Mush Pal · Redvanta Software Ltd · Effective 9 October 2026
This policy explains what information Mush Pal ("the App") handles, why, and what choices you have. The App is operated by Redvanta Software Ltd, a company registered in the United Kingdom ("we", "us"). We are the data controller for the information described here.
The short version. Photos you scan are sent to Google's Gemini AI, through our servers, to identify the mushroom. We do not run ads, we do not use analytics or tracking tools, and we do not sell your data. Your scan history is stored on your device, not on our servers.
1. Information we handle
Photos you scan. When you scan a mushroom, the App resizes and re-compresses up to three photos on your device and sends them to our servers for identification.
An anonymous account identifier. The App creates an anonymous account automatically. We do not ask for your name, email address or phone number. The account is identified only by a random ID.
Your region. The App sends a country or region code taken from your device settings, or from the emergency region you choose in the App. It is not GPS location.
Scan records. For each scan we keep a record of the result (for example the verdict and the species name suggested), the number of photos, the App version, your region code, how long the scan took, and the time. This record does not contain your photos.
Subscription status. If you subscribe, we receive whether your subscription is active and when it expires. Payment is handled by Apple; we never see your payment details.
Technical logs. Our servers keep operational logs (for example timings and error information) to keep the service running and secure. These logs do not contain your photos.
2. Information stored only on your device
Your scan history, saved results and small thumbnails. These are not uploaded to our servers. You can delete entries from the Journal in the App, or remove everything by deleting the App.
Your preferences, and your anonymous sign-in credentials, which are held in the iOS Keychain.
3. How we use it
To identify mushrooms from your photos and return a result (providing the service).
To apply fair-use scan limits, check subscription status, and prevent abuse (our legitimate interests in running a secure and sustainable service).
To diagnose faults and improve the reliability and safety of the App (our legitimate interests).
To meet legal obligations.
4. Who receives it
Google (Gemini API). Your scan photos and the instructions we send with them are processed by Google's Gemini AI to produce the identification. We use Google's paid Gemini API. Under Google's terms for paid API use, Google does not use this content to train its models, and may retain it for a limited period for abuse monitoring and legal compliance.
Supabase. Our backend provider. It hosts our servers, anonymous accounts and scan records.
RevenueCat. Manages subscription status. It receives your anonymous account ID and your purchase information.
Apple. Processes payments and subscriptions through the App Store.
We do not sell your information. The App contains no advertising and no third-party analytics or tracking tools.
5. Your photos
Our servers process your photos in memory to complete the request and do not save them. They are forwarded to Google as described above. Please avoid including people, faces or other personal information in your photos.
6. How long we keep information
We keep scan records and account data for as long as needed to run the service, apply usage limits, and meet legal obligations. We delete them when you ask us to (see section 7). Data on your device stays there until you delete it or remove the App.
7. Your rights
Under UK data protection law you can ask us to give you a copy of your information, correct it, delete it, restrict or object to our use of it, and, where it applies, provide it in a portable format.
Because the App has no sign-up, we identify you by your Account ID. To make a request, email support@redvanta.net and include the Account ID shown in the App under Settings → About. We will respond within one month.
If you are unhappy with how we handle your information, you can complain to the UK Information Commissioner's Office at ico.org.uk.
8. International transfers
Some of our providers may process information outside the United Kingdom. Where they do, we rely on the safeguards required by UK law, such as adequacy regulations or the UK International Data Transfer Addendum.
9. Children
The App is not intended for anyone under 18, and we do not knowingly collect information from people under 18.
10. Changes to this policy
We may update this policy. The current version is always available at redvanta.net/mushpal/privacy, with its effective date at the top.
11. Contact
Redvanta Software Ltd · Flat 108, 114 High Street, Manchester M4 1HQ, United Kingdom · support@redvanta.net