ReptiDeck Privacy Policy

Updated: November 15, 2026 · Effective: November 15, 2026

This policy explains what ReptiDeck collects, why, where it goes and what you can do about it. It is written for people in the United States and Canada. The English version is the official one; the French and Chinese versions are translations, and if they differ, the English version prevails, except where the law requires the French version to prevail.

Version française : https://reptideck.com/fr/privacy

中文版：https://reptideck.com/zh/privacy

The short version:

• Your records and photos stay on your iPhone. They go to our cloud only if you sign in on Keeper PRO or Breeder MAX, so they can sync. The cloud is Google Firebase in the United States.
• You don't need an account. If you make one, your email address (or your Apple or Google sign-in) is used to sign you in and to send you account emails, such as a password reset.
• No ads, no analytics, no tracking. We don't sell or share your personal information, and we don't use it for advertising.
• The app removes the location from photos you add (section 2 explains the one exception).
• You can export your data, delete records and delete your account in the app at any time.

1. Who we are

ReptiDeck ("the app") is offered by Deng Liangjie, a sole proprietor doing business as Guiyang Yunyan District Xiangsu Yueqian Network Studio, a business registered in China (unified social credit code 92520103MAKRY2A88L). "We" and "us" mean this business.

Address: Shop 8, Floor 1, Building 3, Guixin Garden, 58 Zhaiji Road, Yanwujie Subdistrict, Yunyan District, Guiyang, Guizhou, China

Email: support@reptideck.com

Privacy officer: Deng Liangjie, owner of the business, is responsible for the personal information we hold. This is the person in charge of the protection of personal information under Quebec law and the person accountable under Canada's PIPEDA. Write to support@reptideck.com with "Privacy" in the subject.

2. What we collect and why

Without an account

Everything you do in the app stays on your iPhone and reaches no one. Without an account, the app does not connect to our servers. It talks only to Apple's App Store, to show plan prices and handle purchases.

Your account (optional)

You can sign in in three ways. We get only what the way you choose gives us.

• Email: your email address and a password. The password goes straight to Firebase Authentication, which stores it in hashed form; we never see it. Firebase emails you a link to confirm your address, and a reset link if you ask for one.
• Sign in with Apple: an account identifier from Apple and the email address Apple gives us, which can be a private relay address if you choose to hide yours. We don't ask Apple for your name.
• Sign in with Google: your Google account identifier, your email address and the name and profile picture link Google shares at sign-in. If Google shares a name, it becomes your nickname.

Every account also has an account ID, a nickname (a Keeper number until you change it), when the account was created and last signed in, and whether its email address is confirmed. To protect sign-in from abuse, Firebase Authentication records the IP address and device type of sign-in requests.

What you enter

Animal profiles (name, species, morph, sex, birthday, origin), care and health records (feedings, weights, sheds, medications, vet visits, notes), reminders, enclosures, racks and devices, breeding records (pairings, clutches, incubators, hatchlings), feeder stock, income and expenses, sales and waitlist records, badges, and the breeder name, logo and avatar you set.

All of this stays on your iPhone unless it syncs (below) or you export or share it yourself.

Sales and waitlist records can hold other people's information: a buyer's name, contact details, deposit and tracking number. Enter only what you need for that sale, make sure the person knows, and use it only for dealing with them. We handle it like the rest of your records.

Photos and the camera

You choose each photo or take it with the camera. The app makes a smaller copy and keeps it on your iPhone. Before keeping a photo, the app removes the location saved in it (EXIF GPS and XMP data). The time it was taken stays. Image files the app can't read this way, such as a PNG logo, are kept as you picked them.

When you scan a label's QR code, the camera picture is read on your iPhone by Apple's own code reader. It is not saved or sent anywhere.

Cloud sync (Keeper PRO or Breeder MAX, signed in)

On Keeper PRO or Breeder MAX, once you sign in, the app uploads everything listed under "What you enter" and your photos, including records you have deleted in the last 90 days (so your other devices delete them too). It syncs when you sign in, a few seconds after each change, when you come back to the app and every 15 minutes while it is open. Your data then comes back on a new phone or a second iPhone signed in to the same account.

On the free version, or while signed out, nothing syncs, even if you have an account.

The cloud copy sits in Google Cloud Firestore and Cloud Storage for Firebase in the us-central1 region (Iowa, United States). Security rules let only your signed-in account read or write it through the app.

Suggestions (Keeper PRO or Breeder MAX, signed in)

On Keeper PRO or Breeder MAX, once you sign in, you can send us suggestions from the app. We get the kind and text of the suggestion, your nickname, whether you agree to show it, your plan, the app and iOS versions and your account ID, stored in Cloud Firestore in us-central1. We read them, answer them in the app and use them to improve ReptiDeck.

Suggestions we adopt are listed in the app's What's New, which every user can see: with your nickname if you agreed to show it, otherwise only your plan (such as "a Keeper PRO member"). We write that line ourselves, so it may differ from your words. While you are signed in, the app also reads our notices and What's New from the cloud; they hold no personal information.

Purchases

Plans are bought through Apple's App Store. Apple handles payment; we never see your card details or Apple Account password.

• On your iPhone, the app reads from Apple what your Apple Account holds for ReptiDeck (product, transaction number, purchase date, expiry date, whether it renews) to unlock your plan, and keeps that on the phone.
• When you buy while signed in, the purchase carries a code made from your account ID (not your email address), so it can be matched to your account.
• While you are signed in, the app sends Apple's signed record of your purchase to our server (Cloud Functions for Firebase, in the United States), which checks it with Apple and saves on your account your plan, the product, transaction numbers, purchase and expiry dates, whether it renews or was refunded, and whether it was a test (sandbox) purchase. Apple then tells our server about renewals, billing problems, refunds and expirations of that purchase. Each check is logged with your account ID, the transaction number and the kind of notice. This is how your plan follows your account to another phone. One purchase belongs to one account at a time: signing in to another account with the same Apple purchase moves the plan there. We keep nothing else from Apple: not your Apple Account email or name, nor the price or country.

Reminders and notifications

Feeding, medication, care and renewal reminders are scheduled and shown by your iPhone. They can include an animal's name. They don't pass through our servers, and the app uses no push notification service.

Email

Firebase sends account emails for us (address confirmation, password reset). We don't send newsletters or marketing email. If you write to us, we get your email address and whatever you send.

What we don't collect

We don't collect your location, contacts, microphone, health data, browsing history, advertising identifier (IDFA) or other device identifiers. The app contains no advertising, analytics, crash-reporting or tracking components, so it never asks to track you.

We don't ask for government ID, financial details or other sensitive information. If you type such things into a note or capture them in a photo, they are stored like the rest of your records, so please don't.

3. How we use it

Only to:

• run the features you use, sign you in and sync your data;
• unlock, restore and check your plan;
• keep the service secure and stop abuse;
• answer your messages and suggestions;
• meet our legal obligations.

Risk scores, feeding plans, growth charts and gene odds are worked out on your iPhone. We don't build profiles, make automated decisions about you, train AI models on your records or show you ads. Before using personal information for a new purpose, we will ask you.

You consent to this policy when you agree to it on first opening the app, and to each optional part when you use it (signing in, syncing, buying). You can withdraw consent as described in section 9; some features then stop working.

4. Permissions

The app asks for each permission only when you first use the feature that needs it. If you say no, only that feature stops working. You can change any of them in your iPhone's Settings.

5. Who gets your information

We don't sell your personal information and don't share it for cross-context behavioral advertising. It reaches others only as follows.

• Our service providers. Google runs our accounts, cloud storage and server under the Firebase data processing terms, and may use the information only to provide those services to us.
• Apple and Google sign-in, and the App Store. When you use them, Apple or Google handle that step under their own privacy policies (see the appendix).
• Other users, for adopted suggestions. If we adopt your suggestion and you agreed to show your nickname, your nickname appears with it in What's New.
• What you share yourself. You decide who receives the share cards, posters, price lists, labels, PDFs, spreadsheets and backups you make. Once sent, we can't control them.
• The law. We disclose information when the law requires it, such as under a court order, and only what is required.
• A change of owner. If the business or the app is transferred, the new owner may receive the information and must follow this policy. We will tell you first.

Our own access: we don't look at your cloud data unless you ask us for help, we need to investigate a security problem or abuse, or the law requires it.

6. Where it is stored

• On your iPhone: in the app's own storage. Your iPhone's own backups (iCloud or a computer) can include it, under Apple's terms.
• In the cloud: in the United States (Firestore and Cloud Storage in us-central1; Firebase Authentication works only in the United States).
• Our access: we run ReptiDeck from Canada and China, so when we open our cloud console, information can be viewed from those countries.

If you live in Canada, including Quebec, this means your information is stored outside your province and outside Canada, and may be accessed from China. The laws of those countries may allow their courts, police or security agencies to obtain it. We protect it with our providers' written data protection terms, encryption and access limited to the owner.

7. How long we keep it

When something is deleted from Google's systems, Google removes it from its live systems promptly and from its backups within about six months.

8. Security

• Connections between the app and the cloud use HTTPS. Google encrypts the cloud data at rest.
• Security rules separate every account's data, and only the owner of the business can open the cloud console.
• On your iPhone the data sits in the app's storage, protected by iOS, but it is not separately encrypted. Please use a passcode.
• Backup files and exported spreadsheets are not encrypted. Keep them safe.

No system is perfectly secure. If a breach puts you at real risk of harm, we will tell you and the regulators as the law requires.

9. Your rights and choices

We give these rights to everyone, wherever you live.

Deleting your account (Me → Settings → Account → Delete account) deletes your account, your cloud copy, your photos in the cloud, your suggestions and our purchase records for the account. Suggestions we adopted stay in What's New without your nickname. It cannot be undone. You may be asked to sign in again first. Note:

• The records on your iPhone stay and remain in the app, signed out. Delete the app to remove them.
• It does not cancel an App Store subscription. Cancel it in iPhone Settings, or Apple keeps charging you.

We answer requests within 30 days. To protect you, we may ask you to write from your account's email address or to sign in before we act on a request. You can name someone to make a request for you; we may ask for proof that they can. Using your rights never changes the price or quality of what you get.

California residents

The California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of its sale or sharing; and to limit the use of sensitive personal information; and not to be treated differently for using these rights.

• In the last 12 months we collected: identifiers (email address, account ID, IP address), customer records (a name, if Google shares one), commercial information (purchase records), internet or other electronic network activity (sign-in logs), audio, electronic, visual or similar information (photos you add), and other content you enter (section 2). Email and password together are sensitive personal information, used only to sign you in.
• Sources: you, your iPhone, Apple and Google.
• Purposes: those in section 3. Recipients: the service providers in section 5, for those purposes only.
• We have not sold or shared personal information, including of anyone under 16. We don't use sensitive personal information for anything that would give a right to limit it.
• How long: section 7.

To use these rights, email support@reptideck.com. Even if these laws don't require it of a business our size, we will honor them.

We don't disclose personal information to others for their direct marketing (California Civil Code 1798.83). The app does not track you across other companies' apps or websites, and our website sets no cookies and runs no scripts, so there is nothing for a Do Not Track or Global Privacy Control signal to turn off.

Other US states

If you live in a state with a consumer privacy law, such as Virginia, Colorado, Connecticut, Utah, Texas or Oregon, you have similar rights, used the same way. If we turn down your request, you can appeal by replying to our answer; we will decide within 45 days and explain why. If you are still not satisfied, you can contact your state attorney general.

Canada

Canada's PIPEDA and the provincial laws of Quebec, Alberta and British Columbia give you the right to access and correct your personal information and to withdraw consent. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca), in Quebec to the Commission d'accès à l'information du Québec (https://www.cai.gouv.qc.ca), or to your provincial privacy commissioner.

Quebec: the app's most private settings are its defaults: no account, nothing in the cloud. We use no technology that identifies, locates or profiles you. You can get the information you gave us in a structured, commonly used format (the backup file or CSV), and ask us to send it to someone else.

10. Children

ReptiDeck is not directed to children under 13, and we don't knowingly collect personal information from them. If you are under 13, or under 14 in Quebec, don't create an account. Using the app without an account sends us nothing. If you are a parent and think your child has given us information, email us and we will delete it.

11. Changes

We post updates in the app and on our website, with a new date at the top. For an important change, such as a new purpose, a new kind of information or a new recipient, the app will show you what changed and ask you to agree before it applies. Earlier versions are available on request.

12. How we manage personal information

ReptiDeck is run by one person and has no employees. This is how we look after personal information:

• Responsibility: Deng Liangjie, as privacy officer (section 1), approves these practices and answers for them. If anyone else ever works on ReptiDeck, they will get access only to what their task needs, after agreeing in writing to keep it confidential.
• Access: only the privacy officer can open our cloud console, with two-step verification on that account.
• Keeping and destroying: we keep information only for the periods in section 7. Deleted records and accounts are erased by the app and our server as described there; messages to us are deleted when their period ends.
• Before a change: before we use a new service provider, start a new kind of processing or send information to a new country, we assess the privacy risks and record that assessment.
• Incidents: we keep a register of every confidentiality incident (loss of, unauthorized access to or disclosure of personal information). If an incident creates a risk of serious injury, we tell the people affected and the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada, as the law requires.
• Complaints: write to support@reptideck.com with "Privacy" in the subject. We confirm receipt within 7 days and answer within 30 days. If you are not satisfied, section 9 lists where you can complain.

13. Contact

Deng Liangjie, doing business as Guiyang Yunyan District Xiangsu Yueqian Network Studio

Address: Shop 8, Floor 1, Building 3, Guixin Garden, 58 Zhaiji Road, Yanwujie Subdistrict, Yunyan District, Guiyang, Guizhou, China

Email: support@reptideck.com

Website: https://reptideck.com

Appendix: Services the app uses

The app's other components (notifications, picking photos, sounds, the share sheet, PDF and QR code drawing, reading files) work only on your iPhone and send nothing to us or anyone else.