Privacy Policy

When you create an account and use Reef Tagger, we collect:

• Account information — your display name, email address, and profile photo (optional).
• Sighting data — photos you take, species identifications, timestamps, and optionally your GPS location at the time of the sighting.
• Dive log data — dive site names, dates, and session notes you record.
• Usage data — app interactions, error logs, and device information collected by Firebase Analytics and Crashlytics.

• To provide the app — displaying your sightings, feed, leaderboard, and profile.
• Species identification — photos are sent to an AI model (Anthropic/Claude) server-side to suggest species identification. Photos are not stored by Anthropic beyond the API call.
• Stamp generation — when you generate a collectible species stamp, your identification data is sent to OpenAI server-side to produce the artwork. No personal data is included in this request.
• Conservation research — anonymised, location-fuzzed sighting records are made available to verified researchers and government bodies through the conservation portal. These records contain no personally identifiable information. Exact GPS coordinates are never shared; locations are rounded to approximately 11 km. Species considered conservation-sensitive have no location data in exports at all.
• Service emails — we send transactional emails (account verification, password reset, sign-in codes) via Resend. We do not send marketing emails without your consent.

Location access is optional. If you grant permission, your device's GPS coordinates are stored with your sighting to let you review where species were seen. You can disable location access in your device settings at any time. Location data is never sold or shared in identifiable form.

We do not sell your personal data. We share data only in the following limited circumstances:

• Service providers — Google Firebase (database, authentication, cloud functions), Anthropic (species identification via Claude, server-side only), OpenAI (stamp artwork generation, server-side only), Resend (transactional email), and Mapbox (map display).
• Conservation researchers — anonymised, aggregated sighting records only (see Section 2).
• Legal requirements — if required by law or to protect the safety of users.

Your account data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time via Settings → Delete account within the app, or by emailing info@coolcorallabs.com. Anonymised research export records do not contain your identity and are retained for conservation purposes.

If you are in the European Economic Area or United Kingdom, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (right to erasure).
• Export your data in a portable format (Settings → Export my data).
• Object to or restrict certain processing.

To exercise any of these rights, contact us at info@coolcorallabs.com.

Reef Tagger is intended for users aged 13 and over. Users under 18 must have the consent of a parent or guardian. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We use industry-standard security measures including encrypted data transmission (HTTPS/TLS), Firebase Authentication for account security, role-based access controls, and two-factor authentication for elevated-access accounts. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of Reef Tagger after changes constitutes acceptance of the updated policy.

Cool Coral Labs
info@coolcorallabs.com