1. Introduction & Scope

This Privacy Policy applies to the ReptiLog mobile application ("App") and the ReptiLog website ("Site"), both operated by Red Rocks Exotic Reptiles ("we," "us," or "our"). It describes how we collect, use, disclose, and safeguard information when you use our App or Site, and explains your rights regarding that information.

By using the App or Site, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use immediately.

2. Information We Collect

2a. Offline / No-Account Use

ReptiLog is designed to function entirely offline without an account. In this mode:

• No personal data is collected, transmitted, or shared.
• All data you enter, including animals, logs, and settings, is stored locally on your device only.
• We have no access to this locally stored data.

2b. Account & Cloud Sync (Optional)

If you voluntarily create an account to enable cloud sync features, we collect the following:

• Email address for account creation, login, and transactional communications.
• Authentication credentials handled through our secure account system; we do not store plain-text passwords.
• Synced app data such as reptiles, groups, husbandry logs, and settings you choose to sync.

We do not collect payment card details, precise location data, contacts, advertising identifiers for profiling, or any biometric information.

2c. Technical Data

When you use the App or Site, limited service information may be generated to help keep things secure and working properly, including IP address, device type, operating system version, app version, and general service timestamps.

3. How We Use Your Information

We use collected information only to:

• Provide account access and authentication.
• Sync your data across devices.
• Back up and restore your information securely.
• Respond to support or deletion requests you send us.
• Maintain the security and integrity of the service.
• Comply with legal obligations.

We do not sell, rent, or use your data for advertising, analytics profiling, or tracking-based monetization.

4. Legal Bases for Processing (EEA / UK Users)

Where applicable, our legal bases for processing include:

• Performance of a contract, where processing is needed to provide optional sync and account services.
• Legitimate interests, such as security, fraud prevention, and service reliability.
• Compliance with legal obligations.
• Consent, where required by law.

5. Third-Party Services and Data Sharing

We use a secure cloud service provider for account access and cloud storage. That provider acts only on our behalf and may process data only as needed to deliver those services.

We do not use third-party advertising networks, third-party analytics SDKs, or tracking services inside ReptiLog.

We may disclose information only if required by law, legal process, or to protect the rights, safety, or security of our users, our business, or the public.

6. Data Retention

We retain personal data associated with your optional cloud account for as long as your account remains active, unless a longer retention period is required by law. If you request deletion, we will permanently delete your account data within 30 days, except where retention is legally required.

7. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect your information, including encrypted connections, secure sign-in processes, access controls, and protective security measures. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your Rights and Account Deletion

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to, or export your personal data. To exercise these rights or request account deletion, contact us at rrereptiles@gmail.com.

9. Children's Privacy

ReptiLog is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

10. International Data Transfers

If you use the App or Site from outside the United States, your information may be processed in the United States or other jurisdictions where our service providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.

11. California Privacy Rights

California residents may have rights under the CCPA and CPRA, including the right to know, delete, correct, and request information about personal data practices. We do not sell or share personal information as those terms are defined under California law.

12. Third-Party Links

The App or Site may link to third-party services such as app stores. Their privacy practices are governed by their own policies, not this Privacy Policy.

13. Changes to This Policy

If our privacy practices change, we may update this Privacy Policy. Material updates will be reflected by changing the "Last Updated" date and, where appropriate, by providing additional notice within the App or Site.

14. Contact Us

If you have questions, concerns, or privacy-related requests, contact us using the information below:

• Email: rrereptiles@gmail.com
• Phone: (970) 400-1278
• Operator: Red Rocks Exotic Reptiles LLC