Privacy Policy
H2A Digital ("we," "us," or "our") operates the Birdly mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
📊 Information We Collect
Personal Information
- ✓Bird Photos: Uploaded for identification and removed after processing
- ✓Identification Data: Detection results, confidence, and selected matches
Automatically Collected
- ✓Device Information: Device type, OS, identifiers
- ✓Analytics: PostHog data to improve services
- ✓Usage Data: Features accessed and actions taken
🙂 Face Data (Photos Containing Faces)
What we collect: Birdly processes the photos you choose to upload (bird photo uploads). These photos may contain faces. The App may also generate a bird identification result derived from those photos.
What we do not collect: We do not create or store biometric identifiers such as faceprints, face templates, embeddings, or other biometric profiles for the purpose of identifying a person.
How we use face data: We use the uploaded photos only to provide the App’s core functionality, generating the bird identification result requested by the user. We do not use uploaded photos for advertising, marketing, or tracking, and we do not use them to train our own models.
Where it is stored: Uploaded photos are stored temporarily in our backend on Supabase Storage to perform the identification request.
🧩 Third-Party Face Data Storage (Service Providers)
Do they store face data? Yes. Supabase temporarily stores: (1) uploaded bird photos (which may contain faces) in Supabase Storage under our account, and (2) temporary generated bird identification images produced during processing.
Why do they store it? We upload bird photos to create a short-lived signed URL that our backend uses to securely retrieve the image during processing. This avoids sending large image files inside the identification request payload and improves reliability (e.g., if the app is backgrounded or a retry is needed). Temporary generated images may be stored briefly to deliver results to the user for download.
Bird photos: We delete uploaded bird photos after the identification attempt completes. If deletion fails due to network or unexpected errors, we run automated cleanup to remove any remaining bird uploads within 6 hours.
Temporary generated images: We remove temporary generated bird identification images after processing and download. If deletion fails due to network or unexpected errors, we run automated cleanup to remove any remaining temporary results within 48 hours.
Why these lengths? The 6-hour and 48-hour windows exist only as short reliability fallbacks (e.g., client disconnects, network errors, or retries) while minimizing retention of face photos and generated images.
Do they store face data? No. We do not send uploaded photos or generated images to PostHog.
What do they store instead? PostHog receives usage/analytics events (e.g., screen views, button taps, feature usage) to help us improve the App.
🎯 How We Use Your Information
Provide, maintain, and improve our services
Personalize your experience
Send updates and marketing (with consent)
Provide customer support
Analyze usage patterns
🔒 Data Storage and Security
- 🔐We apply reasonable security safeguards to protect stored data
- ☁️We use Supabase for temporary storage and backend services
- 🛡️Uploads are removed after processing to minimize retention
⏳ Data Retention
Bird photos: Bird photo uploads are intended to be removed after processing to minimize retention. If a removal fails due to network or unexpected errors, we run automated cleanup to remove remaining bird uploads within 6 hours.
Temporary generated images: Temporary bird identification images files stored on our backend are intended to be removed after processing and download. As a fallback, we run automated cleanup to remove remaining temporary results within 48 hours.
On-device storage: The App may save generated results locally on your device (e.g., to view your results). You can remove local data by deleting results in the App (if available) or uninstalling the App.
🤝 Sharing Your Information
We do not sell your personal information.
- →
Service Providers: Third-party services that help us operate the App (e.g., Supabase, PostHog)
- →
Legal Requirements: When required by law or to protect our rights
✨ Your Rights
Access
Correct
Delete
Opt-out
Export
📬 Email Communications
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or contacting us at support@h2adigital.com.
👶 Children's Privacy
Our App is not intended for children under 13. We do not knowingly collect personal information from children under 13.
🔄 Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date."