WildFrame Privacy Policy

1. Introduction

This Privacy Policy explains how Wanderlust Expeditions LLC (“WildFrame,” “we,” “us,” “our”), a Georgia USA limited liability company located at 5545 Ashwind Trace, Johns Creek, GA 30005, collects, uses, stores, and protects your information when you use the WildFrame service, including the desktop application, the mobile application for iOS and Android, and the wildframe.app website (collectively, the “Service”).

WildFrame acts as the data controller for the personal data described in this Privacy Policy.

This Privacy Policy should be read alongside our Terms of Service, which govern your use of the Service. Terms defined in the Terms of Service have the same meaning when used in this Privacy Policy.

By creating a WildFrame account or using the Service, you acknowledge that you have read and understood and agree to this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you sign in with Google or Apple, we receive and store the following from your chosen sign-in provider:

• Your name
• Your email address (for Sign in with Apple, this may be a private relay address if you choose to hide your email)
• Your profile photo URL (Google sign-in only)

We do not receive or store your Google or Apple password. Authentication is handled entirely by Google or Apple.

2.2 Media and Metadata

When you use WildFrame to organize and assess your wildlife media, we collect:

• EXIF metadata extracted from your media files, including camera make and model, lens information, exposure settings (aperture, shutter speed, ISO), timestamps, and GPS coordinates (if present in the file).
• Thumbnail images generated from your photos. These are reduced-resolution copies used for display within the WildFrame interface.
• Compressed video derivatives generated from videos you capture in the app. When you record a video, WildFrame stores a compressed, reduced-quality playback copy (an MP4 derivative) on our cloud servers so you can play the clip back within the app and so it can be analyzed. This is never your original full-resolution recording — it is a derivative copy of bounded size.
• File metadata such as file name, file size, file type, and folder path on your local device.

We do not upload or store your original full-resolution media files. Your original files remain on your local devices and external drives.

2.3 Data Generated by Automated Analysis

When your media is processed by WildFrame’s analysis systems, we generate and store:

• Species identification results (common name, scientific name, confidence level). Species identification is performed by an automated image-recognition model that WildFrame operates on its own servers (see Section 6.6). It is not performed by Anthropic.
• Quality assessment scores and signals (composition, lighting, sharpness, subject prominence) — generated by Anthropic Services
• Editing guidance and improvement suggestions — generated by Anthropic Services
• Chronicle narratives (trip stories and species summaries) — generated by Anthropic Services
• WildFrame Coaching session content (interactive editing guidance) — generated by Anthropic Services

2.4 User-Created Data

We store data you create within the Service, including:

• Trip definitions (name, dates, locations)
• Filter rules and review decisions (Approve, Exclude, Defer)
• User preferences and settings

2.5 Usage Data

We automatically collect limited technical information when you use the Service:

• Feature usage patterns (which features you access and how often)
• Browser type and version
• Operating system and device type
• Screen resolution
• Session duration and page views
• Error logs and crash reports
• Push notification token (mobile only) — collected if you opt in to notifications; used solely to deliver alerts you have enabled; deleted when you revoke permission or delete your account.

2.6 Subscription and Billing Information

If you subscribe to a paid tier (Ranger, Rover Standard, Rover Max, or Outfitter), payment is processed exclusively through the Apple App Store (iOS) or Google Play Store (Android). WildFrame does not receive, process, or store your credit card number, bank account details, or other payment card data.

Apple and Google provide us with limited subscription status information necessary for account management, including subscription tier, subscription status (active, expired, in grace period), billing provider (Apple or Google), and subscription start/renewal dates. We do not receive your payment method details.

Your payment data is governed by Apple’s Privacy Policy or Google’s Privacy Policy, as applicable.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing the Service

• Identifying species in your media using an automated image-recognition model that WildFrame operates on its own servers
• Processing your media through Anthropic Services to generate quality scores, editing guidance, and narratives
• Sending media metadata and frame samples to Anthropic Services for analysis
• Generating and storing thumbnail images and compressed video derivatives for display, playback, and analysis within the WildFrame interface
• Retrieving regional species occurrence data that may inform our analysis
• Providing WildFrame Coaching sessions
• Generating Chronicle narratives for your trips
• Storing and displaying your trips, assessments, and review decisions

3.2 Account Management

• Authenticating your identity via Google Sign-In or Sign in with Apple
• Managing your subscription tier and enforcing plan limits (media quota, query quota)
• Receiving subscription status from Apple App Store or Google Play Store
• Communicating with you about your account, subscription, or the Service

3.3 Service Improvement

• Analyzing aggregate, anonymized usage patterns to improve features and performance
• Diagnosing technical issues and improving reliability
• Understanding which features are most valuable to users

We do not use your media, metadata, or content generated by Anthropic Services to train machine learning models.

3.4 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, our legal basis for processing your personal data is as follows:

4. WildFrame Desktop App

The WildFrame desktop app imports your media and syncs metadata to WildFrame. This section describes how the desktop app handles your data.

4.1 What the Desktop App Accesses

• The app reads media files only from drives and folders you explicitly designate. It does not scan your entire filesystem.
• The app extracts EXIF metadata and file information from media files in your designated locations.
• The app generates thumbnail images locally on your computer.

4.2 What the Desktop App Transmits

• Metadata extracted from your media files (EXIF data, file information)
• Thumbnail images and frame samples generated from your media
• App diagnostic information (operating system version, app version)

4.3 What the Desktop App Does NOT Transmit

• Your original full-resolution media files
• Files outside your designated drives and folders
• Any other files or data from your computer

4.4 How the Desktop App Runs

• The app runs only while you have it open; it does not launch at login or run in the background.
• The app reads your designated folders when you import.
• When you are offline, the app stores queued import jobs in a local database on your device; these sync to WildFrame servers when connectivity is restored.
• Usage analytics are disabled by default and can be enabled or disabled at any time via Settings > Privacy > Usage analytics.

5. Data Storage and Security

5.1 Infrastructure

Your data is stored on Google Cloud Platform infrastructure, specifically:

• Google Firestore – account data, metadata, assessment results, trips, user preferences, and all structured data
• Google Cloud Storage (via Firebase) – thumbnail images and proxy files
• Google Cloud Run – processing pipeline (stateless; does not persistently store your data)

Data is stored in the us-central1 region. See Section 10 regarding international data transfers.

5.2 Encryption

• In transit: All data transmitted between the WildFrame apps and WildFrame servers is encrypted using TLS (Transport Layer Security).
• At rest: Data stored in Google Firestore and Cloud Storage is encrypted at rest using Google’s default encryption (AES-256).

5.3 Access Controls

• Authentication is enforced through Firebase Authentication using Google Sign-In and Sign in with Apple.
• Firestore Security Rules restrict data access so that users can only read and write their own data.
• Administrative access to production systems is limited to authorized personnel and protected by multi-factor authentication.

5.4 Security Limitations

No system is perfectly secure. While we implement reasonable security measures, we cannot guarantee absolute security. You are responsible for maintaining the security of your Google account, which serves as the gateway to your WildFrame account.

6. Third-Party Services

WildFrame uses the following third-party services that may receive or process your data:

6.1 Anthropic Services

Media metadata and frame samples from your media are sent to the Anthropic Services for analysis, including quality assessment, editing guidance, and content generation (Chronicle narratives and Coaching). Species identification is not performed by Anthropic — see Section 6.6. Anthropic processes this data under their API Terms of Service. Anthropic’s current API terms state that API-submitted data is not used for model training and is not retained beyond the processing request.

Data sent: Media thumbnails, EXIF metadata, text prompts generated from media context. Data retained by Anthropic: None, per current API terms.

6.2 Google Cloud Platform (Infrastructure)

Google provides the cloud infrastructure that hosts WildFrame, including Firebase Authentication, Firestore, Cloud Storage, and Cloud Run. Google’s data processing terms apply. See Google Cloud Privacy Notice.

6.3 Apple App Store / Google Play Store (Subscription Billing)

All paid subscriptions are processed through Apple’s App Store (iOS) or Google Play Store (Android). We do not receive or store your payment card details. Apple and Google provide us with subscription status information only (tier, status, dates). Your payment data is governed by Apple’s or Google’s respective privacy policies.

6.3b Sentry (Error Monitoring)

We use Sentry for error monitoring and crash reporting. Error logs may contain your user ID for the purpose of diagnosing issues. Sentry logs are automatically expired after 90 days. See Sentry’s Privacy Policy.

6.4 OpenStreetMap / Nominatim (Reverse Geocoding)

When your media includes GPS coordinates, we may send those coordinates (latitude and longitude only) to the Nominatim geocoding service to resolve human-readable location names. No other user data is sent to this service. See Nominatim Usage Policy.

6.5 GBIF (Species Occurrence Data)

We query the Global Biodiversity Information Facility (GBIF) database to retrieve regional species occurrence data that may inform our analysis. These queries include only a country or region name and an observation year — no precise geographic coordinates and no user-identifying information. See GBIF Terms of Use.

6.6 Automated Species Identification (WildFrame-operated)

WildFrame identifies the species in your photos using an automated image-recognition model that runs on WildFrame’s own cloud servers. This processing happens inside WildFrame’s infrastructure (hosted on Google Cloud Platform; see Section 6.2) — your imagery is not sent to any separate third-party species-identification vendor for this step, and is not used to train or improve the model. The model uses pre-existing, openly licensed weights and analyzes a frame from your media to produce a species name and an internal confidence value used only to decide whether to display a result.

7. Cookies and Tracking

The WildFrame apps sign you in with Google and keep your session using an authentication token stored on your device, not browser cookies. The wildframe.app website is a marketing and download site that also hosts these legal pages; it does not set cookies or perform cross-site tracking.

We do not serve advertising and do not allow advertising networks to place cookies through the Service.

8. Data Retention and Deletion

8.1 Active Accounts

While your account is active, we retain data associated with your account for the following periods:

8.2 Account Deletion

You may delete your account at any time through the Settings screen in the WildFrame application. When you request deletion, your account enters a 30-day grace period during which you may cancel the request. After 30 days, the deletion sequence executes.

When you delete your account, we execute the following deletion sequence:

1. Fulfill any open data access requests (DSAR).
2. Revoke account sessions.
3. Delete all Firestore user data and subcollections (profile, trips, media metadata, assessments, preferences, chronicles).
4. Delete all thumbnail images and compressed video derivatives from Cloud Storage.
5. Delete any open support tickets associated with your account.
6. Anonymize your user ID in audit logs (UID replaced with anonymized hash).
7. Delete Coach conversation history.
8. Delete your Firebase Authentication account.
9. Apple/Google retain purchase history as required by law — WildFrame does not control this data after deletion.
10. Scrub your user ID from recent error logs (Sentry).
11. Confirmation notification before sign-out.

Your original media files on your local devices and external drives are never affected by account deletion.

8.3 Subscription Cancellation

If you cancel your paid subscription without deleting your account, your account reverts to the Wanderer (free) tier. Your data is retained but features beyond the free tier are no longer available. To fully remove your data, you must delete your account as described above.

8.4 Backup Retention

After account deletion, residual copies of your data may remain in encrypted backup systems for up to six months following deletion, after which they are purged on a rolling cycle, consistent with standard industry practice. (Google's published privacy policy states that data can remain on backup systems for up to six months; Apple's policy does not state a specific timeframe but states that retention is kept to the shortest period permissible under law. Our practice mirrors Google's stated standard.)

8.5 Exceptions to Deletion

We may retain limited data after account deletion where required by law or law enforcement (e.g., billing records for tax compliance) or to enforce our Terms of Service (e.g., records of account termination for violations).

9. Children’s Privacy

WildFrame is not directed at, and may not be used by, anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are under 18, do not use the Service or provide any information to us.

If we learn that we have collected personal information from a user under the age of 18, we will take steps to delete their account and all associated information as quickly as possible. If you believe we may have collected information from a user under 18, please contact us at support@wildframe.app.

10. International Data Transfers

WildFrame stores and processes data in the United States (Google Cloud us-central1 region). If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By accessing and using this website, you agree to this data transfer provision.

For Users in the European Economic Area (EEA), United Kingdom, or Switzerland

If you are located in the EEA, UK, or Switzerland, your data is transferred to the United States under the following safeguards:

• Google Cloud Platform operates under the EU-US Data Privacy Framework and Standard Contractual Clauses for EU-US data transfers.
• Anthropic processes API data in the United States. Data is not retained beyond the processing request per current API terms.
• Apple/Google billing data is processed under Apple’s and Google’s respective data processing terms, both of which include approved transfer mechanisms.
• Sentry maintains Standard Contractual Clauses for EU data transfers.

11. Your Rights

11.1 All Users

Regardless of your location, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your account and associated data (see Section 8).
• Export your data. Assessment results, trip data, and metadata can be exported from the WildFrame interface.

11.2 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including:

• Right of access (Article 15) – You may request, in writing, a copy of the personal data we process about you.
• Right to rectification (Article 16) – You may request, in writing, correction of inaccurate personal data.
• Right to erasure (Article 17) – You may request deletion of your personal data, in writing, subject to the exceptions in Section 8.5.
• Right to restrict processing (Article 18) – You may request, in writing that we limit how we use your data. We are not obligated to comply with such request and you may opt not to use the service.
• Right to data portability (Article 20) – You may request your personal data in a structured, commonly used, machine-readable format. Such requests must be made in writing.
• Right to object (Article 21) – You may object, in writing, to processing based on legitimate interests.
• Right to withdraw consent – Where processing is based on consent, you may withdraw consent in writing at any time.

To exercise these rights, contact us at support@wildframe.app. We will respond within 30 days (or within the timeframe required by applicable law).

If you believe your rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.

11.3 California Residents (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, and disclose.
• The right to delete your personal information.
• The right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information as those terms are defined under CCPA/CPRA.
• The right to non-discrimination for exercising your privacy rights.

To exercise your California privacy rights, contact us at support@wildframe.app.

12. Data Processing and Sharing

How Your Data Is Processed

WildFrame processes your data using the following systems and third-party services:

• Anthropic Services: Media metadata and frame samples are sent to Anthropic Services for analysis, including species identification, quality assessment, and content generation. Anthropic’s terms state that submitted data is not used for model training and is not retained beyond the processing request.
• Cloud Storage: Thumbnail images are stored in Google Cloud Storage (via Firebase). Full-resolution media files remain on your local devices and external drives – WildFrame does not upload or store your original media files.
• Database: Metadata, assessment results, user preferences, and account data are stored in Google Firestore.
• WildFrame Desktop App: The WildFrame desktop app runs on your computer and reads media files from drives and folders you explicitly designate. The app transmits metadata and frame samples to WildFrame servers; it does not upload full-resolution original files.

Data Sharing

• We do not sell your personal data or media to third parties.
• We do not share your data with third parties except as necessary to provide the service (e.g., sending data to Anthropic Services for processing, using Google Cloud infrastructure for storage and compute, using Apple App Store or Google Play for subscription billing).
• We may share anonymized, aggregated data (such as species sighting frequency by region) with conservation research organizations. We will never share your personal information or individual media files with third parties for this purpose without your explicit consent.
• Data may be disclosed if required by law, regulation, or valid legal process.

13. Conservation Data

WildFrame may compile anonymized, aggregated wildlife sighting data (such as species frequency by geographic region) from across all users. This data is stripped of all personal identifiers — your name, account, and individual media files are never included.

We may share this anonymized, aggregated data with conservation research organizations to support wildlife conservation efforts. You may opt out of contributing to conservation data aggregation at any time through your account settings.

14. Data We Do Not Collect

For clarity, WildFrame does not collect or store:

• Your Google or Apple account password
• Your payment card numbers or banking details (handled by Apple/Google)
• Your original full-resolution media files
• Your browsing activity on other websites
• Location data from your device (we only process GPS coordinates already embedded in your media EXIF data)
• Contacts, messages, or other personal data from your devices
• Biometric data

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email (using the email address associated with your account) or by a prominent notice within the WildFrame application at least 30 days before the changes take effect.

Non-material changes (such as correcting typographical errors or clarifying existing language) may take effect immediately.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised policy, you must stop using the Service and delete your account.

We encourage you to review this Privacy Policy periodically.

16. Governing Law and Dispute Resolution

These Terms are governed by the laws of the State of Georgia, United States, without regard to conflict of law principles.

Any dispute arising from these Terms or your use of WildFrame shall first be attempted to be resolved through good-faith negotiation. If negotiation fails, disputes shall be resolved through binding arbitration administered by the American Arbitration Association in accordance with its Consumer Arbitration Rules. The venue of arbitration shall be Atlanta, Georgia. The arbitrator’s decision shall be final and binding.

Class Action Waiver. You agree that any dispute resolution proceedings will be conducted on an individual basis only, and not in a class, consolidated, or representative action.

Small Claims Exception. Notwithstanding the above, either party may bring an individual action in small claims court in Fulton County, Georgia.

International Users. If you reside in the European Union, European Economic Area, United Kingdom, or any other jurisdiction where mandatory consumer protection laws apply, nothing in this section limits your rights under those laws. You may bring claims in your local courts if required by applicable mandatory consumer protection legislation, and any mandatory statutory consumer rights in your jurisdiction are not waived by these Terms.

17. Contact

If you have questions about this Privacy Policy, your personal data, or wish to exercise any of your privacy rights, contact us at:

Wanderlust Expeditions LLC 5545 Ashwind Trace Johns Creek, GA 30005 United States Email: support@wildframe.app Web: https://wildframe.app