TerraTale Privacy Policy

This policy explains what data TerraTale collects, why, who we share it with, and what controls you have. It applies to the TerraTale mobile app and the services that power it. We try to use plain English; if anything is unclear, email us.

1. Information we collect

We collect the following, and nothing else:

1.1 Account information

When you sign in, we store:

• Your email address (used solely to deliver sign-in codes; we never email you marketing).
• A display name you choose during onboarding.

1.2 Capture data

When you scan an animal, we store:

• The species identified.
• The timestamp of the capture.
• The photo you took (stored privately, viewable only by you).
• Approximate GPS coordinates (latitude/longitude) of where you took the photo — but only if you granted location permission. You can scan without location; the capture will simply have no map pin.

1.3 Device & usage data

• Anonymous app-usage events (e.g., "scan attempted", "capture saved"). These contain no personal information — only the action and a timestamp.
• Crash reports if the app errors. Crash reports include a stack trace and your operating-system version. They do not include account details or photos.

1.4 What we DON'T collect

• We do not collect contacts, microphone, browsing history, advertising identifiers, or any other phone data.
• We do not track you across other apps or websites.
• We do not sell your data. Ever. (Hard rule, not a marketing line.)

2. How we use your information

Your captures, photos, and location data are private to your account. No other TerraTale user can see them. There is no social feed, no sharing, no public profile in the current version of the app.

3. Who we share data with

TerraTale uses a small number of third-party services. We only share what each service strictly needs to do its job:

We do not share data with advertisers, data brokers, or any other third parties beyond the list above.

We may disclose data if compelled by law (subpoena, court order) — if we ever receive such a request, we will tell you unless legally prohibited.

4. Data retention

• Account data, captures, photos, location — kept for as long as your account exists. Deleted within 30 days of account deletion (see §6).
• Anonymous usage events — retained up to 12 months, then aggregated or deleted.
• Crash reports — retained up to 90 days.

5. Security

• All data transmitted between the app and our servers is encrypted in transit (HTTPS / TLS 1.2+).
• Photos and account data are stored encrypted at rest by Supabase.
• Your sign-in code is single-use and expires after 1 hour.
• We do not store passwords (the app uses a passwordless magic-link flow).

No system is perfectly secure. If we ever discover a breach affecting your data, we will notify you within 72 hours of discovery.

6. Your rights and choices

You can, at any time:

• Access your data: everything is visible in the app itself (Profile → Settings → your captures appear in the Catalog tab).
• Correct your data: change your display name from the Profile screen.
• Delete your account: tap Profile → Settings → Delete account. This permanently removes your profile, all captures, and all scan photos from our servers within 30 days. This cannot be undone.
• Revoke location permission: turn off Location for TerraTale in iOS Settings → Privacy & Security → Location Services → TerraTale. The app will keep working; captures just won't have map pins.
• Sign out: Profile → Settings → Sign out.

6.1 EU / EEA / UK residents (GDPR)

You additionally have the right to data portability (a copy of your data in a structured format), the right to object to processing, and the right to lodge a complaint with your local data protection authority. To request a copy of your data, email us.

6.2 California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, to delete it, to correct it, and to opt out of sale. We do not sell personal information. To exercise any of these rights, email us.

7. Children's privacy

TerraTale is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please email us and we will delete it.

8. International users

TerraTale's servers are located in the United States. By using the app, you consent to your data being transferred to and processed in the United States. We comply with applicable data-transfer requirements (Standard Contractual Clauses where required).

9. Changes to this policy

We may update this policy as the app evolves. If we make material changes, we will notify you in-app and via email at least 14 days before the changes take effect. The "Last updated" date at the top of this page will reflect the most recent revision.

10. Contact

Questions, requests, or concerns about your data?

Email: privacy@terratale.app — confirm before publishing

We respond to every privacy request within 30 days.