Who provides the app
Reptile Tracker is provided by Bryan Wrinkle, operating as BGW in Nature. This policy describes Reptile Tracker and this dedicated website. Questions about your information can be sent to support@myreptiletracker.com.
Information the app processes
Account information includes your email address, account identifier and, when supplied through Sign in with Apple, your name and Apple account information. Firebase Authentication handles sign-in credentials. You choose which animal profiles, care logs, notes, photos, rack layouts, breeding records, inventory and reminder settings to save. Notes and photos can contain personal information you include.
Firebase Analytics processes app interactions, app/device information, app-instance identifiers, feature counts and access status. Examples include opening the paywall, logging care, creating an animal, generating a report and completing a purchase flow. Diagnostic reporting through Firebase Crashlytics includes crash and device/session information and an account identifier to help investigate failures. Broad geographic information may be derived by the analytics service; the app does not request access to your device’s precise location.
Apple and RevenueCat process product, transaction, trial, subscription and entitlement information to verify Pro access and restore purchases. RevenueCat receives an app-account identifier. We do not receive your full payment card details from an App Store purchase.
How this information is used
We process this information to authenticate your account, synchronize and display records, store photos, provide reminders, generate exports and reports, verify purchases, investigate failures and understand feature use. App/device attestation through Firebase App Check with Apple App Attest or DeviceCheck helps assess whether requests originate from the app. Attestation does not replace account authorization.
Services and sharing
Google Firebase provides authentication, Firestore databases, cloud photo storage, analytics, diagnostics and app attestation. Apple provides App Store billing and Apple sign-in. RevenueCat provides purchase and entitlement verification. These providers process information under their own policies: Google, Apple and RevenueCat.
When you export or share a report, you decide who receives it. JSON exports contain photo download links rather than original photo files. Anyone who has a working photo download link may be able to open that photo; treat exports and shared links as sensitive. Removing app access does not by itself revoke a link you previously shared. External retailer links open third-party services whose policies apply there.
The app does not request Apple’s advertising identifier or include cross-company advertising tracking in its declared data practices. This website does not install marketing pixels or a visitor analytics script. Cloudflare will deliver and protect the website; see website data information.
Permissions and choices
Camera and photo-library access are used when you choose to add or save photos. Notification permission enables local care reminders. You can manage these permissions in iOS Settings. Reminder delivery depends on your device’s permissions, settings and scheduling capacity. You can export records and request account deletion in the app’s Settings. Contact support about access, correction or deletion questions; do not include your password, payment details or an entire data export in an initial email.
Retention and deletion
Active account records and photos remain available to provide the app until you remove them or request account deletion. Account deletion uses server cleanup to remove account records across the app database, account entitlements, active uploaded photos and the authentication account. Cleanup can retry after an interruption; an error must not be treated as confirmation that deletion is complete.
Database recovery is configured for seven days of point-in-time history, daily backups retained for 14 days and weekly backups retained for 56 days. Deleted records can remain in recovery copies until those periods expire. Recovery copies are used for operational restoration rather than normal app access. Restoration must account for deletion requests before restoring data to service. Deleted cloud photos remain in the storage provider’s restricted recovery state for seven days.
A restricted operational deletion record containing the account identifier, cleanup status and timestamps is retained to retry unfinished cleanup and prevent delayed uploads from restoring deleted account files. It is not available through normal app access. Account deletion does not automatically erase historical analytics, crash diagnostics, support correspondence or Apple/RevenueCat transaction records; their handling and applicable provider retention may differ. Contact support with questions about a particular category. We do not promise that deleting the account erases every transaction or recovery copy immediately.
Deleting the app or its account does not cancel an Apple subscription. See account deletion and subscription help.
Security and policy updates
Account authorization restricts ordinary access to account records and uploaded files. No online service can guarantee absolute security. Avoid putting information you do not need to store into optional notes and photos, and keep separate copies of records you need to preserve. Changes to this policy will be published here with an updated date. This policy does not promise a particular legal certification or replace rights that apply to you under law.