MycoLog Privacy Policy
In short: MycoLog is a mushroom foraging log. Your finds, notes, photos you attach and the GPS location of each find are stored only on your iPhone or iPad. We never receive any of it. The only data that leaves your device is what Apple Maps needs to draw the map (the map area you are viewing), which goes to Apple. There are no purchases, ads, analytics, third-party SDKs or accounts.
1. Who is responsible for your data
MycoLog is published by Sebastian Doyle, an individual developer. For the UK GDPR and the EU GDPR, Sebastian Doyle is the data controller. For the Australian Privacy Act 1988 (Cth), Sebastian Doyle is the entity that handles your personal information in line with the Australian Privacy Principles (APPs).
Contact: sebastian.doyle@outlook.com
2. Data processed only on your device
This data is created and used inside the app on your iPhone or iPad. We never receive it.
| Data | Why | Lawful basis |
|---|---|---|
| Mushroom finds: species, common name, date, place name, habitat, substrate, spore print, gill type, measurements, confidence and notes | Keeping your foraging log. Stored in the app's local database (SwiftData). | None needed: we never receive it |
| Precise location (GPS coordinates) of each find | Tagging where you found a mushroom and showing finds on the map. Read only while you add a find, if you allow it. | Consent (Art. 6(1)(a)): you grant the iOS permission and can withdraw it in Settings |
| Photos you choose to attach | Showing a picture with each find. Chosen with the iOS photo picker, so the app only receives the photos you pick, not your library; a copy is stored in the app's local database. | Your choice: you pick each photo; no photo-library permission is needed |
| Settings (units, default habitat, whether exports include GPS) | Remembering your preferences | None needed: we never receive it |
| CSV export text | Created on the device only when you tap Export; you decide whether to copy or share it. GPS can be stripped from exports in Settings. | None needed: we never receive it |
3. Data that leaves your device
| Data | Sent to | Why | Lawful basis |
|---|---|---|---|
| The map area being displayed (which reveals the approximate area of your finds or where you are browsing), plus your IP address as part of the connection | Apple (Apple Maps / MapKit) | Downloading map tiles to show your finds on the map | Legitimate interests (Art. 6(1)(f)): showing the map feature you open |
4. Who receives data (processors and Apple)
- Apple Maps (MapKit) (US and worldwide): provides the map shown in the app. Apple says Maps data is not associated with your Apple Account. Privacy policy.
- Apple (US and worldwide): distributes the app and runs the App Store, and handles payment for any purchase. Apple is an independent controller of your Apple Account and payment data; we never see your name, email or card details. If you opt in to Share with App Developers in iOS Settings, Apple may give us anonymous crash reports and usage statistics. Apple Privacy Policy.
5. What we do not do
- We do not run advertising or ad networks.
- We do not track you across other companies' apps or websites.
- We do not sell or rent personal information.
- We do not use analytics SDKs or any third-party SDK.
- We do not ask you to create an account, and there is no cloud sync.
- We never receive your location, your photos or your foraging spots. The location of a find is saved on your device only.
- The app does not use the camera; photos are attached through the iOS photo picker.
6. Permissions and consent
- Location (While Using the App): to tag a find with the GPS coordinates of where you are. You can type a place name instead.
You can withdraw a permission at any time in iOS Settings > MycoLog. The feature that needs it will stop working; the rest of the app will keep working.
7. Lawful bases (UK and EU GDPR)
- The app has no in-app purchases, so no purchase data is processed.
- Consent: access to device features such as the camera, microphone, location, photos, motion or notifications, given through the iOS permission prompt.
8. How long data is kept
Data on your device stays there until you delete it in the app or delete the app. If your device backs up to iCloud, the app's data may be in that backup, under Apple's control and your iCloud settings.
9. International transfers
We do not transfer your personal data anywhere, because we do not receive it.
Apple may process data in the United States and other countries under its own privacy policy and its transfer safeguards.
10. Your rights (UK and EU/EEA)
You have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting processing before you withdrew it). To use any of these rights, email sebastian.doyle@outlook.com. We will reply within one month. Because we hold little or no data that identifies you, we may need you to give us an identifier shown in the app.
You can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection supervisory authority in the EU/EEA country where you live or work (list of EU authorities). We would appreciate the chance to fix it first.
11. Australian users
Under the Australian Privacy Principles you can ask to access or correct the personal information we hold about you, and you can use the app anonymously (no account or name is needed). Email us with any request or complaint; we will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
12. Children
MycoLog is not directed at children under 13, and we do not knowingly collect personal information from children. Purchases are made through the Apple Account holder, who can use Apple's parental controls (Ask to Buy, Screen Time). If you think a child has given us personal information, email us and we will delete it.
13. Security
On-device data is protected by iOS data protection and your device passcode. Data sent to processors travels over encrypted (HTTPS/TLS) connections.
Note on the map and lawful basis
Showing the map is part of the service you asked for. For the UK and EU GDPR, Apple acts as an independent controller of Maps requests, and our basis for the app requesting map tiles is our legitimate interest in providing the map feature you open (Art. 6(1)(f)). We do not receive this data.
14. Changes to this policy
If we change this policy we will update this page and the date at the top. If a change is significant, we will say so in the app or in the App Store release notes.
15. Contact
Sebastian Doyle · sebastian.doyle@outlook.com · Terms of Use