Privacy Policy

1. Scope

This Privacy Policy applies to:

• The Identitail App and in-app services (pet profiles / "digital identities", community threads/comments, product browsing, likes/dislikes, translation, reporting/moderation tools).
• Support channels you contact via email or Instagram.

It does not apply to third-party websites or services you access via links in the App (e.g., store websites).

2. What we collect

We collect information in three ways: (A) you provide it, (B) it is generated by your use, (C) it is collected automatically (especially for ads/consent), and (D) via device permissions you grant.

A) Information you provide

Account information:

• Account identifiers (e.g., email/username).
• Password (stored in hashed form; we do not store plaintext passwords).

Pet "Digital Identity" profile information:

• Pet breed, type/species, weight, age, personality, gender, diet, favorite food.
• Your selected country (chosen by you; not inferred from GPS).
• Your selected language.

User-generated content (UGC):

• Threads/posts, comments, upvotes/downvotes.
• Reports you submit about content/users (including the report category and optional details).

Pet photos:

• Photos uploaded by you for your pet profile.

Support communications:

• If you contact support by email or Instagram, we collect the information you provide (e.g., contact info, message content, attachments/screenshots).

B) Information generated by your use

Community activity & interactions:

• Likes/dislikes on products (linked to your pet).
• Voting activity (upvote/downvote) on threads and comments.
• Aggregated statistics derived from community actions (e.g., "X Labrador Retrievers liked this").

Safety & moderation:

• Signals relevant to preventing abuse (e.g., report history, enforcement actions if applicable).

C) Information collected automatically

Ads and consent (Google AdMob + Google UMP): We use Google AdMob to show ads and Google UMP (User Messaging Platform) to manage consent for ad-related processing. Depending on your device, region, and consent choices, Google and its partners may collect:

• Advertising identifiers (e.g., Android Advertising ID; iOS IDFA if enabled).
• IP address, approximate location derived from IP.
• Device information (model, OS version), app version.
• Ad interaction data (impressions, clicks).
• Consent state and related signals.

Diagnostics, crash reporting & analytics (Firebase): We use Google Firebase Analytics and Firebase Crashlytics to understand how the App is used and to detect crashes. This data is only collected if you have given consent via the consent form shown at app launch. Data collected may include:

• App events (e.g., app opens, session start/end, first app launch).
• Crash reports: stack traces, device state at time of crash, app version.
• Device model, OS version, and an anonymized device identifier.

Google processes this data under its own privacy commitments. Firebase collection is disabled by default and only enabled after you confirm consent.

Push notifications (Firebase Cloud Messaging): If you grant notification permission and enable notifications in the App, we use Google Firebase Cloud Messaging (FCM) to deliver push notifications to your device. This involves:

• Collecting and storing an FCM token — a device-level identifier used to route notifications to your device.
• Storing your notification preference (enabled or disabled) on our servers.
• The FCM token is linked to your user account and stored in our database (Supabase).

You can disable push notifications at any time via the App's Settings screen or your device's notification settings. Disabling notifications does not affect any other App functionality. Your FCM token is removed from our servers when you disable notifications or delete your account.

Google processes FCM token data under its own privacy commitments: https://policies.google.com/privacy.

D) Device Permissions

To provide features like setting your pet's profile picture and receiving push notifications, we may request access to your device's:

• Camera: To take a new photo of your pet directly within the App.
• Photo Gallery / Storage: To select and upload an existing photo.
• Notifications (POST_NOTIFICATIONS — Android 13+): To send you push notifications. You will be asked for this permission at the time you first enable notifications. Denying this permission means you will not receive push notifications; all other App features remain unaffected.

You can revoke these permissions at any time in your device settings.

3. Country is user-selected (not GPS)

Your profile country is set manually by you. It is not determined by tracking your device GPS. We use your selected country primarily to:

• Show local store product availability and links for that country.
• Provide country-based filtering in the community (based on your choice).

4. How we use information

We use information to:

• Provide and maintain the App (authentication, account management, settings).
• Create and display pet digital identities and pet photos.
• Enable community features (posting, commenting, voting, searching, reporting).
• Show product listings sourced from affiliate XML feeds and categorize them.
• Compute and display community-driven product insights based on aggregate likes/dislikes and referenced discussions.
• Translate content when you request it (see Section 6).
• Display ads and apply your consent choices (Google UMP + AdMob).
• Keep the platform safe (abuse prevention, moderation, enforcement).
• Provide support and respond to requests.

5. Legal bases (GDPR/EEA/UK where applicable)

If GDPR/UK GDPR applies, we process personal data under:

• Contract: To provide the App features you request (account, community, pet profiles, product features).
• Legitimate interests: Safety, security, moderation, and improving App reliability.
• Consent: For ad-personalization/measurement and related tracking where required (managed via Google UMP).
• Legal obligation: Compliance with laws and lawful requests.

You can withdraw consent anytime via in-app consent settings.

6. Translation (Azure Translator)

When you choose to translate a thread or comment, the text you selected is sent to Microsoft Azure Translator to provide a translation to your chosen language.

• Translation happens only when you trigger it.
• The translated output is displayed to you in-app.
• Microsoft may process the submitted text to provide the service under its own terms and privacy commitments.

7. Product feeds, affiliate links, and "community rating"

Products displayed in the App are obtained from XML feeds from stores through affiliate agreements. When you tap a store link, you are directed to that third-party store site using an affiliate link.

• No products are sponsored in Identitail.
• Product ratings/likes/dislikes and related insights are community-driven, not influenced by the developer or third parties.
• Third-party stores' data practices are governed by their own privacy policies.

8. How we share information

We do not sell your personal information in the traditional sense. We share data only as needed:

A) Vendors / processors

• Google (AdMob + UMP): For ads and consent management.
• Google Firebase (Analytics + Crashlytics): For app usage analytics and crash diagnostics, subject to your consent.
• Google Firebase Cloud Messaging (FCM): For delivering push notifications to your device, if you have enabled notifications.
• Microsoft Azure Translator: For translations you request.
• Hosting/infrastructure providers: To store and deliver app data and media (pet photos).

B) Legal/safety

We may disclose information if reasonably necessary to:

• Comply with law/legal process.
• Enforce policies.
• Prevent fraud/abuse.
• Protect the rights, property, or safety of users, the public, or us.

C) Business transfers

If the App is involved in a merger, acquisition, or asset transfer, information may be transferred subject to appropriate protections.

9. Data retention

We retain data only as long as needed for the purposes described:

• Account + pet profile: Retained until you delete your account.
• Pet photos: Retained until you delete your account OR until you upload a new photo to replace the old one. Replaced photos are deleted from our servers subject to reasonable technical deletion timelines (e.g., backups).
• Threads/comments: Retained until deleted by you (where available) or removed for policy enforcement.
• Reports/moderation logs: Retained as needed for safety, abuse prevention, and compliance.
• Consent records: Retained to respect your preferences and demonstrate compliance where required.

10. Your rights and controls

In-app controls (Privacy & Security)

You can:

• Change your password.
• Review/update your ad consent choices (Google UMP).
• Enable or disable push notifications via the Settings screen. Disabling removes your FCM token from our servers.
• Delete your account and associated data: You can delete your account directly within the App settings. This also removes your FCM token.

Web Deletion: If you cannot access the App, you may request deletion via our website at https://identitail.com/data-deletion or by contacting us via email.

GDPR/UK GDPR rights (where applicable)

You may have rights to access, correct, delete, restrict/object, portability, withdraw consent, and complain to a supervisory authority.

CCPA/CPRA (California, where applicable)

You may have rights to know, delete, correct, and opt-out of "sale/sharing" as defined by law. Some ad-tech processing may be considered "sharing"; consent and controls are managed via Google UMP where applicable.

To exercise rights, contact: identitail.app@gmail.com.

11. Security

We use reasonable technical and organizational measures to protect information. However, no system is 100% secure; please use the App at your own risk.

12. Children's privacy

This App is not intended for individuals under the age of 16.

During the account creation process, all users are required to confirm via a checkbox that they are 16 years of age or older. We do not knowingly collect personal information from children under 16.

If we become aware that a child under 16 has provided us with personal information in violation of this policy, we will take steps to delete such information and the associated account. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at identitail.app@gmail.com.

13. International transfers

Your information may be processed in countries other than your own (e.g., where Google/Microsoft infrastructure operates). Where required by law, appropriate safeguards are used for such transfers.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this policy. We may provide additional notice in-app regarding material changes.

15. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of Bosnia and Herzegovina, without regard to its conflict of law provisions. Any disputes arising from this Policy or your use of the App shall be resolved in the competent courts of Bosnia and Herzegovina.

16. Contact

Email: identitail.app@gmail.com
Instagram: @identitail