Privacy Policy

Last updated: March 31, 2026

This Privacy Policy explains how MushroomIdentifiers.com ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and AI mushroom identification service.

1. Information We Collect

We collect information in the following ways:

Information you provide directly:

Email address and password when you create an account
Images you upload for mushroom identification
Messages you send us via the contact form
Payment information — processed securely by our payment partners (we do not store card numbers)

Information collected automatically:

Device type, browser type, and operating system
IP address and approximate geographic location
Pages visited, time spent on pages, and referring URLs
Identification history linked to your account
Credits balance and transaction records

Information from third parties:

Authentication data if you sign in with Google or another OAuth provider

2. How We Use Your Information

We use your information for the following purposes:

To provide and operate the AI mushroom identification service
To process your identification requests and return results
To manage your account, credits balance, and purchase history
To send transactional emails (e.g., purchase confirmation, password reset)
To improve our AI model accuracy and service quality
To detect and prevent fraudulent or abusive activity
To comply with legal obligations
To respond to your support requests or enquiries

We do not sell your personal data to third parties. We do not use your data for unsolicited marketing without your explicit consent.

3. Images You Upload

When you upload an image for mushroom identification, that image is transmitted securely to our AI processing infrastructure (powered by Anthropic Claude). Images are used solely to perform the requested identification and are not stored permanently beyond your session unless you are logged in and have enabled Field Journal saving in your account settings.

We strongly advise you not to upload images containing recognisable faces, private property, or any personally identifiable information.

4. Cookies and Tracking

We use cookies and similar technologies to:

Keep you signed in to your account (authentication session cookies)
Remember your theme preference (dark/light mode)
Track anonymous usage analytics to improve the service (via privacy-respecting analytics tools)

You can disable cookies in your browser settings. Disabling authentication cookies will prevent you from staying logged in. We do not use cross-site tracking cookies or advertising cookies.

5. Data Storage and Security

Your account data and identification history are stored in Supabase, a secure cloud database platform with industry-standard encryption at rest and in transit (TLS 1.2+). Payment processing is handled by our payment partners and we do not store raw payment card data on our servers.

We implement access controls, encrypted connections, and regular security reviews. However, no internet service can guarantee absolute security. If you suspect unauthorised access to your account, please contact us immediately at support@mushroomidentifiers.com.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain certain records (e.g., financial transaction records for tax compliance, typically 7 years).

Anonymous, non-identifiable usage data may be retained indefinitely for analytical purposes.

7. Third-Party Services

We use the following third-party services that may process your data:

Supabase — database, authentication, and storage (supabase.com)
Anthropic — AI inference for mushroom identification (anthropic.com)
Vercel — website hosting and edge delivery (vercel.com)
Payment processors — Visa, Mastercard, bKash, Nagad (for credit pack purchases)

Each of these services has its own privacy policy. We only share the minimum data necessary for these services to function.

8. Your Rights (GDPR / Global Privacy)

Depending on your location, you may have the following rights regarding your personal data:

Right of access — request a copy of your personal data
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your personal data ("right to be forgotten")
Right to data portability — receive your data in a machine-readable format
Right to restrict processing — ask us to stop processing your data in certain circumstances
Right to object — object to processing based on legitimate interests

To exercise any of these rights, email us at support@mushroomidentifiers.com. We will respond within 30 days.

9. Children's Privacy

MushroomIdentifiers.com is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy. For material changes, we will notify registered users by email.