Privacy policy

Vincent Kok is the developer of Qritter and the data controller responsible for personal data processed through Qritter.

You can send questions or privacy requests to privacy@qritter.app.

The data processed depends on the features you use.

• Account data: email address, a technical user ID, and data needed for sign-in and account security.
• Profile data: your chosen display name, initials, profile preferences, privacy settings, and an optional profile photo.
• Observations: animal species, date, number, behavior, notes, identification confidence, location description, country, continent, and optional exact coordinates.
• Photos: photos you add to an observation or profile. A photo may contain metadata, such as the date it was taken.
• Wishlist and goals: saved animal species, priority, notes, and an optional chosen target location.
• Progress: statistics, XP, levels, challenges, badges, and collections calculated from your use of the app.
• Social features: an invitation code, profile visibility, and friend requests when you use these features.
• Technical data: limited log, security, and delivery data processed by our hosting and email service providers, such as timestamps, IP addresses, and error information.

Qritter does not request background location access. Your location, camera, and photo library are accessed only after you use a relevant feature and grant permission through Android.

• To create and secure your account and let you sign in.
• To store observations, photos, your wishlist, settings, and progress and synchronize them between devices when you are signed in.
• To display maps, location choices, species information, and known observation areas.
• To send account confirmations and password recovery emails.
• To prevent misuse, investigate issues, and keep the service reliable.
• To respond to questions and requests concerning your data.

Processing is based on providing our service to you, your consent to optional device features, our legitimate interest in security and reliability, and, where necessary, a legal obligation. You can revoke Android permissions at any time through your device settings.

You can use Qritter without an account. Data in local mode remains on your device and is not automatically linked to a Qritter account. It may be lost if you clear the app data or uninstall Qritter.

When you use an account, your account, profile, observation, photo, wishlist, and progress data may be stored and synchronized through Supabase. Observations are not made public by default. They are shared only when you explicitly choose to do so.

Location is optional. You can enter a location, select one on the map, or request your current location with permission. Exact coordinates may reveal sensitive information, such as your home address or the location of vulnerable animal species. Always check a location before sharing an observation.

Photos are also optional. Only add photos you have permission to use and that do not show people or other sensitive information, unless you have a valid legal basis for doing so.

Qritter uses specialized service providers to operate the app:

• Supabase: account management, database, file storage, and synchronization.
• Resend: sending and delivery monitoring for account emails.
• MapTiler: map tiles, place searches, and location descriptions.
• iNaturalist: species names, photos, taxonomic information, and public observation data.
• Google Play: distribution, installation, and platform security for the Android app.

These parties receive only the data technically required for their role and process data under their own terms and privacy policies. Depending on the service and selected hosting region, processing may take place outside the European Economic Area with appropriate contractual safeguards.

More information: Supabase, Resend, MapTiler, iNaturalist, and Google.

Qritter does not sell or rent personal data and does not use it for targeted advertising. Personal data is shared only with the service providers listed above, when you use a sharing feature, when required by law, or when necessary to protect the rights and safety of users.

Account and cloud data are generally retained for as long as your Qritter account remains active. Following a verified deletion request, we delete the account and associated Qritter cloud data within 30 days. Limited security logs or technical backups may be retained for up to 90 days before being automatically overwritten, unless a legal obligation requires longer retention.

Local data on your device is not deleted remotely. To remove it, clear the app data or uninstall the app. Learn how to submit a deletion request on the Delete your account and data page.

We use reasonable technical and organizational measures, including encrypted connections, access restrictions, and database security. No internet service can guarantee complete security. Use a unique password and do not share sensitive information that is not needed for your observation.

Depending on applicable law, you may request access, correction, deletion, restriction, or transfer of your personal data, or object to its processing. You may withdraw consent for future processing without affecting the lawfulness of previous processing.

Send your request to privacy@qritter.app. We may request additional information to verify your identity. You also have the right to lodge a complaint with the Dutch Data Protection Authority or the supervisory authority in your country.

Qritter is not specifically intended for children. If you believe a child has provided personal data without valid consent, contact us at privacy@qritter.app so we can take appropriate action.

This privacy policy may be revised when Qritter, applicable laws, or the services we use change. The latest version is published on this page with an updated date. We notify users of significant changes through the app or another appropriate method.