Privacy Policy
Last Updated: June 2026
At ConservaCam ("we," "us," or "our"), your privacy is a priority. This Comprehensive Privacy Policy explains how we collect, use, process, disclose, and safeguard your information when you interact with the ConservaCam ecosystem. This includes our website, the ConservaCam Mobile Application (the "App"), the ConservaCam Web Dashboard, the JRPCC Client Portal, and our physical hardware devices (collectively, the "Services").
This policy is designed to comply with global privacy standards, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Google Play Store and Apple App Store guidelines regarding user data safety.
1. Information We Collect
We collect information across different platforms within our ecosystem to provide comprehensive wildlife monitoring and research management services.
A. ConservaCam Mobile App & Hardware Data
- Account Authentication: We collect your email address and securely hashed password to log you into the mobile app and sync your field data with your dashboard profile.
- Location Data: We request foreground and background location permissions. This is required for Bluetooth Low Energy (BLE) scanning to pair your mobile device securely with our camera traps in the field, and to accurately geotag the deployment locations of the hardware. Location data is only collected when provisioning or managing a device.
- Camera & Photos: We request camera access to scan QR codes on our hardware for secure device pairing.
- Bluetooth & Wi-Fi Configuration: The App manages local wireless connections (BLE and Hotspot) to establish localized networks for field data synchronization.
B. Web Dashboard Data
- Account Information: Names, email addresses, securely hashed passwords, and profile pictures for platform authentication and role-based access control (RBAC).
- Media & AI Detections: We collect and store images, videos, and drone survey data uploaded automatically from camera traps or manually by users. Our AI models process these files to classify animal species.
- Human Detection Data (
is_humanflag): If a camera trap captures a human, our system flags it. To protect individual privacy and comply with GDPR, images containing identifiable humans are subject to strict access controls, are not used for public AI training, and are processed solely for anti-poaching and operational security alerts.
C. JRPCC Client Portal Data
- Institutional Information: Principal Investigator (PI) names, academic emails, and institutional affiliations.
- Legal & Compliance Documents: Uploaded Prior Informed Consent (PIC), Mutually Agreed Terms (MAT), and Material Transfer Agreements (MTA) required for research permit processing.
2. How We Use Your Information
We process your data using industry-standard, secure third-party cloud infrastructure (specifically, Google Cloud Platform) for the following purposes:
- Service Delivery: To operate the dashboard, facilitate remote hardware connections, and manage the JRPCC permit application pipeline.
- AI Training (Anonymized): We use non-human wildlife imagery to train and improve our machine learning models. No personally identifiable data (or human imagery) is utilized in general model training.
- Security & Anti-Poaching: To issue immediate alerts based on geofence breaches or specific model detections (e.g., unauthorized human presence in protected areas).
- Communication: To send critical system alerts, subscription updates, or respond to customer service requests.
3. Your Data Privacy Rights (GDPR & CCPA)
Depending on your location, you have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): You have the right to request the complete deletion of your account and associated personal data from our active databases.
- Right to Restrict Processing: You can request that we limit the processing of your data.
- Do Not Sell My Personal Information (CCPA): ConservaCam does not and will not sell your personal data or user-generated media to third parties.
4. Data Deletion & Account Management
In compliance with App Store and Google Play guidelines, we provide users with a straightforward way to delete their data.
- In-App Deletion: You may request account deletion directly from the settings menu within the ConservaCam Mobile App or Web Dashboard.
- Email Deletion Request: You can email us at info@conservacam.com with the subject line "Data Deletion Request". We will process and execute the deletion within 30 days.
Note: We may be required by law to retain certain JRPCC permit records (such as signed MAT/MTA documents) for a specified period for compliance and audit purposes.
5. Security & Third-Party Sharing
We implement robust technical and organizational security measures to protect your data. Data is transmitted via HTTPS/TLS protocols and stored securely. We only share data with trusted third-party service providers (e.g., cloud hosting, email delivery) strictly necessary to operate our Services. They are bound by strict data processing agreements.
6. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection Team at:
ConservaCam Data Protection