Legal
TreeBarkID Privacy Policy
Last updated: October 3, 2026
The canonical version of this policy is published at fluxerlabs.com/apps/treebarkid/privacidad.
Summary
- We use your photos to identify trees. Photos are stored on our servers for up to 35 days and then deleted.
- Your collection, notes and the location of your trees stay on your device. We do not send your location to our servers.
- We do not sell your data or use it for personalised advertising.
- We work with providers (Google, Supabase, Vercel, RevenueCat) that process data only to run the service.
1. Controller
Fluxer Labs SL, Santa Cruz de Tenerife, Spain. Contact: info@fluxerlabs.com.
2. Data we process
| Category | What it is | Where it is stored |
|---|---|---|
| Photos you send for identification | The bark, leaf or tree images you take or choose | Our servers (Supabase, in the EU: Ireland), for up to 35 days |
| Identification results | Species, confidence, observed traits, estimated health | Our servers and your device |
| Feedback and suggestions | What you write when you report a wrong identification or suggest a feature | Our servers |
| Installation identifier | A random identifier for this installation of the app. It is not your name, your email or the device advertising identifier | Our servers |
| Technical and usage data | Platform, app version, language, time zone, usage events (for example, “identification started”), app errors, response times | Our servers |
| IP address | Used to limit abuse of the service (rate limiting) | Short-lived technical records |
| Subscription | If you are Pro, your subscription status. We never receive your payment details: Apple or Google handle the payment | RevenueCat and our servers |
| Apple Ads attribution (iOS only) | If you reached the app from an Apple Ads ad, an Apple attribution token that identifies the campaign. We do not use the advertising identifier (IDFA) and we do not track you across apps | RevenueCat |
| Location | Only with your permission, to place your trees on the map | Your device only. It is not sent to our servers |
| Collection, notes and observations | Your saved trees, folders and notes | Your device only |
3. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Identify the tree in your photo and show you the result | Performance of the service you request (6(1)(b)) |
| Manage your Pro subscription and free usage limits | Performance of the contract (6(1)(b)) |
| Prevent abuse and keep the service secure | Legitimate interest (6(1)(f)) |
| Measure performance and fix errors | Legitimate interest (6(1)(f)) |
| Improve identification quality (for example, reviewing frequent errors using photos from the last 35 days and your feedback) | Legitimate interest (6(1)(f)). You can object by writing to info@fluxerlabs.com |
| Learn which Apple Ads campaigns work (iOS only) | Legitimate interest (6(1)(f)) |
We do not make automated decisions that have legal effects on you.
4. Who we share data with
Only with providers that process it on our behalf (processors), under contract and for the purposes above:
- Google (Gemini API): analyses photos to produce the identification.
- Supabase: database and photo storage.
- Vercel: hosting of the service.
- RevenueCat: subscription management and Apple Ads attribution.
- Apple and Google: process payments in their stores, under their own policies.
We also look up a botanical database (Perenual) from our servers, but we send it neither your photos nor any data about you, only species names.
We do not sell your data or share it with advertisers.
5. International transfers
Some providers are located in the United States or may process data there (Google, Vercel and RevenueCat). Our database and photos are hosted in the EU (Ireland). These transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
6. How long we keep data
| Data | Period |
|---|---|
| Photos sent for identification | 35 days |
| Identification results and feedback | For as long as they are needed to provide the service and improve identification quality, or until you ask us to delete them |
| Technical, usage and error data | For as long as they are needed to run the service, measure its performance and fix errors, or until you ask us to delete them |
| IP records for rate limiting | Continuously rolled over; kept no longer than 7 days |
| Subscription | While you are subscribed, and afterwards for as long as the law requires |
| Data on your device | Until you delete it or uninstall the app |
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@fluxerlabs.com. To help us find your data, write to us from whichever email address you prefer and tell us your device model and the approximate dates you used the app; if your app shows a support ID in Settings, include it. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
8. Security
We encrypt data in transit (HTTPS) and at rest at our providers, and access to photos is restricted. No system is 100% secure, but we apply reasonable technical and organisational measures.
9. Children
TreeBarkID is not directed at children under 14. If you are a parent or guardian and believe a child has sent us data, write to us and we will delete it.
10. Changes
If we change this policy in a meaningful way, we will tell you in the app before the change takes effect.