Privacy Policy

Last updated: June 2026

This Privacy Policy describes how Here it is ("the App", "we", "us") collects, uses, and shares information about you when you use our mobile application.

1. Information We Collect

• Account information: When you sign in, we collect your email address via Firebase Authentication.
• Box data: The title, location, and AI-extracted item list (text only) for each box you create are stored in our database (Firebase Firestore), associated with your account. QR codes are generated on-device from your box ID and are not stored anywhere.
• Photos: When you use the AI scan feature, your photo is sent to our backend server solely to extract a list of items. The photo is processed immediately and is not retained or stored by us.
• Subscription status: We store whether your account has an active Pro subscription. Payments are processed by Apple App Store or Google Play; we do not receive or store payment card details.
• Usage data: We track how many free scans and boxes you have used to enforce the free tier limits.
• Camera: The App requests camera access to scan QR codes and to select photos for AI analysis. Photos are transmitted only when you explicitly trigger a scan and are not saved by us.

2. How We Use Your Information

• To provide, personalise, and improve the App's features.
• To enforce free tier limits and grant Pro subscription benefits.
• To authenticate you and keep your data secure.

3. Data Sharing

We do not sell or share your personal data with third parties for advertising. We use the following service providers, each operating under their own privacy policy:

• Google Firebase – authentication and database storage (privacy policy).
• Google Cloud Run – hosts our backend server that processes photos for AI item extraction. Photos are not logged or retained after processing.
• RevenueCat – subscription and in-app purchase management (privacy policy).

4. Data Retention

Your data is retained for as long as your account is active. You can delete your account and all associated data by contacting us (see Section 7). Upon deletion, your data is permanently removed within 30 days.

5. Security

All data is stored in Firebase with security rules that restrict access so each user can only read and write their own data. Data is transmitted over HTTPS.

6. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us to have it removed.

7. Contact Us

If you have questions about this Privacy Policy or wish to request data deletion, contact us at: husain@thewildways.org.uk

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of the App after changes constitutes acceptance of the updated policy.