly from the app.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the app constitutes acceptance of the updated policy.