FungiLens - Privacy Policy

Effective date: October 9, 2026

This Privacy Policy explains how Furkan Kaya ("Developer", "we", "us" or "our") handles information when you use the FungiLens – Mushroom Identifier mobile application, including its notifications and AI features (the "App").

FungiLens is private by design: there are no accounts, and your journal and photos are stored on your device. We do not sell your personal data and we do not use it for advertising.

By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

1. Information stored only on your device

The following information is created by you and stored locally on your device:

  • your foraging journal: saved finds, their photos, notes, dates and, only if you choose to pin a find on the map, its location;
  • your identification history and Expert AI conversations;
  • your onboarding answers (for example your purpose, region and experience level) and your safety pledge;
  • your settings (region, units, language and notification preferences).

We do not have access to this information and it is not uploaded to our servers, except for the limited AI requests described in section 3. It stays on your device until you delete it (for example by deleting finds in the Journal) or delete the App. Because there is no cloud backup, deleted data cannot be recovered.

2. Information collected automatically

Subscription data (Adapty and Apple). Purchases are processed by Apple. We use Adapty to manage subscriptions and to measure paywall performance. Adapty receives an anonymous profile identifier, your device's identifier for vendors (IDFV), App and device information, paywall views, and purchase and subscription status (for example product, price, trial, renewal and expiry dates) from Apple. We never receive or store your payment card details.

Usage analytics. We may use Google Firebase Analytics to understand how the App is used and to improve it. It collects app interaction events (for example which screens are opened, whether an identification was started or a paywall was viewed), together with technical information such as an app-instance identifier, device model, operating system version, App version, language and country/region derived from your IP address. Analytics events never include your photos, the text of your questions, your journal or your location. Neither Firebase nor Adapty collects the Advertising Identifier (IDFA), and we do not track you across other companies' apps or websites.

App integrity. To protect our AI service from abuse, the App uses Apple's App Attest. Our server receives a key identifier generated by your device for the App, which we use to apply fair-use limits (for example the number of free identifications). It is not linked to your name or contact details.

Support requests. If you contact us from the App, your email app opens a draft addressed to us. We receive only what you choose to send, and use it only to answer you.

3. Information sent for AI features

Mushroom identification and the Expert AI are processed on our server (the "AI gateway", Kaya AI Gateway), which uses the Google Gemini API provided by Google. Nothing is sent until you tap "Allow" on the in-app "Allow AI analysis?" prompt, which appears the first time you tap Analyze or send a message to the Expert AI. You can turn it off at any time in Settings → Safety & legal → AI analysis (Google Gemini).

  • Identification. When you tap Analyze, resized copies of the photos you took or picked (up to three), together with your region and language, are sent to identify the mushroom against our species catalog. Photos are used only to return the result. They are not stored by us after the result is returned and are not used to identify you.
  • Expert AI (FungiLens Pro). When you send a message, the text of your conversation, your region and language, and the species being discussed (for example your identification candidates) are sent to generate the answer. Please do not include names, contact details or other personal information about yourself or other people in your questions.

AI requests are transmitted over encrypted connections (HTTPS). They do not include your name, email address or GPS location. Our server does not store your photos or questions; it keeps only a usage count and limited technical, security and abuse-prevention logs. Google processes the data to generate the response under the Gemini API terms that apply to our account and may keep limited logs for abuse monitoring as described in those terms.

Messages that indicate a possible poisoning emergency are not sent to the AI; the App shows the emergency or poison-control number for your region instead.

Edibility information is never generated by AI. Edibility labels come only from our curated species data. AI results can be wrong. Never eat a wild mushroom based on the App; always confirm with a qualified local expert.

4. Camera, photos, location and notifications

  • Camera and photo library. Accessed only when you choose to identify a mushroom or save a photo, and only with your permission.
  • Location. Requested only "While Using the App" and only when you choose to pin a saved find on your private journal map. The location is stored on your device and is never sent to our server or to the AI.
  • Notifications. Season alerts are scheduled locally on your device and are optional. We do not use push notifications for marketing.

You can change these permissions at any time in your device settings.

5. How we use information

We use the information described above only to:

  • provide, maintain and improve the App and its features;
  • provide identification and Expert AI results that you request;
  • manage subscriptions, free trials and purchase restoration;
  • understand usage, fix bugs and measure performance;
  • prevent fraud, abuse and security incidents;
  • respond to your support requests;
  • comply with legal obligations and enforce our Terms of Use.

Legal bases (EEA/UK users). We process information to perform our contract with you (providing the App and subscriptions), on the basis of your consent (AI analysis, camera, photos, location and notifications), for our legitimate interests (analytics, security and improving the App, balanced against your rights), and to comply with legal obligations.

6. Sharing of information

We do not sell, rent or trade your personal information. We share information only:

  • with service providers that help us run the App — Apple, Adapty, Google (the Gemini API and, if enabled, Firebase Analytics) and our server hosting provider — under their own privacy policies and only as needed to provide their services;
  • if required by law, regulation, court order or a valid request by public authorities;
  • to protect the rights, property or safety of the Developer, our users or others, or to investigate fraud or abuse;
  • in connection with a merger, acquisition or sale of the App, in which case this Privacy Policy will continue to apply to your information.

Third-party privacy policies:

7. International transfers

Our service providers may process information in countries other than your own, including the United States and the European Union. Where required, these transfers rely on appropriate safeguards such as Standard Contractual Clauses.

8. Data retention

  • On-device data: kept until you delete it in the App or delete the App.
  • Identification photos and Expert AI messages: not stored by us after the response is returned.
  • Technical and abuse-prevention logs: kept only for the short period needed to protect the service.
  • Analytics data: kept according to Firebase's retention settings (no longer than 14 months).
  • Subscription records: kept by Apple and Adapty as long as needed for your subscription and for legal, tax and accounting purposes.

9. Security

We use reasonable technical and organisational measures to protect information, including encrypted connections for all network requests and keeping your journal on your device. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or the minimum age required in your country). If you believe a child has provided us with information, please contact us and we will delete it.

11. Your rights and choices

Depending on where you live (for example under the GDPR, the UK GDPR, the Turkish Personal Data Protection Law No. 6698 (KVKK) or US state privacy laws such as the CCPA/CPRA), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict its processing, to withdraw consent at any time, and to complain to your local data protection authority.

Because we do not run accounts and your journal is stored on your device, you can exercise most of these rights directly:

  • Delete your data: delete finds in the Journal, or delete the App.
  • Stop AI processing: turn off Settings → Safety & legal → AI analysis (Google Gemini).
  • Camera, photos, location and notifications: manage permissions in your device settings.
  • Subscriptions: manage them in your Apple ID settings.

For any other request, email us at furkan18388@gmail.com. We may ask for information needed to verify the request and will respond within the period required by applicable law. We do not sell or "share" personal information for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. Where the changes are material, we may also notify you in the App. Your continued use of the App after the changes take effect means you accept the updated Privacy Policy.

13. Contact

If you have any questions about this Privacy Policy or our privacy practices, please contact the data controller:

Furkan Kaya
Email: furkan18688@gmail.com

Comments

Post a Comment

Popular posts from this blog

Migraine Tracker - Privacy

  Privacy Policy for Migraine Tracker Effective date: July 11, 2026 This Privacy Policy explains how Migraine Tracker, developed by Furkan Kaya (“we,” “us,” or “the app”), handles information when you use the app. Migraine Tracker is designed as a local-first health diary. We do not require an account and we do not sell personal or health information. 1. Information you enter The app may store migraine and headache entries, pain intensity and location, symptoms, possible triggers, medications and doses, notes, assessment answers and scores, reminder preferences, and app appearance preferences. This information is stored locally on your device in the app database. 2. Optional device and health information Apple Health: If you grant access, the app may read sleep analysis and menstrual flow data and may write completed headache entries. Apple Health access is optional and controlled through iOS Settings. Health data is used only to provide the features you enable and is not used fo...
Read more

PCOS Pandy - Privacy Policy

Privacy Policy PCOS Pandy Last updated: October 3, 2026 Kaya Apps ("we," "us," or "our") built PCOS Pandy (the "App") to help people with PCOS track their cycle, symptoms, food, and weight. This Privacy Policy explains what data the App collects, how it is used, and the choices you have. It applies to the App and to this policy page. If you do not agree with this policy, please do not use the App. 1. Summary (Plain-Language Overview) PCOS Pandy does not require an account. There is no sign-up, login, or password. Your health data (cycle, symptoms, weight, food logs) is stored locally on your device. We do not operate a database of your personal health records. We do not sell your data, and we do not use your health data for advertising. Apple Health (HealthKit) data is used only to power features you explicitly enable, never for advertising, and never sold or shared with data brokers. Three optional features use a third-party AI service, the Goog...
Read more

Peptide Tracker - Privacy Policy

Privacy Policy   Effective Date: July 13, 2026 This Privacy Policy explains how Peptide Tracker ("Peptide Tracker", "the app", "we", "us") handles information when you use the app. Peptide Tracker is developed and published by Furkan Kaya, an independent developer ("the Developer"). Peptide Tracker is built local-first: the compound, dose, injection-site, weight, measurement, wellness, lab, cost, and photo entries you create are stored on your device. We do not operate a server that stores your personal health entries, and we do not require you to create an account to use the app. If you do not agree with this Policy, please do not use the app. Contact us any time at the address in the Contact section below. 1. Information stored only on your device The following categories of information are created by you inside the app and stored in a local database and local key-value store on your device only. None of it is transmitted to us, sold...
Read more