Privacy Policy
This privacy policy explains in plain language what data Shroomtastic processes, which services it is shared with and what rights you have. Last updated: 03.08.2026.
1. Data collected
We store: your email and name (from Google login), your collection incl. photos, identification requests (photo + description + result), GPS coordinates (only with your consent), forum posts and friendships.
2. Location data & Google Maps
When you grant location permission during identification, we process the geographic coordinates (latitude, longitude) and, where available, a rough place name. These coordinates are stored alongside the find so you can revisit your own spots on a map.
For map rendering we embed the Google Maps API from Google Ireland Limited / Google LLC. When you open a map, your device fetches map tiles directly from Google servers, which may process technical access data (IP address, timestamp, map viewport). Details: https://policies.google.com/privacy.
Important: We never expose your exact find location to other users. Third-party users only see a ~1.5 km anonymisation circle around your find. Your own exact coordinates remain visible only to you.
3. Community photos & photo sharing
During identification you may tick "Share photo with the community". If enabled, your photo is published in the community feed and on the corresponding species detail card together with your display name and (if set) profile picture. You can revoke this at any time — the corresponding image is then removed from the public feed immediately. Identifications without this flag remain visible only in your private collection.
4. AI processing & external APIs
For image identification we transmit uploaded mushroom photos to Google Gemini (image-analysis model). Google processes images solely to answer the request and does not retain them for model training under Google Cloud policies. Details: https://cloud.google.com/gemini/docs.
For reference photos and comparison shots we embed data from the iNaturalist API (California Academy of Sciences / National Geographic Society) and — as a fallback — Wikipedia/Wikimedia Commons. No personal data of yours is transmitted to these services; only the scientific species name is used as the search key.
5. Your rights (GDPR)
Under Art. 15–21 GDPR you have the right to information, correction, deletion ("right to be forgotten"), restriction of processing, data portability and objection. In the app you can:
- revoke any individual shared community image at any time via the share toggle on the species page and remove it from the feed;
- permanently delete your entire account including all finds, photos, forum posts, GPS data and friendships via "Profile → Privacy → Delete account & data";
- send further requests (information, data export) to privacy@mycodex.app — processed within 30 days.
6. Contact
For privacy requests contact privacy@mycodex.app. Support: support@shroomtastic.app.