Spotted — Privacy Policy
Effective date: 12 July 2026 · Last updated: 12 July 2026
Spotted is a wildlife life-list app for recording the Australian animals you spot. It is
made by an independent developer (Melody Patin). This policy explains what information the app
handles, how it is used, and the choices you have. If you have any questions, contact
melody.patin.dev@gmail.com.
Information we collect
- Account. When you create an account, we collect your email address and a
securely hashed password (handled by our authentication provider, Supabase).
- Profile. Optional details you choose to add: first name, home country,
visa type, arrival month/year, trip end, and a small avatar thumbnail.
- Your collection. The species you mark as spotted, your favourites, your
sightings (the region/zone name, date, and any note you write), and the badges you earn.
- Approximate location. With your permission, the app uses your device's
location while you are using it to show which species have been recorded near you. Your
location is used to make that request and is not stored by us.
- Photos. Photos you add to sightings are stored only on your
device and are never uploaded to our servers. The one exception is a small avatar
thumbnail, which is synced so friends can see it.
How we use your information
- To provide the app: keep your life list, sightings, badges and profile, and sync them
across your devices when you are signed in.
- To show species recorded near your current location.
- To let you connect with friends via invite codes and view each other's passports.
We do not show ads, use third-party analytics or trackers, or sell your
personal information.
Third parties
- Supabase hosts our database and authentication and stores your account,
profile, and collection data on our behalf.
- iNaturalist. To show species near you, the app sends an approximate
location (latitude/longitude) to the public iNaturalist API. No account or profile data is
sent, and iNaturalist does not receive your identity.
- Ko-fi. If you choose to tap “Buy me a coffee”, your browser opens our
Ko-fi page. Any payment is handled by Ko-fi under its own privacy policy; the app itself
shares no data with them.
Data storage, security and retention
Your data is transmitted over encrypted connections (HTTPS) and stored with Supabase. We
keep your data for as long as your account exists. Deleted records are retained briefly in
backups before being permanently removed.
Deleting your data
You can delete your account at any time from the app (Profile → delete account), which
removes your synced profile and collection data. You can also email us to request deletion.
Children
Spotted is not directed at children under 13, and we do not knowingly collect personal
information from them.
Your rights
Depending on where you live (for example under the Australian Privacy Principles or the EU
GDPR), you may have the right to access, correct, or delete your personal information, and to
withdraw consent. To exercise these rights, contact us at the email below.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the
“Last updated” date above.
Contact
Melody Patin — melody.patin.dev@gmail.com