🦎

Privacy Policy

Last Updated: August 7, 2026

Privacy First: Your reptile care data stays on YOUR device. We don't collect, store, or have access to your reptile profiles, photos, reminders, or care logs. The only time an image leaves your device is if you personally choose to use the AI species identification feature, which is explained in Section 3.2. The App also collects limited, anonymous usage statistics to help us understand how features are used — see Section 3.4.

1. Overview

Exotic Reptile Care ("the App") is owned and operated by Imad El Khafi through Khafi Studio LLC ("we," "us," or "our"). The App is available on iOS and Android and is designed with your privacy in mind. It functions primarily on your device, and all of your personal reptile care data remains under your control. This Privacy Policy explains what limited information is collected, when data is transmitted, and how third-party services operate within the App. It applies to both the iOS and Android versions of the App.

2. Data Storage — Your Device Only

All of your personal data is stored locally on your device and is never transmitted to our servers:

Reptile profiles (names, species, ages, etc.)
Photos you add to your reptile profiles and notes
Care reminders and schedules
Weight, feeding, shedding, health, supplement and medication logs
Enclosures, breeding records, feeder inventory and notes
All other app data and settings

We cannot access this data. It remains on your device until you choose to delete it. If you create a backup file using the App's Export feature, that file is saved wherever you choose and is never sent to us.

3. Information We DO Collect or Transmit

The App only transmits data in the specific, limited situations described below.

3.1 Google AdMob (Advertising)

We use Google AdMob to display advertisements in the free version of the App. AdMob may collect:

Advertising ID (a unique identifier for your device)
Device type and operating system version
IP address (approximate location)
Ad interaction data (which ads you viewed or clicked)

This data is collected and managed by Google, not by us. You can opt out of personalized advertising through your device settings (see Section 6.2). Ads are removed entirely if you purchase the Pro Pack or a Premium subscription.

Learn more: Google Privacy Policy

3.2 AI Species Identification

The App includes an optional feature that identifies a reptile's species from a photo. This feature only runs when you actively choose to use it. When you do:

The single image you select or capture is sent to a third-party AI provider (OpenAI) to be analyzed.
On Android: the image is first relayed through a secure backend service we operate on Google Cloud / Firebase, which forwards it to the AI provider and returns the result. This relay exists so that the credentials used to reach the AI provider are never stored inside the App itself. The image is processed in transit only — it is not saved, logged, or retained on our service, and no copy is kept once your result is returned.
On iOS: the image is currently sent directly from your device to the AI provider. We intend to move the iOS version to the same relay described above; this policy will be updated when that happens.
The AI provider processes the image only to return a species suggestion. Images submitted through its API are not used to train its models.
We do not build a profile from your images, and we do not associate them with you. This is the only situation in which a photo leaves your device.

If you never use the AI identification feature, no photos are ever transmitted anywhere. Because our relay and the AI provider may process the image on servers located outside your country (including the United States), please also see Section 11.

Learn more: OpenAI Privacy Policy | Firebase Privacy & Security

3.3 App Integrity Verification

To prevent misuse of the AI identification feature, the Android version verifies that requests genuinely originate from an authentic, unmodified copy of the App installed from Google Play. This is done using Firebase App Check together with the Google Play Integrity API.

A short-lived verification token is generated by Google Play services on your device and sent with your identification request.
This token attests to the integrity of the App and the device. It does not identify you personally and is not used for advertising or tracking.
Tokens are validated and discarded; they are not stored.

Learn more: Google Play Integrity API

3.4 App Analytics

The Android version of the App uses Google Analytics for Firebase to help us understand how the App is used, which features matter, and where people run into problems. This is measured in aggregate — we cannot see who you are.

The following may be collected:

A randomly generated app instance identifier (not linked to your name, email, or any account)
Device model, operating system version, language, and country
Approximate location inferred from your IP address (country/region level — never precise GPS location)
Anonymous usage events, such as app opens, screens viewed, when an upgrade screen is shown, and when a purchase is completed

We never send your reptile data, photos, notes, or logs to analytics. Analytics records only that an action happened — never its contents.

The iOS version does not currently include analytics. If this changes, this policy will be updated.

Learn more: Firebase Privacy & Security

3.5 In-App Purchases

In-app purchases and subscriptions are processed by the app store you downloaded the App from — the Apple App Store on iOS or Google Play on Android. All payment information is handled by Apple or Google according to their respective privacy policies. We never receive or store your payment details.

When a purchase completes, the App records an anonymous analytics event noting that a purchase occurred, the product involved, and its price. This contains no payment details and cannot be linked back to you.

Learn more: Apple Privacy Policy | Google Privacy Policy

4. What We DON'T Collect

❌ Your reptile data, logs, reminders or schedules
❌ Your reptile photos — except the single image you actively choose to submit to the AI identification feature (see Section 3.2)
❌ Your personal information (name, email, etc.)
❌ Your precise location (AdMob and analytics may infer approximate country/region from IP)
❌ Any account — the App does not require you to register or sign in
❌ Any data that we can use to identify you personally — analytics and advertising identifiers are pseudonymous and are not linked to your real-world identity
❌ The contents of your notes, logs, or reptile profiles — analytics records that an action happened, never what it contained

5. How We Use Information

The limited information transmitted through third-party services is used only to:

Display advertisements (AdMob)
Return a species suggestion when you use AI identification (our relay service and OpenAI)
Verify that identification requests come from a genuine copy of the App, to prevent abuse (Firebase App Check / Play Integrity)
Understand aggregate feature usage so we can improve the App (Google Analytics for Firebase)
Process purchases and subscriptions (Apple / Google)

We do not sell your data, and we do not use it for any purpose beyond operating the features you choose to use.

6. Your Control Over Data

6.1 Your Reptile Data

Since all your data is stored locally on your device, you have complete control:

View: Access all your data anytime within the App
Edit: Modify any information whenever you want
Delete: Remove individual entries, or clear everything via Settings → Clear All Data
Backup: Your data follows your device's backup settings (iCloud on iOS, Google Drive / Android Backup on Android). You can also create your own portable backup via Settings → Backup & Restore (Export), which produces a JSON file that works across both the iOS and Android versions of the App.

6.2 Advertising Preferences

You can control advertising:

Remove Ads: Purchase the Pro Pack or a Premium subscription to remove all ads
On Android: Settings → Google → Ads, where you can opt out of ad personalization or delete your Advertising ID
On iOS: Settings → Privacy & Security → Tracking (turn off "Allow Apps to Request to Track"), and Settings → Privacy & Security → Apple Advertising

6.3 Analytics and Usage Data

You can limit analytics collection:

On Android: Settings → Google → Ads → "Delete advertising ID" removes the identifier used for advertising and limits how usage data can be associated across sessions
Request deletion: contact us at the address in Section 13 and we will request deletion of analytics data associated with your app instance

Because analytics data is pseudonymous and not tied to any account, we may need additional information from you to locate the relevant records.

6.4 Notifications

Control notification permissions:

In-app: Settings → Enable Notifications
On Android: Settings → Apps → Exotic Reptile Care → Notifications
On iOS: Settings → Exotic Reptile Care → Notifications

7. Data Security

Since your personal data stays on your device (other than the optional transmissions described above), it is protected by:

The built-in security features of iOS and Android
Device encryption (if enabled on your device)
Your device passcode, fingerprint, Face ID / Touch ID, or other biometric lock

We recommend keeping your device updated and using its security features to protect your data.

8. Children's Privacy

The App is intended for users aged 13 and older and is not directed at children under 13. We do not knowingly collect personal information from children under 13. Because the free version displays advertising that uses an advertising identifier, parents of younger children should supervise use. If you believe a child has used the App in a way that involves personal data, please contact us and we will address it.

9. Third-Party Links

The App may contain links to external websites (support pages, privacy policies). We are not responsible for the privacy practices of these external sites and encourage you to review their policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted with an updated "Last Updated" date. Significant changes will be communicated through an in-app notification where appropriate. Your continued use of the App after changes means you accept the updated policy.

11. International Users

Most of your data never leaves your device. The only data transmitted off your device is:

To Google, for advertising and for aggregate usage analytics
To our backend relay service, hosted on Google Cloud / Firebase in the United States, and onward to our AI provider (OpenAI), when you choose to use species identification
To Google, for App integrity verification when you use species identification on Android

These providers and our relay service may process data on servers located outside your country, including in the United States. Google and OpenAI comply with applicable international data protection frameworks including the GDPR. Where such transfers involve personal data of EU/EEA residents, they are made under the safeguards those providers maintain, including Standard Contractual Clauses.

12. Your Rights (GDPR & CCPA)

Depending on your location, you may have specific privacy rights:

For EU/EEA Users (GDPR):

Right to access your data (all reptile data is already on your device)
Right to delete your data (delete through app settings; for analytics data, contact us)
Right to opt out of personalized ads (device settings)
Right to object to analytics processing (contact us, or delete your advertising ID in device settings)
Right to data portability (export your data as a JSON file)

For California Users (CCPA):

Right to know what data is collected (listed in this policy)
Right to delete data (available in app settings)
Right to opt out of sale (we do not sell your data)
Right to non-discrimination

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: contact@exoticreptilecare.com

Contact Page: exoticreptilecare.com/contact/

In-App: Settings → Support

Owner: Imad El Khafi — Khafi Studio LLC

We aim to respond within 48 hours.

14. Consent

By using Exotic Reptile Care, you consent to this Privacy Policy. Since the App primarily stores data locally on your device, your acceptance mainly applies to the use of third-party advertising, the optional AI identification feature, and app-store purchase processing as described above.