Privacy Policy

Qritter is a wildlife spotting app developed by Vincent Kok, who is responsible for the personal data processed through the app. Contact hello@qritter.app about privacy or your data.

We acknowledge enquiries and take them up within 5 working days. This does not mean every request is resolved within that period. Applicable statutory deadlines still apply.

Qritter processes account and sign-in details, profile information, photos, sighting dates and locations, wishlists, trips, statistics and community interactions when you use those features. It also processes subscription status and technical information needed to operate the service.

We use this information to provide accounts, save and synchronize your wildlife records, support sharing and community features, manage Qritter+ access, and respond to enquiries. Optional photo identification uses the image you select, your language and an optional country or region.

Processing needed to deliver the service is based on our contract with you. Applicable legal obligations may also require processing. Your privacy rights depend on the purpose and legal basis for each use.

Your sharing choice determines the intended audience in the app: public content can be visible to the community, friends-only content to your friends, and private content to you. Check the audience before sharing sightings, trips or profile information, especially precise locations.

Photos are currently served through publicly accessible media URLs. Someone with a media URL may be able to open or share the image, including an image attached to friends-only or private content. These settings do not make the underlying media URL access-restricted. Avoid uploading sensitive images or images that reveal locations you need to keep confidential.

Features may request access to your location, camera, photo library or notifications. These permissions support the feature you choose, such as adding a photo, recording a location or receiving notifications. You can manage permissions in your device settings; denying access may limit the relevant feature.

• Supabase: authentication and cloud storage.
• Google and Apple: sign-in and app store payments.
• RevenueCat: subscription management.
• Google Gemini: optional photo identification. It receives the selected image, language and optional country or region.
• Mapbox and OpenStreetMap/MapTiler services: maps and location searches.
• iNaturalist and GBIF: wildlife information.
• Expo: notifications.
• PostHog: analytics when enabled.
• Netlify: website hosting.

These services process information relevant to the features they provide, such as sign-in information, subscription records, map requests or technical connection data. Their privacy notices explain their own processing. Using optional identification sends the selected information to Google Gemini; do not submit sensitive images.

Some providers may process personal data internationally. We have not yet verified all processing locations and transfer arrangements, including the actual Supabase and PostHog hosting regions. We do not claim that all data stays in the EU or that a particular safeguard covers every transfer.

When PostHog is configured in an app build, analytics is enabled automatically. It records selected events such as app opens, screen views, onboarding progress and feature interactions, with SDK-generated identifiers and technical/device information. This data is not necessarily anonymous.

Automatic interaction capture and session replay are disabled. Event definitions do not deliberately include email addresses, photo contents, free-text notes or precise coordinates.

The current implementation has no analytics consent screen or user-facing opt-out. The appropriate legal basis has not yet been established and documented. Non-essential analytics should be disabled until applicable consent requirements and controls have been addressed. Accepting this privacy policy is not consent to analytics.

Account and cloud data are generally retained while your account is active. After a verified deletion request, we delete your account and associated Qritter cloud data, including stored photos, within 30 days. Limited security logs and technical backups may remain for up to 90 days, unless the law requires longer retention.

To request account and associated data deletion, email hello@qritter.app from your account email address. We may need to verify that the account belongs to you. Never send your password. Data that must be retained by law may be kept for that purpose.

See the account deletion page for the request steps. Deleting an account does not remove data held only on your device. Manage that data through your device settings. Account deletion also does not cancel a subscription: cancel separately through Google Play or Apple.

Under applicable privacy law, you may have rights to access, correct, erase or receive a copy of your personal data, restrict processing, or object to processing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.

Contact hello@qritter.app to exercise your rights. You may also complain to your local data protection authority, including the Dutch Data Protection Authority where applicable. Nothing in this policy limits your statutory privacy rights.