For your family
Privacy, in plain English.
Version 1.0, 30 October 2026. Under review by our privacy adviser; we will update this page and the date when that review completes.
For grown-ups
Phenomify is free. There are no ads, analytics or tracking, and no data is sold. We use no AI providers. Children explore with a grown-up; they do not need their own accounts or real names.
Microphone audio is processed on the device and never stored or sent. There is no location tracking. The first release does not include location-based hunts or public boards.
This notice describes our planned first release. Public family services are not yet enabled. The legal basis, provider arrangements and full retention and deletion process must pass privacy review before real families use connected services.
What Phenomify keeps, and what it never keeps
Your journal can keep nature photos you choose, a nickname, your notes and your discoveries. Ask your grown-up before sharing a photo with your family.
We never keep recordings of your voice. We do not follow where you go, sell your information or send your discoveries to an AI service. Photograph nature, not faces, names or addresses. Your grown-up can help you ask for a copy or delete things.
Who is responsible?
Daniel Hughes, Cyprus, is the data controller: the person responsible for how Phenomify uses personal information. Contact support@phenomify.app about privacy, access or deletion.
What the app keeps and why
- On-device practice: up to six nature photos and your practice journal stay on the device until you remove them. They are not uploaded unless a grown-up chooses to carry them into a family journal.
- A grown-up’s account: when connected family services become available, an adult email address (including an Apple relay address), account identifiers and sign-in information support secure access. Children have no individual accounts.
- A private family journal: nicknames, mode choices, selected photos, observations, questions, finds and progress support the family collection. Household members with access can see shared entries. A nickname is not a guarantee of anonymity.
- Support: we receive the email address and information you choose to send so we can respond. Please do not send children’s photos, voices, real names or location details.
Camera, microphone and location
Camera access is for nature photos you choose to take. Permission requests and external links require a grown-up’s gate. A gate helps control access; it does not prove a person’s age or replace legally required consent.
Photo metadata is removed before family upload, including embedded GPS information. A photo can still show a face, sign or address, so check its contents before sharing.
Microphone audio is processed on the device and never stored or sent. If Listen is available in a later reviewed build, its short audio buffer is temporary. A saved sound find contains only the chosen sound type, an optional bird choice, a drawn waveform, the time and a guide link—not a recording. Listen is off in the first release.
There is no location tracking, background location collection or public map of children. Location-based hunts and public boards are off in version 1. Photos and notes may reveal a place if you include one.
Who handles information?
No AI providers receive data. There are no advertising, analytics or tracking providers. We do not sell personal information.
This website is hosted by Cloudflare. Delivering and protecting a website involves basic connection information such as an IP address. This site sets no cookies and includes no scripts, analytics or third-party fonts.
The planned family service uses Cloudflare for hosting and private journal storage and Supabase for adult sign-in. Those providers’ processing, international transfers, security records and backups are under review. Connected services stay disabled until those arrangements satisfy our children’s privacy rules, including C18: no child data to third parties. Listing a planned provider here is not an approval to send child data.
How long is information kept?
Practice photos stay locally until removed. Family records do not currently have an automatic expiry. We will publish the approved retention schedule, including support messages, security records and backups, when the adviser’s review is complete and before connected services open. We do not promise that signing out erases a shared journal or a provider’s backups.
Get a copy or delete data
A grown-up can use available family Settings to export the journal and photos or clear family data. See the deletion steps and limitations. Signing out, clearing sign-in or removing the app is not the same as closing an account.
For an account closure, a complete export or a deletion request that the app cannot complete, email support@phenomify.app. We aim to reply within 3 working days and complete email deletion requests within 30 days, after checking the requester’s authority. Shared entries, necessary security records or legal obligations may need individual handling; we will explain any limitation and what remains.
You can ask to access, correct, erase or receive a copy of your information, or restrict or object to its use where applicable. If processing relies on consent, you can withdraw it. You may complain to the Cyprus Commissioner for Personal Data Protection or your local data protection authority. Contact us if you need help exercising these rights.
Changes to this notice
We will update this page and its date when the privacy review completes or our practices change. New features need a reviewed app build and appropriate updated notices. No purchases or payment information form part of version 1.