Privacy Policy

1.Data controller

The data controller is Jeremy Lasne, individual entrepreneur (entreprise individuelle), France. For any question relating to your data, contact: hello@kaught.app. Given the scale of processing, no Data Protection Officer is required; data requests are handled at the same address.

2.Data we collect

3.Purposes and legal bases

4.Identification by artificial intelligence

To identify the species, the photograph you take is transmitted to our AI provider, Anthropic, PBC (United States). Together with the photograph we send an approximate location (coarsened to roughly 11 km) to help identification. Anthropic processes the image solely to return an identification and, under its commercial API terms, does not use your photographs or the results to train its models. A compressed copy of each Capture is also saved to your private cloud space so your Collection can sync across your devices and be restored if you reinstall (see §7 and §9). We do not use your photographs for any other purpose without your separate consent (see Terms §7.3).

5.Geolocation

Geolocation is optional and is only enabled with your consent (device system permission). You can disable it at any time in your device settings. When enabled, an approximate (coarsened) location is sent with your photo to the AI provider to aid identification (see §4) and is stored with the corresponding Capture.

Before a Capture is published to the community map (see §6), its coordinates are rounded to the precision you choose — exact (about 11 m), neighbourhood (about 1.1 km) or city (about 11 km). Raw GPS coordinates are never published, not even at the “exact” setting, and a Capture you mark as private at the location step is not published at all.

6.The community map

Kaught includes a community map. When you record a Capture, a pin for it is published to a publicly readable part of our database so that other collectors can see it. That part of the database is readable by anyone, not only by people using the Application — the map on our website at kaught.app/map reads the very same data. The pin carries the species, a rounded location (see §5) and a link to your account.

Your own photograph of the Capture is published on that map by default. For collectors who install the Application from this release onward, the setting Settings → Privacy → “Share my catch photos” is switched on to begin with. If you already had the Application before this release, your existing choice is kept — if you never changed it, it stays off, and we do not switch it on for you.

You can change this setting at any time, and the change applies to Captures you have already recorded:

• turning it off deletes the public copies of photographs already published and removes the photograph from the corresponding pins;
• turning it back on republishes the photographs from the Captures already in your Collection.

When the setting is off, the map shows a licensed stock photograph of the species in place of your own — a pin is never left blank.

What is published is a downscaled copy (roughly 640 px, JPEG), stored separately from your Collection. The full-resolution photograph held in your private cloud space is not affected by this setting and is never made public (see §7 and §9). Published photographs are linked to your account identifier. They are not sold, not shared with data brokers, and not used for advertising or to track you across other apps or websites.

A Capture that you mark as private at the location step is never published at all — neither pin nor photograph — whatever this setting says.

7.Recipients and processors

Your data is accessible to the Publisher’s authorised staff and to the following providers (processors), acting on instruction and under a contract compliant with Article 28 GDPR:

Your Captures (photographs and Collection metadata) are stored in your private cloud space on Firebase (Google) to enable sync and restore, and each photograph is transmitted to our AI provider for identification. Product analytics for both the mobile Application and our marketing website (kaught.app) use PostHog, hosted in the European Union; on the website it is loaded only after your consent (see §13), and in the Application it can be switched off at any time (see §14). If you're a Creator Partner paid by bank transfer, your bank details are processed by our bank solely to send that payout. We do not sell your personal data.

8.Transfers outside the European Union

Some processors (notably Anthropic, to which your photos are sent for identification, Google (Firebase / Google Cloud), Resend, Convex, Apple and RevenueCat) are located in the United States. These transfers are governed by appropriate safeguards: the European Commission’s standard contractual clauses and/or adherence to the EU–U.S. Data Privacy Framework where applicable, together with additional measures. A copy of the safeguards can be requested at hello@kaught.app.

9.Retention periods

10.Security

We implement appropriate technical and organisational measures (encryption in transit, access control, per-user data isolation, logging). Sign-in is handled through Google or Apple, so we never see or store a password. As no system is infallible, we cannot guarantee absolute security.

11.Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw your consent at any time (without retroactive effect). You can exercise these rights at hello@kaught.app. You also have the right to lodge a complaint with the CNIL, the French data protection authority (cnil.fr). You can also delete your account at any time from within the app.

12.Minors

The Service is not intended for children under 15 without parental authorisation (see Terms §4.4). We do not knowingly collect data from minors in violation of applicable law. Participation in the Creator Partner Programme by a minor requires prior approval and co-signature by a parent or legal guardian (see Terms Part 3, §1.4).

13.Cookies and trackers

The mobile Application does not use web browsing cookies or advertising trackers, and we do not use your data for cross-context behavioural advertising. It does use PostHog (EU-hosted) for first-party product analytics — recording in-app events and a randomly-generated device identifier to help us understand and improve the Service (see §14) — together with the technical identifiers needed to operate (session, security, push token). You can switch these analytics off at any time in the Application, object to this processing, or request more information at hello@kaught.app (see §11).

Our marketing website (kaught.app) uses PostHog product analytics (EU-hosted) to measure visits and how the site is used. In line with CNIL guidance, PostHog is loaded and its cookies are set only after you accept via the consent banner; if you decline, nothing is stored and no tracking occurs. You can change your choice by clearing this site's data in your browser.

14.Product analytics in the Application

The mobile Application uses PostHog for product analytics. PostHog is hosted in the European Union (eu.i.posthog.com) and acts as our processor, on instruction and under a contract compliant with Article 28 GDPR (see §7).

What we record:

• which screens you open and which buttons you tap;
• the app version and build number, your operating system and device model, and a randomly-generated device identifier;
• once you sign in, these events are linked to your account identifier;
• the answers you give during onboarding — which habitats you explore, what brought you to Kaught, and where you heard about us — so we can understand which kinds of collectors get the most out of the app;
• that a Capture happened, including the species, its rarity, and whether a location was attached — but not the photograph and not the coordinates.

Analytics never receives your Capture photographs, your name, your email address, your search terms, or any location coordinates.

This data is not used for advertising, is never sold, and is not combined with data from other companies' apps or websites. We do not use an advertising identifier and we do not track you across other apps.

You can switch analytics off at any time in the Application: Settings → Privacy → “Share usage analytics”. Turning it off stops collection immediately.

15.Changes to this policy

We may modify this Privacy Policy. In the event of a substantial change, you will be informed by appropriate means. The last-updated date appears at the top of this document.

16.Contact

For any question: hello@kaught.app.