Privacy Policy (United States)

Effective date: September 30, 2026 · Last updated: October 3, 2026
Contents
  1. Safety Note
  2. Information We Collect
  3. Location, Cloud Storage, Sharing & Anonymized Research
  4. U.S. Region Storage (No Cross-Region Sync)
  5. We Do Not Sell Personal Information
  6. Your California Privacy Rights (CCPA / CPRA)
  7. Children's Privacy (COPPA)
  8. Security
  9. Contact
  10. Purchase Information

Safety note (not a privacy term)

Wild mushrooms can be deadly. This App provides environmental and statistical reference only. It cannot identify mushrooms or tell you whether anything is safe to eat. Outdoor travel involves terrain, wildlife, and hypothermia risks. You assume those risks—see the Terms of Service.

This Privacy Policy explains how Beijing Dahuangfeng Information Technology Co., Ltd. (北京大黄蜂信息科技有限公司) (“we,” “us,” or “Operator”), acting as the controller and operator of personal information (and the “business” under the California Consumer Privacy Act / CCPA), handles personal information for the United States region of the Mushroom Forecast App. It is written for U.S. users and is intended to address California Consumer Privacy Act (CCPA) / CPRA expectations for a small outdoor mapping product.

1. Information We Collect

We follow a minimum necessary approach. Categories may include:

Category Examples / when collected Purpose
Precise location GPS while you navigate or record a track (foreground; background only while recording if you grant “Always”). On-map navigation, track recording, and placing pins on your device.
Outing Teammates & Battery Sharing When you voluntarily create, accept an invitation to, or join an “Outing” team to hike together. Transmits and displays your precise real-time coordinates, speed, heading, elevation, and remaining battery percentage to all fellow teammates in your group. Teammates can continuously see your live physical position on the map; you are solely responsible for vetting group members and assuming risks of location exposure and stranger luring; you can use "Pause Sharing" or "Leave Outing" in the App at any time to immediately terminate live location broadcasting.
Motion, Barometer & Compass Barometer elevation gain compensation, motion sensors, and magnetic compass heading. Vertical elevation calculation and smooth real-time map orientation rotation on-device (not uploaded).
Camera & Microphone Camera capture and microphone audio when filming field video notes or photo markers. Field visual/audio notes stored in local sandbox; uploaded to cloud storage only if you voluntarily back up the track.
Photos & videos Selecting photos/videos from photo library or writing posters to gallery; reading photo EXIF GPS tags. Attaching photos to tracks and auto-locating waypoint coordinates based on photo timestamp and GPS tags.
Push Notifications Device push token via APNs / Firebase Cloud Messaging. Delivering fruiting reference value alerts, group updates, security notices, and our own optional weekly briefs and product recommendations. You can disable weekly briefs / marketing pushes in the App’s notification settings, or all notifications in OS Settings.
Account credentials (optional) Email / password or Sign in with Apple if you create an account; account identifier and an optional display name you set for friends and outings. Membership status, multi-device auth, access to paid / offline map features, and showing your chosen display name to friends and outing teammates. Account identifiers also link the analytics and optional personalized recommendations described below.
Device & diagnostics App version, platform, source app, offered file types, parsing results and errors when importing shared content. Diagnostic uploads can include the submitted text, links, small non-media file contents, and parsed place names or coordinates; media file bytes are omitted. Troubleshooting share imports and maintaining service reliability and security. Submitted diagnostic content may contain personal information or location; it is not treated as anonymous merely because an upload is unauthenticated.
Cloud track uploads & sharing User-initiated upload of GPS tracks, waypoints, photos, and videos. Cloud storage, multi-device sync, and sharing routes with other users via links.
Friends & outing membership The in-app accounts you add as friends, invitations, and the outing groups you join; this does not read your phone’s address book. Managing your in-app social graph, invitations, and voluntary teammate sharing.
Coarse activity location Account-linked recent activity places, rounded to two decimal degrees, activity time, and the selected or visited region. Regional features and personalized suggestions, including our own optional weekly briefs and product recommendations based on recent activity. These are first-party marketing, not cross-app advertising.
Product interaction & subscription analytics Subscription-limit prompts, locked-action taps, upgrade-page opens, purchase / restore success, and subscription lifecycle events. Events include time, limited plan / feature properties, and account identifiers when signed in. Understanding use of subscription features and purchase / restore flows to improve the product. These events are sent to our own service; no advertising identifier or precise coordinates are attached to the interaction events.
Place-search history A place name or keyword when you submit a search, plus map bounds and nearby coordinates to rank results. Our service caches search queries and results for up to 24 hours. Returning and ranking place-search results. Only the search keyword is forwarded to the upstream geocoding provider; account credentials and nearby device coordinates are not forwarded.

2. Location, Cloud Storage, Sharing & Anonymized Research

2.1 Location supports maps, navigation, cloud features, and regional recommendations. Local recordings and private pins stay on-device by default. Location may be sent to our service for place search and weather requests, voluntary cloud uploads, outing sharing, and account-linked coarse activity places. After you agree to the terms and grant system location permission, your current location is recorded automatically while you use the App. You can manage location permission in system settings and view or delete recorded activity places in the App. Coarse activity location can also personalize our own optional weekly briefs and product recommendations. We do not sell movement histories or use your location for cross-company advertising tracking.

2.2 Private pins stay on your device by default. Secret foraging pins, local notes, and default GPS recordings are stored in the App’s on-device database / sandbox. We do not automatically upload your private pin coordinates to a central database.

2.3 Real-Time Location Sharing in Outing Groups: When you voluntarily create, accept an invitation to, or join an Outing team, the App continuously broadcasts your high-precision live GPS coordinates, heading, speed, elevation, and battery level to all members of the group in real time. Teammates can continuously see your live physical position on the map. Sharing live location exposes your whereabouts and private spots; you must independently vet teammates and assume all risks of location exposure, trailing, and stranger interaction. You retain full control over location broadcasting: you can tap "Pause Sharing" at any time to temporarily stop broadcasting your coordinates, or tap "Leave Outing" to permanently exit the group and stop sharing.

2.4 Cloud Storage & Track Sharing: When you voluntarily choose to upload a track, the route coordinates, timing, waypoints, and attached photos and videos are securely stored on our cloud servers. You may also choose to share uploaded tracks and multimedia with other users via shareable links. You maintain control over your data and may stop sharing or delete uploaded tracks and multimedia files at any time.

2.5 Anonymized Ecological & Distribution Research License: To advance scientific understanding of wild fungi, biodiversity conservation, and macro-ecological habitat modeling, you agree that the Operator has the right to conduct de-identified and anonymized scientific research on user-uploaded tracks, environmental data, photos, and videos (such as analyzing fungal micro-habitats, elevation bands, and macro-distribution trends).

2.6 Strict Privacy Commitments & De-identified Output:

3. U.S. Region Storage (No Cross-Region Sync)

3.1 Account and service data for the U.S. product region are stored on servers located in the United States (AWS US East).

3.2 U.S.-region data are not interoperable with other geographic product regions (for example, a separate China-region deployment). Accounts, subscriptions, and server-side records are not exchanged or merged across those regions.

4. We Do Not Sell Personal Information

4.1 We do not sell personal information as that term is commonly understood under the CCPA, and we do not share personal information for cross-context behavioral advertising.

4.2 The App does not include third-party advertising SDKs or cross-app tracking identifiers for ads (such as IDFA-based ad tracking).

4.3 Third-Party Map & Search Services: For the U.S. region, satellite basemap tiles and place search (geocoding) queries are fetched through our servers rather than directly from your device. Our infrastructure forwards these requests to upstream providers (USGS for satellite imagery and OpenStreetMap Nominatim for place search) using a fixed application User-Agent; we do not forward your device IP address, cookies, or account tokens to those providers. Other basemap layers (such as USGS topographic tiles) currently continue to be requested directly by the App from their respective data sources using standard tile coordinates needed to render maps. None of these requests or services are used by us to sell your personal information or track your identity.

5. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you may have the following rights (subject to verification and legal exceptions):

To exercise these rights, email [email protected] with the subject line “CCPA Request” and enough detail for us to verify your identity and locate your account (for example, the email used to register). We will respond within the timeframes required by law.

6. Children's Privacy (COPPA)

Our service is designed for adult outdoor recreationists. We do not knowingly collect or solicit personal information from children under the age of 13. If you are under 13, please do not attempt to register an account or send any personal information to us. If a parent or guardian becomes aware that their child has provided personal information without consent, please contact us at [email protected], and we will promptly delete such information from our records.

7. Security

We use industry-standard transport encryption (HTTPS/TLS) for API traffic. No method of transmission or storage is 100% secure; please use a strong unique password if you create an account.

8. Contact

Privacy, CCPA, and data subject requests: [email protected].

You may also withdraw system permissions (Location, Camera, Microphone, Photos, Notifications) at any time in iOS/Android Settings for Mushroom Forecast.

9. Purchase Information

9.1 What we receive: When you buy a subscription, we receive subscription transaction information from Apple or Google, including the transaction ID, product, subscription status, expiration time, whether it is a free trial, and whether it has been refunded.

9.2 How we use it: We use this information to activate and maintain your subscription features, prevent one subscription from being shared across multiple accounts, and analyze subscription lifecycle and purchase / restore flows on our own service.

9.3 No payment card data: Payments are processed by Apple or Google. We do not receive your payment card information.

9.4 Retention: We keep purchase information for as long as your subscription is active and afterwards for the period needed to meet financial and legal requirements. When you delete your account, your purchase information is deleted along with it.