1. Information We Collect
1.1 Information You Provide Directly
| Information Type | Description | Required/Optional |
|---|---|---|
| Username | Display name chosen during account setup | Required |
| Email Address | Used for account linking and authentication | Optional |
| Avatar Selection | Profile image chosen from preset options | Required |
| Language Preference | Your preferred language for the App | Required |
| Referral Code | Code used when invited by another user | Optional |
1.2 Information Collected Automatically
| Information Type | Description | Purpose |
|---|---|---|
| Device Information | Device type, operating system, unique device identifiers | App functionality and crash reporting |
| App Usage Data | Game progress, in-game actions, session information | Game experience and analytics |
| Push Notification Token | Unique token for sending push notifications | Sending notifications (if enabled) |
| Crash and Error Data | Application errors, stack traces, performance metrics | Bug fixes and stability improvements |
| Purchase History | Transaction IDs, products purchased, timestamps | Order fulfillment and support |
1.3 Information from Third Parties
| Source | Information | Purpose |
|---|---|---|
| Google Sign-In | Email, name, profile picture (if provided) | Authentication |
| Apple Sign-In | Email (may be anonymized), name | Authentication |
| App Stores | Purchase confirmation, transaction data | IAP fulfillment |
1.4 Camera and Image Data
When you use the animal scanning feature:
- Camera Access: We request permission to access your device camera.
- Image Processing: Photos are temporarily uploaded to our servers for AI-based animal identification.
- Automatic Deletion: Images are immediately deleted after processing. We do not store or use scanned images beyond identification.
- Scan History: Only the identified animal name, scientific name, and a fact are stored – not the original image.
2. How We Use Your Information
We use the collected information for the following purposes:
2.1 Core App Functionality
- Providing and maintaining the App and your account.
- Processing in-app purchases and delivering Virtual Items.
- Syncing your game progress across devices.
- Enabling the animal scanning and identification feature.
- Sending push notifications (login reminders, stamina refills, referral rewards).
2.2 Improvement and Analytics
- Analyzing usage patterns to improve game balance and features.
- Identifying and fixing bugs, crashes, and performance issues.
- Understanding how users interact with the App.
2.3 Security and Fraud Prevention
- Detecting and preventing cheating, fraud, or abuse.
- Enforcing our Terms of Service.
- Protecting the integrity of the game and user accounts.
2.4 Communication
- Responding to support requests.
- Sending important service updates and security alerts.
- Notifying you of changes to our policies.
2.5 Legal Compliance
- Complying with applicable laws and regulations.
- Responding to lawful requests from public authorities.
3. Legal Bases for Processing (GDPR)
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:
| Legal Basis | Description |
|---|---|
| Contractual Necessity | Processing necessary to provide the App and fulfill our agreement with you. |
| Legitimate Interests | Processing for analytics, fraud prevention, and improving the App (balanced against your rights). |
| Consent | Where you have given explicit consent (e.g., push notifications, camera access). |
| Legal Obligation | Processing required to comply with applicable laws. |
4. Information Sharing and Disclosure
We do not sell your personal information. We may share your information with the following categories of third parties:
4.1 Service Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| Convex | Backend database and real-time sync | Account data, game progress |
| RevenueCat | In-app purchase processing | Purchase data, anonymous user ID |
| Sentry | Error tracking and crash reporting | Device info, crash logs, error data |
| OpenAI | Animal identification from images | Uploaded images (temporarily) |
| Expo Push Notifications | Delivering push notifications | Notification tokens |
| Resend | Email delivery for OTP verification | Email addresses |
4.2 Authentication Providers
- Google: When using Google Sign-In
- Apple: When using Apple Sign-In
4.3 Legal and Safety Disclosures
We may disclose your information if required to:
- Comply with legal obligations, court orders, or government requests.
- Protect and defend our rights, property, or safety.
- Prevent fraud, abuse, or violations of our Terms of Service.
- Protect the personal safety of users or the public.
4.4 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
5. Data Retention
We retain your personal information for as long as necessary to:
| Data Type | Retention Period |
|---|---|
| Account Data | Until you delete your account or after extended inactivity |
| Game Progress | As long as your account is active |
| Purchase Records | Required period for tax/legal compliance (typically 7 years) |
| Crash/Error Logs | Up to 90 days |
| Scanned Images | Immediately deleted after processing |
| Authentication Sessions | Up to 1 year of inactivity |
After the retention period, data is securely deleted or anonymized.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption: Data is encrypted in transit using TLS/SSL.
- Secure Authentication: We use industry-standard authentication protocols.
- Access Controls: Access to personal data is limited to authorized personnel.
- Third-Party Security: Our service providers maintain their own security certifications.
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
7. Your Rights and Choices
7.1 All Users
| Right | Description | How to Exercise |
|---|---|---|
| Access Account Data | View your account information | In-app profile settings |
| Update Information | Modify your username, avatar, or language | In-app profile settings |
| Disable Notifications | Turn off push notifications | Device settings or in-app |
| Revoke Camera Access | Remove camera permissions | Device settings |
| Delete Account | Request account deletion | Delete from the app (Profile → Delete account) or contact [email protected] |
7.2 EEA, UK, and Swiss Residents (GDPR Rights)
Under the General Data Protection Regulation (GDPR), you have additional rights:
| Right | Description |
|---|---|
| Right of Access | Request a copy of your personal data |
| Right to Rectification | Request correction of inaccurate data |
| Right to Erasure | Request deletion of your personal data ("right to be forgotten") |
| Right to Restriction | Request restriction of processing |
| Right to Portability | Receive your data in a portable format |
| Right to Object | Object to processing based on legitimate interests |
| Right to Withdraw Consent | Withdraw consent at any time (without affecting prior processing) |
To exercise these rights, contact us at [email protected].
7.3 California Residents (CCPA Rights)
Under the California Consumer Privacy Act (CCPA), California residents have the right to:
- Know what personal information we collect, use, and disclose.
- Delete personal information we hold about you.
- Non-Discrimination for exercising your privacy rights.
We do not sell personal information as defined by the CCPA.
To exercise your rights, contact us at [email protected].
8. Children's Privacy
8.1 Age Requirements
Bestiara is not intended for children under 13 years of age (or the applicable digital consent age in your jurisdiction). We do not knowingly collect personal information from children under 13.
8.2 Parental Notice
If you believe your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take steps to delete such information promptly.
8.3 Recommended Parental Controls
We recommend parents:
- Review and manage in-app purchase settings.
- Monitor your child's gameplay and notifications.
- Enable platform-level parental controls on iOS and Android.
9. International Data Transfers
Your information may be transferred to, stored, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction.
When we transfer data internationally, we use appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Data processing agreements with our service providers.
10. Push Notifications
10.1 Types of Notifications
We may send push notifications for:
- Stamina refill reminders
- Daily login streak reminders
- Referral completion rewards
- Important service announcements
10.2 Managing Notifications
You can disable push notifications:
- Through your device's notification settings
- Within the App settings
11. Third-Party Links and Services
The App may contain links to third-party websites or services (e.g., our website, app store pages). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of changes by:
- Updating the "Last Updated" date at the top of this policy.
- Posting an in-app notice for material changes.
- Sending a notification (for significant changes).
Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Pillar Interactive
| Contact Method | Details |
|---|---|
| [email protected] | |
| Website | https://bestiara.com |
GDPR Requests
For EEA residents with data protection concerns:
- Email: [email protected]
- Subject Line: "GDPR Request"
Supervisory Authority
If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
15. Summary of Data Practices
| Practice | Status |
|---|---|
| Do we sell personal information? | ❌ No |
| Do we share data with third parties? | ✅ Yes (service providers only) |
| Do we store scanned images? | ❌ No (deleted immediately) |
| Can you delete your account? | ✅ Yes (delete from app or contact support) |
| Do we send marketing emails? | ❌ No (service-related only) |
| Is the App intended for children under 13? | ❌ No |
By using Bestiara, you acknowledge that you have read and understood this Privacy Policy.