1. Information We Collect

We collect information you provide directly to us, including:

• Account information: username, email address, date of birth (to verify age 13+), and password (hashed).
• Photos you upload: shark tooth images submitted for analysis, stored securely in Google Cloud Storage.
• Analysis data: results from AI identifications including species, confidence scores, and location notes you enter.
• Payment information: processed by Stripe or Apple (via RevenueCat). We never store full card numbers.
• Usage data: analysis counts, feature usage, and subscription tier for enforcing plan limits.
• OAuth identity: if you sign in with Google or Apple, we receive your name, email, and profile identifier from that provider.

2. How We Use Your Information

• Provide and operate the SharkAlytics service
• Analyze tooth photos using Google Gemini AI
• Manage your subscription and process payments
• Send important account and service notifications
• Improve AI accuracy and app features
• Comply with legal obligations

3. AI Analysis & Your Photos

Photos you upload are sent to Google Gemini AI for processing. Google's API terms and privacy policies apply to this processing. We do not use your photos to train third-party AI models without your consent. Photos are stored in your account and can be deleted at any time.

4. Data Sharing

We do not sell your personal data. We share data only with:

• Google Cloud / Gemini: for image storage and AI analysis
• Stripe: for payment processing (web subscriptions)
• Apple / RevenueCat: for iOS in-app purchase management
• Resend: for transactional email delivery
• Law enforcement: only when required by valid legal process

5. Data Retention

We retain your account data for as long as your account is active. You may delete your account at any time from the app settings, which will permanently remove your personal data within 30 days. Analysis results stored in community features may be anonymized rather than deleted.

6. Children's Privacy

SharkAlytics requires users to be at least 13 years old. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact us at privacy@sharkalytics.com and we will delete it promptly.

7. Your Rights

Depending on your location, you may have rights including:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Opt out of non-essential communications
• Data portability (export your data)

To exercise these rights, contact us at privacy@sharkalytics.com.

8. Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, and secure cloud infrastructure. No system is 100% secure, but we take reasonable precautions to protect your information.

9. Cookies & Tracking

We use session cookies for authentication. We do not use third-party advertising trackers or sell data to advertisers. Analytics, if used, are limited to aggregate, anonymous usage statistics.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or in-app notification. Continued use of SharkAlytics after changes constitutes acceptance of the updated policy.

11. Contact

For privacy questions or requests, contact us at:
📧 privacy@sharkalytics.com
Or use our contact form.