Last updated: January 15, 2026
Contents
Introduction
Kiwi Collectors is operated by Archbox Srl ("we", "our", or "us"). We operate the Kiwi Collectors mobile application (available on Android and iOS) and website at kiwicollectors.com (collectively, the "Service").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and being transparent about our data practices.
Information We Collect
Information You Provide Directly
| Data Type | Purpose | Required? |
|---|---|---|
| Email address | Account creation and authentication | Yes (for accounts) |
| Display name | Personalization and attribution | Optional |
| Profile photo | Account personalization | Optional |
| Wildlife photos | Community contributions to map | Optional |
| Sighting notes | Contextual information for sightings | Optional |
| Collection data | Your personal animal collection | Created by your actions |
Information Collected Automatically
- Location Data: With your explicit permission, we access your device's location to show wildlife near you and to tag the location of photos you submit. You can deny or revoke location permission at any time in your device settings.
- Device Information: Device type, operating system version, unique device identifiers, and app version. Used for troubleshooting and ensuring compatibility.
- Usage Data: Pages visited, features used, session duration, and interaction patterns. Used to improve the app experience.
- Log Data: IP address, browser type, access times, and referring URLs. Used for security and troubleshooting.
Information from Third-Party Sign-In
If you choose to sign in with Google, we receive your email address and basic profile information (name, profile photo) from Google. We do not receive your Google password.
How We Use Your Information
- Provide the Service: Display wildlife near your location, save your collections, and process your contributions
- Authentication: Verify your identity and secure your account
- Community Features: Display your wildlife photos on the map (with your consent)
- Communication: Send transactional emails (account verification, password resets) and optional newsletters
- Improvement: Analyze usage patterns to enhance features and fix bugs
- Security: Detect and prevent fraud, abuse, and unauthorized access
- Legal Compliance: Comply with applicable laws and regulations
- Sell your personal information to third parties
- Use your data for targeted advertising
- Share your location history with advertisers
- Access your photos without your explicit action to upload
Information Sharing
We share your information only in these limited circumstances:
- Public Content: Wildlife photos you submit to the map are visible to other users. The location where the photo was taken is displayed. Your display name may be shown as attribution.
- Service Providers: We use trusted third parties for hosting (cloud servers), analytics, and email delivery. These providers are contractually bound to protect your data.
- Legal Requirements: We may disclose information if required by law, court order, or government request, or to protect our rights and the safety of users.
- Business Transfers: If Kiwi Collectors is acquired or merged, user information may be transferred. We will notify you before your data becomes subject to a different privacy policy.
Third-Party Services
Our Service integrates with the following third-party services, each with their own privacy policies:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Maps | Display interactive maps and wildlife locations | Google Privacy Policy |
| Google Sign-In | Optional OAuth authentication | Google Privacy Policy |
| Cloudflare R2 | Image storage and delivery | Cloudflare Privacy Policy |
| GBIF | Wildlife occurrence data (non-personal) | GBIF Privacy Policy |
| iNaturalist | Wildlife images (CC licensed, non-personal) | iNaturalist Privacy Policy |
Data Security
We implement industry-standard security measures to protect your information:
- Encryption in Transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption
- Encryption at Rest: Sensitive data is encrypted in our databases
- Secure Authentication: Passwords are hashed using strong algorithms; we support OAuth 2.0 with PKCE
- Access Controls: Employee access to user data is restricted and logged
- Regular Audits: We perform security reviews and vulnerability assessments
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your account and associated data
- Portability: Request your data in a machine-readable format
- Objection: Object to certain processing of your data
- Restriction: Request limitation of processing in certain circumstances
- Withdraw Consent: Withdraw previously given consent at any time
How to Exercise Your Rights
- In-App: Access your profile settings to update or delete your account
- Email: Contact alessioluciano@outlook.com for data requests
- Location Permissions: Manage in your device's Settings app
We will respond to legitimate requests within 30 days.
Data Retention
- Active Accounts: We retain your data for as long as your account is active
- Deleted Accounts: Upon account deletion, we remove your personal information within 30 days
- Public Contributions: Wildlife photos you submitted to the map may be retained (anonymized) to preserve the community dataset
- Legal Requirements: Some data may be retained longer if required by law
- Backups: Data may persist in encrypted backups for up to 90 days after deletion
Children's Privacy
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at alessioluciano@outlook.com. We will promptly delete such information from our records.
If you are between 13 and 18 years old, please have a parent or guardian review this Privacy Policy with you.
International Users
Kiwi Collectors is operated from servers located in the United States. If you access our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.
By using our Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.
For European Users (GDPR)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your data include:
- Your consent (which you can withdraw at any time)
- Performance of our contract with you (providing the Service)
- Our legitimate interests (improving and securing the Service)
- Compliance with legal obligations
For California Users (CCPA)
California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. We do not sell personal information.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.
- We will post the updated policy on this page with a new "Last updated" date
- For material changes, we will notify you via email or in-app notification
- Your continued use of the Service after changes constitutes acceptance of the updated policy
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:
- Email: alessioluciano@outlook.com
- Website: kiwicollectors.com
- Discord: Join our community
We aim to respond to all inquiries within 5 business days.