App Privacy

Privacy Policy

Last Updated: January 2026

Field Mycologist (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

1. Information We Collect

1.1 Information You Provide

  • Account information (username, email, password)
  • Observation data (photos, notes, dates, species identifications)
  • Location data (GPS coordinates, addresses, map selections)
  • Camera and photo library access for observation photos
  • Favourite observations and personal collections
  • Species suggestions and identification contributions

1.2 Automatically Collected Information

  • Device information (model, operating system)
  • App usage data (features used, time spent)
  • Error logs and crash reports
  • IP address (for security purposes)
  • Biometric authentication data (stored locally only)

2. How We Use Your Information

We use the collected information to:

  • Provide and maintain the service
  • Store and sync your observations across devices
  • Display observations on maps and in browse views
  • Enable species identification and suggestions
  • Process and optimize images for better performance
  • Provide secure local authentication via biometrics
  • Improve and optimize the app
  • Send important notifications about your account
  • Prevent fraud and ensure security
  • Comply with legal obligations

3. Information Sharing

3.1 Public Information

By default, your observations are visible to other app users. This includes:

  • Photos of fungi
  • Species identifications
  • Location data (unless marked as hidden)
  • Observation dates
  • Your username

3.2 Third-Party Services

We may share data with:

  • iNaturalist (only if you explicitly export observations)
  • Mapping services (OSM, Google Maps, React Native Maps) for location display
  • Backend API for data synchronization and storage
  • Image processing services for photo optimization

3.3 We Never Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Location Privacy

Location data is sensitive, especially for rare or endangered species. You can:

  • Mark observations as “hidden location” to protect sensitive finds
  • Hidden locations are only visible to you
  • Other users will see approximate region only
  • Disable location services entirely in device settings

5. Data Security

We implement security measures to protect your information:

  • Encrypted connections (HTTPS/TLS)
  • Secure password storage (hashed and salted)
  • Expo Secure Store for sensitive local data
  • Local biometric authentication (Face ID, Touch ID, fingerprint)
  • SQLite database for secure local storage
  • Restricted access to personal data

However, no method of transmission over the internet is 100% secure. Use strong passwords and enable biometric authentication when available.

6. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and data (via Settings > Delete Account)
  • Export your data (data portability)
  • Object to data processing
  • Withdraw consent at any time

You can delete your account directly in the app. For other requests, contact us at support@fieldmycologist.uk

7. Data Retention & Account Deletion

We retain your information as long as:

  • Your account is active
  • Necessary for legal compliance
  • Required to resolve disputes

You can delete your account at any time via Settings > Delete Account. When you delete your account:

  • Your profile information is permanently deleted
  • Your username, email, and password are removed
  • Your comments and activity history are deleted
  • Your favourites and preferences are deleted
  • Your observations are anonymized (reassigned to “Anonymous Observer”)
  • Observation photos and data are retained for scientific value

We retain anonymized observations because fungi recording data has significant scientific value for mycology research, species distribution mapping, and conservation efforts. The observations can no longer be linked to your identity after account deletion.

8. Children’s Privacy

Field Mycologist is not intended for users under 13 years of age. We do not knowingly collect information from children. If you believe a child has provided information, please contact us immediately.

9. Local Storage and Tracking

The mobile app does not use cookies. We use local storage technologies:

  • AsyncStorage for app preferences and settings
  • SQLite database for observation data
  • Expo Secure Store for authentication tokens
  • Local file system for photo storage and caching
  • Crash reporting to identify and fix bugs

10. International Data Transfers

Your data is stored on servers located in the UK/EU. If data is transferred outside the UK/EU, we ensure adequate safeguards are in place (Standard Contractual Clauses).

11. Changes to Privacy Policy

We may update this Privacy Policy periodically. Material changes will be notified via:

  • In-app notification
  • Email to registered users
  • Updated “Last Updated” date

Continued use after changes constitutes acceptance of the updated policy.

12. Legal Basis for Processing (GDPR)

We process your data based on:

  • Consent – You agree to share observations
  • Contract – Necessary to provide the service
  • Legitimate interests – App improvement and security
  • Legal obligation – Compliance with laws

13. Contact Us

For privacy-related questions, concerns, or to exercise your rights:

Email: support@fieldmycologist.uk
Website: fieldmycologist.uk
Address: United Kingdom

Data Controller: Leon Terry