Privacy
Policy

Introduction

We take your privacy seriously.

Salmo ("we", "our", or "us") is a mobile application that helps you rediscover the world around you through daily quests, small swaps, and gentle reflection. This Privacy Policy explains what data we collect, why we collect it, and how we protect it.

By using Salmo, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the app.

01 — Data we collect

What information Salmo collects.

We collect only the data necessary to provide the app's functionality. Here is a full overview:

• Auth Email address — collected when you sign in via email OTP or Sign in with Apple. Used solely for authentication. We do not send marketing emails.
• Profile Display name, avatar, city — entered by you during onboarding. Stored in our database and used to personalise your experience.
• Location Precise location — collected while using the app (When In Use only) to show you nearby quests on the map. Location is never stored on our servers; it is used in-session only.
• Activity Completed quests, daily swaps, and personal logs — when you complete a quest, complete a daily swap, or write a personal log, this data is stored in our database linked to your account.
• Photos Optional photo uploads — when you attach a photo to a personal log, the image is uploaded to our secure storage. Before upload, the photo is automatically resized and all EXIF metadata (including GPS location, camera model, and timestamps) is stripped from the image. Photos are stored privately and accessible only via temporary signed URLs valid for one hour. Photos are never shared, never used for AI training, and never made public. You can delete any photo by removing the associated log entry.
• Progression Salmo XP and growth data — we store your accumulated experience points, current life stage (Hatchling, Parr, Adult, Elder), daily XP earned, last app open date, and last passive XP tick. This data powers Salmo's growth and habitat unlock system, and applies daily limits that prevent abuse.
• Habitat Unlocked items and inventory state — which habitat items you have unlocked and seen is stored locally on your device using standard iOS storage. This data does not leave your device.
• Push Push notification token — stored if you grant notification permission, used only to send you relevant app notifications. Never shared with third parties.
• Analytics Usage events — anonymous usage data (screens opened, quests completed, swaps completed, onboarding steps) collected via PostHog, hosted in the EU. No personal identifiers are attached to analytics events unless you are signed in, in which case your Supabase user ID is used as an anonymous identifier.
• City request Email address and city name — collected only if you voluntarily submit a city request via the Explore tab ("Request Your City"). Used solely to notify you when Salmo launches in your city. This data is not linked to your account and is never used for marketing or shared with third parties.

02 — How we use your data

Your data is used only to run Salmo.

We use the data we collect for the following purposes only:

— To authenticate you and maintain your account
— To show you quests relevant to your location
— To track your personal progress (XP, growth stages, completed quests, swaps, logs)
— To store and display photos you choose to attach to your logs
— To unlock and display habitat items you have earned through your activity
— To send you push notifications you have opted in to
— To understand how the app is used so we can improve it (analytics)
— To notify you when Salmo launches in a city you requested

We do not use your data for advertising. We do not sell your data. We do not use your photos or content to train any AI or machine learning models. We do not share your data with third parties except as described in Section 04.

03 — Data storage

Where your data lives.

Your account data, logs, photos, and Salmo progression are stored in Supabase, a secure cloud database and storage provider. Data is stored in the EU region. Supabase is SOC 2 compliant.

Photos are uploaded to a private Supabase Storage bucket. Access is restricted by row-level security rules: only you can access your own photos. Public access is not possible. Photos are served to the app through temporary signed URLs that expire after one hour.

Analytics data is processed by PostHog, hosted on EU infrastructure (eu.i.posthog.com). PostHog does not receive your email address, your photos, or your log content.

Some data (your habitat inventory, locally cached photos, app preferences) is also stored locally on your device via standard iOS storage mechanisms for offline access.

04 — Third parties

Who else touches your data.

We use the following third-party services, each of which has its own privacy policy:

— Supabase (supabase.com) — database, authentication, and photo storage
— PostHog (posthog.com) — product analytics, EU-hosted
— Apple (apple.com) — Sign in with Apple authentication, push notification delivery

We do not integrate any advertising networks, data brokers, or social media tracking.

05 — Your rights (GDPR)

You are in control of your data.

As a user based in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

— Right of access — you can request a copy of all data we hold about you, including your logs, photos, and progression data
— Right to rectification — you can correct inaccurate data via the Settings screen
— Right to erasure — you can delete your account and all associated data (including photos) directly in the app via Settings → Delete my account
— Right to portability — you can request an export of your data by contacting us
— Right to object — you can opt out of analytics at any time by contacting us

To exercise any of these rights, contact us at the address in Section 08.

06 — Data retention

How long we keep your data.

We retain your data for as long as your account is active. If you delete your account via the app, all personal data associated with your account — including your photos, logs, Salmo progression, and habitat state — is permanently deleted from our servers within 30 days.

Individual photos and logs can be deleted at any time from within the app without deleting your entire account.

City request data (email + city) is retained until Salmo has launched in the requested city, or until you request deletion by contacting us.

Analytics data collected via PostHog is retained for 12 months and is not linked to your identity after account deletion.

Local data stored on your device is removed when you uninstall the app.

07 — Children

Salmo is not for children under 13.

Salmo is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

08 — Changes

When this policy changes.

We may update this Privacy Policy from time to time. We will notify you of significant changes via a notice in the app or by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.