ExoKeeper Privacy Policy

1. Who we are

ExoKeeper (“ExoKeeper”, “we”, “us”) is a mobile application that helps keepers care for exotic pets (reptiles, amphibians, invertebrates, birds, small mammals, and similar species). This Privacy Policy explains how we handle information when you use the ExoKeeper app on iOS and Android.

Data controller: ZALE MART LTD
Website: eternalbar.com
Contact: support@eternalbar.com

2. Summary

• Local-first: Core care records (pets, logs, reminders, photos, settings) are stored primarily on your device.
• Optional account: You may use guest mode without signing in. Sign-in is optional for cloud backup, referral rewards, and AI features.
• No ads: We do not sell your personal information and we do not use third-party advertising networks in the app.
• AI is optional: If you use ExoKeeper AI, selected pet context and your messages are sent to Google Gemini via Firebase to generate replies.
• You stay in control: Export JSON backups, reset this device, or delete your account from Settings → Privacy & Data.

3. Information we collect

3.1 Information you provide

• Pet profiles: name, species/taxon, breed, birth date, gender, enclosure parameters (temperature, humidity, feeding interval), and optional notes.
• Care logs: feeding, weight, shedding, cleaning, health checks, and other record types you enter.
• Reminders & layouts: notification preferences and home-screen card arrangements.
• Photos: pet images you capture or import (stored locally; may be included in backups you create).
• Account data (optional): email address and display name when you sign in with email, Google, or Apple.
• AI chat (optional): messages you send in ExoKeeper AI and contextual pet/log summaries attached to those requests.
• Referral codes (optional): invite codes you create or redeem when signed in.

3.2 Information collected automatically

• Device & app settings: language, appearance (light/dark), and measurement units — stored on your device.
• Subscription status: processed by Apple App Store or Google Play; we receive entitlement signals to unlock Premium features.
• Firebase identifiers: when signed in, a Firebase user ID (UID) to associate cloud backup and referral data with your account.
• Install identifier: a random local ID used for referral integrity (stored on device).

We do not currently integrate Firebase Analytics or Crashlytics in the app. Standard server logs from Google/Firebase may still record technical events (e.g., authentication, storage requests).

3.3 Permissions

• Camera & photo library: to add pet photos (only when you choose to).
• Notifications: for local care reminders scheduled on your device; reminder content is not sent to our servers.
• Local network (iOS debug builds only): used by Flutter tooling during development, not in production user flows.

4. How we use information

• Provide and improve ExoKeeper features (pet hub, care history, growth charts, species library, AI insights).
• Schedule local notifications based on your pets’ feeding and care patterns.
• Authenticate your account and sync optional cloud backup (Premium).
• Process subscriptions and restore purchases via Apple/Google.
• Operate referral rewards (pet slots and AI credits) when you are signed in.
• Generate AI responses when you use ExoKeeper AI.
• Respond to support requests and comply with law.

5. Where data is stored

• On your device (Hive): pets, logs, reminders, photos, AI chat history (per pet, up to 100 messages), and preferences. Guest and signed-in data are kept in separate on-device scopes.
• Firebase (optional, signed-in): cloud backup JSON and metadata in Firebase Storage / Firestore; referral records in Firestore.
• Google Gemini (optional): when you send an AI message, pet context and conversation content are processed by Google’s AI service through Firebase AI Logic. See Google Privacy Policy.

Manual JSON export/import stays on your device or wherever you save the file (Files, iCloud Drive, etc.) — we do not receive it unless you separately upload it to our cloud backup feature.

6. Legal bases (EEA/UK users)

Where GDPR applies, we rely on: contract (providing the app you request), legitimate interests (security, fraud prevention for referrals), consent (optional AI, notifications, photos), and legal obligation where required.

7. Sharing with third parties

We share data only with service providers that help us run ExoKeeper:

• Google Firebase — authentication, Firestore, Cloud Storage, Firebase AI (Gemini). Firebase Privacy
• Google Sign-In — if you choose Google login.
• Apple Sign In — if you choose Apple login on Apple devices.
• Apple App Store / Google Play — subscription billing and receipt validation.

We do not sell personal information. We may disclose information if required by law or to protect rights, safety, and security.

8. AI & health disclaimer

ExoKeeper AI provides general husbandry information based on your logs and widely available exotic-pet knowledge. It is not veterinary advice, diagnosis, or treatment. Always consult a qualified veterinarian for medical decisions. Do not enter human health information in the app.

9. Children

ExoKeeper is not directed to children under 13 (or 16 in the EEA where applicable). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

10. Retention

• On-device data remains until you delete it, reset the device from Settings, or uninstall the app.
• Cloud backup remains until you delete your account, remove the backup, or we delete it per your request.
• Account data in Firebase is deleted when you complete in-app account deletion (Settings → Privacy & Data → Delete account).

11. Your rights & choices

• Access & portability: export a JSON backup (Settings → Privacy & Data → Export).
• Correction: edit pets and logs in the app.
• Deletion: delete account in-app; use “Reset this device” to wipe local data; uninstall the app.
• Opt out of AI: simply do not use the AI tab; no AI data is sent without your messages.
• Notifications: disable in Settings → Care reminders or system settings.
• EEA/UK/California rights: you may request access, deletion, or objection by emailing support@eternalbar.com. We will verify your request. California residents: we do not sell personal information (CCPA/CPRA).

12. International transfers

Firebase and Google may process data in the United States and other countries. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses offered by Google).

13. Security

We use industry-standard measures (encryption in transit for cloud services, scoped Firebase security rules, on-device storage). No method is 100% secure; keep your device and account credentials safe.

14. Changes

We may update this policy. We will post the new version at this URL and update the “Last updated” date. Material changes may be notified in-app where appropriate.

15. Contact information

For general inquiries, complaints, questions, or privacy requests concerning ExoKeeper, please contact:

ZALE MART LTD
71-75 Shelton Street
Covent Garden, London WC2H 9JQ
United Kingdom
support@eternalbar.com
eternalbar.com