Privacy Policy

Last updated: August 22, 2026

Nocticro identifies animals, plants, and insects from a photo you take or upload. This page explains, plainly, what we collect to do that, why, and how to delete it.

What we collect

Account info: your email address, if you create an account. Your password is hashed by our authentication provider (Supabase). We never see or store it in plain text.
Photos you scan: sent to our identification providers to analyze, and kept in a scan log (used for quality review and abuse prevention) whether or not you save the result.
Saved discoveries: if you save a scan to your AnimalDex, we store the species, a copy of your photo, and anything you add: a nickname, a color flag, favorite status.
Location: only if your device grants permission, and only when you save a discovery. For species classified Vulnerable or worse on the IUCN Red List, we round the coordinates to a coarse grid (roughly a few miles) before saving. The precise location is never stored for those, to protect sensitive habitats like nesting or den sites.
Feedback: if you rate an identification (good, bad, unsure), that rating is attached to the scan.
Anonymous trial usage: before you create an account, we set a minimal, functional identifier (not an advertising or tracking cookie) so a small free trial can't be reset by simply refreshing the page. It only tracks how many free trial scans/messages you've used, isn't linked to any other site, and is discarded once you create an account.
Usage and billing: how many free identifications and chat messages you have left today, and your subscription or token-pack status if you've purchased Nocticro Pro. If you subscribe or buy tokens, our payment processor shares your purchase/subscription status with us so we can grant what you paid for. We never receive or store your card number.

Who we share it with

We use a small number of service providers to run Nocticro. Each only receives what it needs to do its specific job:

OpenAI: analyzes your photo to identify what's in it. As of this writing, OpenAI's API does not use data submitted through the API to train its models.
Google Cloud Vision: checks whether a similar image already exists online, and cross-checks the identification.
Supabase: hosts our database and handles account sign-in.
Vercel: hosts the app and website.
Wikipedia / Wikidata: we look up public reference facts (summaries, images, conservation status) about the species identified. We don't send them anything about you.
Lemon Squeezy: processes payments for subscriptions and token purchases, and, as our merchant of record, handles applicable sales tax/VAT. We never see or store your full card details.

We do not sell your data, and we do not use it for advertising. We don't use third-party advertising or analytics trackers. We do use one first-party, functional cookie/identifier (described above) solely to prevent abuse of the free trial; it doesn't follow you to other sites and isn't used for marketing.

Your choices

Remove any single saved discovery at any time from its detail screen.
Delete your entire account from Profile → Delete Account. This permanently and immediately erases your account, every saved discovery, and every earned badge. It can't be undone.
Decline the location permission prompt. Saving still works, you just won't get a map pin for that discovery.

Children

Nocticro isn't directed at children under 13, and we don't knowingly collect information from them.

Changes to this policy

If this policy changes in a way that matters, we'll update the date at the top of this page.

Contact

Questions about this policy or your data can be sent to privacy@nocticro.com.