Privacy policy

Version 1.7 · Last updated 25 October 2026

Raccollect is a free app for collecting stickers of animals and everyday things you find outside. This policy explains what the app does with your personal data, in plain words. If something is unclear, email us at raccollect@gmail.com.

1. Who we are

Raccollect is made and run by Kev Amir in the Netherlands ("we", "us"). We decide what happens with the personal data described here, so we are the "controller" under the GDPR.

Contact for all privacy questions and requests: raccollect@gmail.com.

2. What we collect and why

"Contract" means we need the data to give you the app you signed up for (GDPR article 6(1)(b)). "Legitimate interest" means we have a good reason that does not outweigh your privacy (article 6(1)(f)); you can object to it (section 10).

We do not collect your contacts, your photo library, advertising IDs, payment details or health data. The app only uses the camera; on iPhone it asks for permission to save stickers to Photos when you choose to.

3. Photos and identification

1. Before your first catch, the app tells you that an AI service checks your photos and asks for your permission: the tick on the permissions screen when you start, or a one-time question in the camera if you never saw that screen. Without it, the camera doesn't send anything and you can't catch.
2. You take a photo with the rear camera. You can't upload photos from your gallery.
3. First the app checks the photo on your phone: too dark, blurry, the same shot again, a big face, no clear subject, or a document or screen. Nothing is sent for this check. A photo that fails it is deleted.
4. Then the app sends a small copy (at most 1024 pixels on the long side, without location or camera data) over an encrypted connection to our identification function at Supabase.
5. The function asks an AI model from Anthropic (Claude) which item of the current season the photo shows. Anthropic receives only the small photo and the list of items. It does not receive your account ID, email address or location. Under its commercial terms Anthropic does not use the photo to train its AI models.
6. The answer goes back to your phone, and we save an identification record (section 2). The photo is not stored: it exists only in memory while it is being checked, and is never written to our database, storage or logs.
7. On your phone, the photo is deleted as soon as its answer is handled. If it's a match, the app cuts the item out of the photo on your phone (Android: Google ML Kit; iPhone: Apple Vision) and uploads that sticker to private storage.
8. When you're offline, the daily limit is reached or identification is paused, up to 5 photos wait on your phone. They are deleted once they're handled, or 3 days after they were taken (or after a pause ended). They are not sent anywhere until they're checked.

If we start using our own identification server, we will update this policy before it receives any photo.

4. Signing in

• Email and password. Our provider Supabase stores your email address and a hash of your password. Emails such as the confirmation and password-reset emails are sent by Supabase through our email provider Resend.
• Guest. You can start without an email address. A guest account is private from the start. After 3 catches, the app asks you to save your account with an email address or Google before it checks more photos. If you log out of a guest account, its catches are removed from your phone and you can't get back in. Guest accounts that aren't used for 30 days are deleted automatically. When you save a guest account with an email address, your profile becomes public like any new account; you can make it private in Settings.
• Google. If you choose "Sign in with Google", Google sends Supabase a sign-in token with your name, email address and a link to your Google profile picture. We use your name to fill in your profile name (you can change it) and your email address for your account. We don't use your profile picture. Google knows you signed in to Raccollect; Google's privacy policy applies to that.
• Your sign-in session is stored encrypted on your phone (Android Keystore, iPhone Keychain).

5. Location

• Location is optional. The app asks for it only while you use the app, never in the background. You can turn it off for new catches at any time: tap the place at the top of the camera, or use "Save where I catch things" in Settings → Privacy.
• We use your phone's location at the moment you take the photo, not location data stored inside a photo.
• The app asks for your precise location, so the pin is where you found the item. You can give only your approximate location instead; the pin is then an estimate.
• You can add, move or remove the pin of a catch yourself on the map. Removing it deletes the catch's place; the sticker stays.
• To turn coordinates into a place and area name, the app uses your phone's built-in service: Google on Android, Apple on iPhone. They receive the coordinates for that lookup.
• Without location, a catch has no place and no pin. The app may still take the country from your mobile network (Android) or your phone's region setting (iPhone).
• Other people never receive any location of your catches: not the coordinates, the place, the area or the country.
• The map is loaded from OpenFreeMap. To show it, your phone downloads map pieces of the area you look at, so OpenFreeMap sees your IP address and which area is loaded. It gets nothing else from us.

6. What others see, and sharing

• Other users always see your name, @username, avatar and collecting date (never your city: only you see that). While your profile is public they also see your catches, stickers, badges and follower lists, never where you caught something (section 5). While it's private, they see none of these. People who block each other don't see each other's catches.
• Comments are shown with your name, @username and avatar to everyone who can see that catch. You and the owner of the catch can delete them.
• Invite links you share (raccollect.com/u/<your @username>) open your profile in the app, or for someone without the app a page on raccollect.com that shows your @username and where to get the app.
• Share cards go through your phone's share sheet to the app you pick. A card shows your @username and, only if you choose, the area. That app's own terms apply.
• Sticker packs for WhatsApp and Messages (iMessage) are made on your phone. When you add a pack, your stickers go to that app on your phone, and its own terms apply.
• Service providers that work for us are listed in section 7.
• We share data with authorities only when the law requires it.

We don't sell data or show ads. The anonymous usage statistics in section 2 go only to PostHog, crash reports only to Firebase Crashlytics and server error reports only to Sentry; all three work for us.

7. Services we use

8. Transfers outside the EU

Our main data stays with Supabase in the EU, and the usage statistics stay with PostHog in the EU. Anthropic is based in the United States. PostHog's, Sentry's and Resend's companies are based there too, and their staff may access the data to support the service. Google (including Firebase Crashlytics) and Apple may handle data outside the EU. When personal data goes outside the EU, we rely on the safeguards in that provider's data processing terms, such as the European Commission's standard contractual clauses. Email us if you want to know more.

9. How long we keep data

10. Your rights

You have the right to see, correct and delete your data, to limit its use, to get a copy of it, and to object to use based on legitimate interest. In the app you can:

• make your profile private, stop saving where you catch things or turn off anonymous usage statistics in Settings → Privacy;
• remove the pin of a catch on the map (the catch keeps its sticker);
• change your name, @username, avatar, colour or city in Edit profile;
• remove a catch from its item page (this also deletes its sticker);
• block people and report content;
• delete your account in Settings → Delete account. This deletes your stickers, your account and everything linked to it.

Crash reports have no switch in the app, because they keep the app working. You can object to them by email; we then weigh your objection as the GDPR requires (article 21) and tell you what we did.

For anything else, such as a copy of your data or deleting your account without the app, email raccollect@gmail.com. We answer within one month.

If you think we handle your data wrongly, please tell us. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

11. Age

Raccollect is for people aged 16 and older. When you start, you confirm that you are 16 or older. If we learn that someone younger has an account, we delete it.

12. Security

• All traffic between the app and our servers is encrypted (HTTPS).
• Database rules make sure people can only read what this policy says. Exact places never leave your own records. Stickers are kept in private storage.
• Your sign-in session is stored encrypted on your phone.

13. Data on your phone

The app keeps a copy of your collection, stickers and feed on your phone so it works offline. Logging out deletes it; if some catches or changes aren't saved to your account yet, the app asks first. On Android, the system may include the app's data in your own Google backup if you turned backups on; your sign-in session is left out of that backup.

14. Website

raccollect.com is hosted by Cloudflare. To deliver the pages, Cloudflare processes technical request data such as your IP address. We count visits with Cloudflare Web Analytics: it uses no cookies, doesn't track you across sites and shows us only totals (pages, countries, referring sites, device types). The website doesn't set cookies and has no ads.

15. Changes

We update this policy when the app changes, and change the date at the top. If a change matters for you, we'll let you know before it applies.