Publisher: Wojciech Bednarczyk, contact: contact@leszy.app.
In short
Leszy is a wildlife photography journal. There is no account, no usage statistics and no tracking. Your journal (sites, sightings, notes, calendar, camera traps) is stored on your phone and we never send it anywhere. The app uses the network only to fetch the map and the weather forecast.
What the app stores and where
Everything you enter stays in the app’s storage on your phone. If your phone’s own backup is on (iCloud or Google), the journal may be included in it under Apple’s or Google’s terms. The map tile cache and the downloaded offline areas are excluded from that backup.
The backup made in the app (Settings → Data → Backup) is a file named leszy-YYYY-MM-DD.zip, saved wherever you choose in the system share sheet. From then on the file is yours: we never see it. The same goes for a site file you share with another person.
What leaves the phone
Only two things, both needed for the app to work:
- The map. Map tiles come from our server (hosted on Cloudflare) and satellite imagery from Stadia Maps. Such a request carries your phone’s IP address and the tile coordinates, that is the part of the map you are looking at, not your position. Our server keeps no request logs; it holds the IP address for one minute, only to limit the number of requests. Stadia Maps sees the IP address and the request parameters and keeps them in its logs for a few days, under its privacy policy (stadiamaps.com/privacy).
- The weather. When you save a sighting, the app fetches the forecast from Open-Meteo for the place and hour of the sighting. It sends coordinates rounded to two decimal places (about 1 km), the hour and, like every connection, the IP address; we add no user identifier. Open-Meteo may keep request logs for up to 90 days, under its privacy policy (open-meteo.com/en/terms).
Nothing else. The basis for this processing is performing the service you ask for, that is showing the map and the weather; on the providers’ side their policies apply. The “Community” link opens a Discord invite in the browser; from then on Discord’s policy applies.
This website
The website leszy.app is hosted on Cloudflare, which processes the IP address and request data to serve and protect the connection, under its own privacy policy. The site sets no cookies and has no analytics or scripts.
Permissions
- Location (“while using the app”): read when you save a sighting, on your request and while the map is on screen. The app never tracks your position in the background. Without this permission everything works, just without a position.
- Notifications: local reminders for calendar periods and camera-trap checks. Nothing leaves the phone.
You can revoke each permission in the system settings.
What reaches the publisher
If you write to contact@leszy.app, your message passes through Cloudflare’s mail forwarding and lands in a Gmail mailbox (Cloudflare and Google are then recipients of the mail). If you write on Discord, Discord’s policy applies. If you voluntarily send a backup file or a screenshot to diagnose a bug, we will see its contents.
Legal basis: our legitimate interest, that is helping you. We delete correspondence one month after the case is closed; sent backup files and screenshots are deleted after the diagnosis, at the latest after 14 days. We pass them to nobody beyond the service providers named in this policy.
Your rights
You have the right to access your data, to correct it, to erase it, to restrict its processing and to object. You delete the app’s data yourself: remove the app or its data; backup files and shared sites you delete where you saved them. We delete correspondence on your request. You may lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (uodo.gov.pl).
Some recipients operate outside the European Economic Area: Open-Meteo in Switzerland (a country with a European Commission adequacy decision), Cloudflare, Google, Discord and Stadia Maps in the USA (under the adequacy decision for companies certified in the EU-US Data Privacy Framework or standard contractual clauses; details in each one’s policy).
Children
The app is not aimed at children and collects no data from anyone on our servers.
Changes
We announce a change to this policy in the app’s release notes (“What’s new”) and on this page, with a new date.