Privacy Policy

Last updated: May 2026

            Key point: Your fossil collection is stored on your device, not on our servers. We collect minimal personal data and never sell it.
        

1. What Information We Collect

Login Information

When you create an account, you provide an email address. We use Firebase (Google's authentication service) to securely handle your login. We store your email in our database to identify you.

Fossil Identifications

Free users: Identification results are not stored on our servers.

Premium users: Your fossil collection is stored on your device only — we do not store it on our servers. When you export to PDF or CSV, that file is created locally on your device.

Expert Review Submissions

If you submit a fossil photo for expert review, we temporarily store that photo on our server to review and respond. After review is complete, the photo is deleted unless you request otherwise.

Usage Data

We log basic app usage (how many identifications per user, error reports) for improving the app. We do not track which fossils you identified or store detailed activity logs.

2. Firebase & Google

You log in via Firebase, which is owned by Google. Firebase collects and processes your email and authentication data according to Google's Privacy Policy. We recommend reviewing Google's Privacy Policy.

3. How We Use Your Data

Email: To identify your account and send subscription/password reset emails
Usage logs: To improve app performance and fix bugs
Review photos: To provide expert feedback (then deleted)
Subscription info: Managed by Stripe for billing

We do NOT: sell your data, share it with advertisers, use it for targeted ads, or store your fossils on our servers.

4. Data Storage & Security

Device-only collection: Premium users' saved fossils are stored on their device using local storage — we cannot access them, and they are not synced to our servers.

Server data: Your email and account info are encrypted in transit (HTTPS) and at rest. We use industry-standard security practices.

Backups: We maintain regular backups of our database for disaster recovery. If you request account deletion, we delete your data and remove you from backups after 90 days.

5. Third-Party Services

Firebase (Google): Login & authentication
Stripe: Payment processing (view Stripe Privacy Policy)
Partner ads: We display ads from partner companies. These are served locally; we do not sell your data to advertisers

6. Your Rights

Under GDPR (if you're in the EU/UK), you have the right to:

Access: See what data we hold about you
Correct: Update incorrect information
Delete: Request deletion of your account and data
Export: Download your data in portable format
Withdraw: Stop receiving emails from us (except essential account emails)

To exercise these rights, use the contact form in the app.

7. Children's Privacy

AmmoniteID is not intended for children under 13. We do not knowingly collect data from children. If you believe we have collected data from a child under 13, contact us immediately.

8. Changes to This Policy

We may update this policy. Changes take effect immediately upon posting. Continued use of the app constitutes acceptance.

9. Contact

For privacy questions or data requests, use the contact form in the app or email support via the help section.