DeerTrack Privacy Policy
Effective Date: June 11, 2025
1. Introduction
Welcome to DeerTrack. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable European data protection laws. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our mobile application and website (collectively, the "Services"). By using DeerTrack, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our Services.
2. Data Controller
DeerTrack acts as the data controller for the personal data collected through our Services. For any privacy-related inquiries, please contact us at: privacy@deertrack.app
3. Personal Data We Collect
3.1. Account & Profile Information
- Full name and username
- Email address
- Profile photo (optional)
- Password (stored in encrypted form)
3.2. Location Data
DeerTrack collects precise GPS location data to enable core features including map view, pin/sighting placement, and location-based filtering. We collect location data only when you are actively using the app and have granted location permission.
- Precise GPS coordinates when you add a sighting or pin
- General location for map display and filtering
- Location metadata associated with uploaded photos
3.3. Photos and Media
With your explicit permission, DeerTrack may access your device camera and photo library to allow you to attach photos to sightings. Uploaded photos may contain embedded metadata (EXIF data) including location, date, and device information.
3.4. Activity Data
- Sightings, pins, and map interactions
- Friend connections and activity feed interactions
- Stalking license applications and associated data
- Notification preferences and interactions
3.5. Technical Data
- Device type, operating system, and version
- App version and usage logs
- IP address and browser type (for web access)
- Crash reports and performance diagnostics
4. Legal Basis for Processing
Under the GDPR, we process your personal data on the following legal bases:
- Contractual necessity: To provide the Services you have signed up for, including account management, map features, and activity feeds.
- Legitimate interests: To improve our Services, prevent fraud, ensure security, and send service-related communications.
- Consent: For processing precise location data, accessing your camera/photos, and sending marketing communications. You may withdraw consent at any time.
- Legal obligation: Where processing is required to comply with applicable laws.
5. How We Use Your Data
- Creating and managing your account
- Displaying sightings, pins, and maps
- Enabling the friend and invitation system
- Processing stalking license applications
- Sending notifications and email communications
- Improving and personalising the Services
- Ensuring security and preventing abuse
- Complying with legal obligations
6. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with:
- Service providers: Cloud hosting, analytics, email delivery, and crash reporting partners acting as data processors under appropriate agreements.
- Other users: Sightings and pins you mark as public will be visible to other users. Profile information is visible to your friends.
- Law enforcement: Where required by law, court order, or to protect the rights and safety of our users or the public.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred subject to equivalent privacy protections.
7. International Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent transfer mechanisms.
8. Data Retention
We retain your personal data for as long as your account is active or as needed to provide Services. Specific retention periods include:
- Account data: Retained until account deletion, plus 30 days for recovery purposes.
- Location and sighting data: Retained for the duration of your account unless deleted by you.
- Photos: Retained until removed by you or upon account deletion.
- Log and technical data: Typically retained for up to 12 months.
- Stalking license application data: Retained as required by applicable law.
9. Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure ('right to be forgotten'): Request deletion of your data where there is no legitimate reason to continue processing.
- Right to restriction: Request that we limit how we use your data.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
- Right to lodge a complaint: You have the right to complain to your local data protection authority. To exercise any of these rights, contact us at privacy@deertrack.app. We will respond within 30 days.
10. Security
We implement technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
11. Children's Privacy
DeerTrack is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice within the app at least 30 days before the changes take effect. Continued use of the Services after the effective date constitutes acceptance of the updated policy.
13. Contact
For any questions or concerns about this Privacy Policy or our data practices, please contact us at: privacy@deertrack.app