← Bagged

1. Who we are

Bagged ("Bagged", "we", "us") is an iOS app that lets you photograph wild animals, have them identified, and collect them as cards.

The data controller for the purposes of the UK GDPR and EU GDPR is PUFF JOURNEY LTD, registered at Suite 14 Railway House, Chertsey Road, Woking, GU21 5AH. You can reach us at baggedsupport@gmail.com.

We are not required to appoint a Data Protection Officer and have not appointed one. Questions about this policy go to the address above.

2. Summary

In plain terms:

• You can use Bagged without giving us your name or email, by signing in anonymously.
• We never receive your exact GPS position. Location is rounded on your phone to about 100 metres before it is sent, and only when you allow it.
• Photos you take in the app are uploaded so the animal can be identified, and are sent to a third-party AI provider for that purpose.
• Your username, your collector rank and your score are public. Your cut-out catch images are served from public URLs.
• We use one product-analytics tool, which collects usage and device information and runs only if you consent to it. We use no advertising or marketing-attribution tools.
• We do not sell your personal information.

3. What we collect

3.1 Account information

Bagged offers three ways to sign in, and they differ in what we receive:

A username is generated for you automatically at sign-up (for example SneakyOtter42). You can change it at any time. Usernames are public.

3.2 Information created by playing

3.3 Device and technical information

• Apple App Attest. Bagged uses Apple's App Attest to confirm that scans come from a genuine, unmodified copy of the app. This produces a device-bound cryptographic key and attestation, which we store and verify. It is used only to prevent cheating.
• Push notification token. If you allow notifications, we store the token Apple issues for your device, along with the platform and environment, so we can send reminders and social alerts.
• Standard technical data. IP address, app version, device model and operating system version, received by our backend and our analytics providers in the ordinary course of serving requests.

4. Your photos and AI identification

This is the most sensitive processing Bagged does, so it is set out in full.

When you scan an animal:

1. The photo is taken inside the app. Bagged does not read your photo library.
2. The photo is uploaded to our storage, hosted by Supabase.
3. Our server sends the image to a third-party AI vision provider, which returns a species identification and related signals. The provider is Google, through the Gemini API.
4. A cut-out version of the animal is produced on your device and uploaded so your card can show your own photo.

We do not use your photographs to train any model of our own, and we do not sell or share them. The image is sent to Google only to obtain an identification, and is processed under Google's Gemini API terms.

Where your photos live:

• The original photo is stored in a private bucket that is not publicly readable.
• The cut-out image and thumbnail are stored in public buckets. They are served from URLs that are hard to guess but are not access-controlled — anyone with the URL can view them. This is how cards are displayed to friends and on shared cards.

Do not photograph anything you would not want to be visible from a public link: people, documents, house numbers, number plates or the inside of your home.

5. Location

Bagged asks for "When In Use" location access only. You can refuse, and the app still works — you simply get no map pin and no country leaderboard placement for that catch.

Your exact coordinates never leave your device. The app requests only around 100-metre accuracy from iOS, then rounds the result to three decimal places of latitude and longitude — roughly a 110-metre grid square — before anything is transmitted. We store that rounded square and a two-letter country code. We never receive, store or reconstruct your precise position, and we do not track your location in the background.

Your country is also used to set your home country for leaderboard purposes, and to apply regional rarity adjustments.

6. What is public

The following are visible to other people:

• Your username, collector rank, crown and score, on leaderboards.
• Your profile and a selection of showcase cards, to anyone who views your profile.
• Your full collection, to accounts you have accepted as friends.
• Cut-out catch images, to anyone holding the image URL.

Friends see your country only — never the approximate square a catch was made in. That is visible to you alone. You can also set your account to private, and you can block other accounts.

7. Analytics, attribution and advertising

Only with your consent, and off until you give it. Bagged includes one analytics tool, described in 7.1. It does not start until you agree to it, and switching it off in Settings stops it again. The app carries no advertising code and no marketing-attribution code at all; 7.2 describes a tool we have not introduced, so that nothing begins collecting data about you that you have not read about first.

7.1 PostHog — product analytics

With your consent, PostHog records how the app is used: features used and events such as a scan completing, along with a pseudonymous identifier, device model, iOS version, app version, country and IP address. We use it to find what is broken and what is working. We do not use it to build advertising profiles; screen-view capture is switched off, and so is session replay — we never record your screen. We never tell PostHog who you are, so it holds no profile tied to your account.

If you decline, or withdraw consent later, the tool is shut down and the identifier it was using is discarded — so opting back in later starts a fresh trail rather than rejoining the old one.

PostHog data is held in PostHog's EU Cloud.

7.2 AppsFlyer — marketing attribution

AppsFlyer will tell us which advert or link a new player arrived from, so we know where to spend a small marketing budget. It receives device identifiers, install and session data, and — only if you allow it through Apple's tracking prompt — your advertising identifier (IDFA).

7.3 Advertising

Bagged does not show advertising, and we have no plans to. We do not sell your data to advertisers and there are no ad networks in the app.

7.4 Your consent

Neither tool starts until you agree to it. When they are introduced you will be asked once, in plain words, separately from any prompt Apple shows, and you can say no and keep using every part of Bagged. You can change your mind at any time in Settings. In the UK and EU this is your consent under PECR; refusing costs you nothing.

8. Purchases

Bagged is free to play, with an optional paid upgrade called Bagged+, sold as a weekly or yearly subscription or as a one-off lifetime purchase. Purchases are handled by Apple and managed for us by RevenueCat, which records which products you own and keeps that entitlement in step across your devices.

Neither RevenueCat nor we ever receive your card number or payment details. Those go to Apple alone, under Apple's own privacy policy. We see only that a purchase happened and what it unlocked.

9. What we don't collect

• Your precise GPS location, ever.
• Your photo library. The app can only add sticker images to it, never read from it.
• Your contacts, calendar, microphone, health or fitness data.
• Your payment card details.

We do not sell your personal information, and and Bagged shows no advertising. Attribution data of the kind described in section 7 may count as "sharing" under the CCPA once it is switched on; it will only ever be switched on for people who have agreed to it, and you can withdraw that at any time.

10. Legal bases (UK and EU users)

11. Who we share with

We share personal data with the following categories of recipient, as processors acting on our instructions unless stated otherwise:

We may also disclose information where we are legally required to, to protect our rights or the safety of others, or in connection with a merger or acquisition — in which case we will tell you before your data becomes subject to a different policy.

12. International transfers

Our database and file storage are hosted in the European Union. Some of the providers listed above process data in the United States or elsewhere. Where personal data leaves the UK or EEA, we rely on the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, or on an adequacy decision where one applies.

In practice: your account, catches and photographs are stored by Supabase in the EU (Paris) and do not leave it. The only transfer outside the UK and EEA is the photograph sent to Google for identification, which relies on the Standard Contractual Clauses and the UK Addendum under Google's API terms.

PostHog data stays in the EU, on PostHog's EU Cloud. RevenueCat is in the United States and relies on the Standard Contractual Clauses and the UK Addendum. If AppsFlyer is introduced: it is an Israeli company, and Israel is covered by a UK and EU adequacy decision.

13. How long we keep it

Note that releasing a card is a soft delete: the serial number recording that a species was caught for the Nth time is kept, because that fact stays true whether or not you still hold the card. The record retains no photo.

14. Your rights

If you are in the UK or EEA, you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. Exercising these rights is free, and we will respond within one month.

You can complain to a supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk).

If you are a California resident, you have the right to know what personal information we collect and how we use it, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell personal information or share it for cross-context behavioural advertising as those terms are defined by the CCPA/CPRA, at all. Bagged carries no advertising or attribution technology — see section 7.

To exercise any of these rights, contact us at baggedsupport@gmail.com.

15. Deleting your account

You can delete your Bagged account, and everything in it, from within the app: Profile → Settings (the cog, top right) → Delete account. Deletion removes your profile, collection, cards, photos, friendships and scores. It cannot be undone.

You can also ask us to delete your account by emailing baggedsupport@gmail.com.

16. Children

Bagged is not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

The minimum age of 13 is the same in our Terms of Service and in our App Store age rating. Bagged carries no advertising, and the one analytics tool it does use runs only with consent and is never used to build advertising profiles — so there is no behavioural profiling of anyone, of any age.

17. Security

Access to your data is enforced at the database level with row-level security, so one account cannot read another's private records. Traffic is encrypted in transit. Original photographs are held in a private, access-controlled bucket. App Attest is used to reject requests that do not come from a genuine copy of the app.

No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant regulator where the law requires it.

18. Changes to this policy

We will update this policy when what we do changes. If a change is significant we will tell you in the app before it takes effect. The version and date at the top always tell you which text is current.

19. Contact

PUFF JOURNEY LTD
Suite 14 Railway House, Chertsey Road, Woking, GU21 5AH
baggedsupport@gmail.com