Privacy Policy
Last updated: August 2026
Account and identity
SafaRoll requires an account, because your collection follows you across devices. Authentication runs through Clerk: depending on the method you choose, we receive your email address, or the anonymous relay address provided by Sign in with Apple. We never ask for your real name, phone number or date of birth.
Your photos and captures
The photos you take are sent to our servers to be identified, then kept alongside your collection: they are your cards. They stay private by default. A photo only becomes visible to other players if you place its card in a deck and publish that deck — an explicit action, never a default setting.
Species identification
The image is passed to our identification service, hosted on Modal, which runs the BioCLIP model. The image is processed for the duration of the inference and then released; the service keeps no copy and trains no model on your photos.
Location
If you allow it, the capture's location is stored with it, to place it on your world map. It plays no part in identification: the species returned is the same with or without a location. The permission is optional — without it the app works and the map stays empty. Locations are never shared with other players.
Where your data lives
Data is hosted on Supabase, in the European Union (Frankfurt). Access is partitioned at the database level: a query can only read rows belonging to its own account, plus decks other players have explicitly published.
The Guide (AI)
Questions asked to the Guide are sent to OpenAI to produce an answer. Conversations opened from your profile are kept so you can read them again; those opened from a card are ephemeral and never written to the database. OpenAI does not train its models on these exchanges under its API terms.
Purchases and subscriptions
Purchases are processed by Apple, and subscription state managed by RevenueCat. RevenueCat receives an identifier tied to your account and your subscription status, never your payment details — Apple alone holds those. RevenueCat's policy: revenuecat.com/privacy.
What we don't do
No advertising, no data resale, no cross-app advertising trackers, no commercial profiling.
Published content and moderation
Public decks, profiles and leaderboards display other players' content. Every deck and profile can be reported, and any player can be blocked from inside the app. Reports are reviewed within 24 hours and content removed if it breaches our terms.
Your rights (GDPR)
You have the right to access, rectify, object, port and erase. Erasure is built in: Profile → Delete my account wipes your collection, photos, decks and conversations, with no retention. For any other request, write to contact@safaroll.com — we answer within 30 days.
Contact
For any question, write to contact@safaroll.com. We answer within 48 hours.