Privacy Policy — Sotabosc

Last updated: November 3, 2026

EZM Studio ("we", "us", "our") operates the Sotabosc mobile application (the "App"). This Privacy Policy explains what information the App collects, how it is used, and your choices.

1. Information We Collect

1.1 Photos

When you use the mushroom identification feature, you take or select photos from your device. These photos are sent to third-party AI services (see Section 3) for analysis. We do not store your photos on any server we operate.

1.2 Location Data

If you choose to tag a mushroom find with your location, the App accesses your device's GPS coordinates. Location data is stored only on your device and is never transmitted to our servers or any third party.

1.3 API Keys

If you provide API keys for identification services (e.g., mushroom.id, OpenAI), these are stored locally on your device using encrypted secure storage. They are only used to authenticate requests to the respective services on your behalf.

1.4 Purchase Information

If you purchase Sotabosc Premium, the transaction is processed entirely by Apple (App Store) or Google (Google Play). We use RevenueCat to manage entitlements. We do not have access to your payment details (credit card, billing address, etc.). RevenueCat receives an anonymous app user ID and purchase receipt to verify your subscription status.

1.5 Usage Data

The App tracks your usage counts (number of identifications and location marks) locally on your device to manage the free tier limits. This data is not transmitted anywhere.

2. Information We Do NOT Collect

• We do not collect your name, email, phone number, or any personal identifiers.
• We do not use analytics, tracking, or advertising SDKs.
• We do not create user accounts or profiles.
• We do not store any of your data on our servers. All app data resides on your device.

3. Third-Party Services

When you use the identification feature, your photos are sent directly from your device to:

• mushroom.id (Kindwise) — kindwise.com/privacy — for mushroom species identification
• OpenAI — openai.com/privacy — for AI-powered identification (only if you configure this provider)

These services process your photos according to their own privacy policies. We encourage you to review them.

RevenueCat — revenuecat.com/privacy — processes anonymous purchase data to manage your Premium entitlement.

4. Data Storage and Security

• All app data (finds, favorites, settings, API keys) is stored locally on your device.
• API keys are stored using the platform's encrypted secure storage (Keychain on iOS, EncryptedSharedPreferences on Android).
• Photos are transmitted to third-party AI services over HTTPS (encrypted in transit).
• No data is stored on servers operated by EZM Studio.

5. Data Deletion

You can delete all app data at any time from Settings → Clear all data. This removes all finds, favorites, settings, and usage data from your device. Uninstalling the app also removes all locally stored data.

6. Children's Privacy

The App is not directed to children under 13. We do not knowingly collect information from children.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last updated" date above. Continued use of the App after changes constitutes acceptance.

8. Contact

If you have questions about this Privacy Policy, contact us at:

EZM Studio
Email: hello@ezmstudio.com