Privacy Policy
Last updated 12 September 2026
HerpBase keeps your records so that you have them. We do not track you, we do not advertise to you, and we do not sell or share your data with anyone.
HerpBase is a reptile husbandry record keeper operated by Olympus ML ("we"). This policy explains what the app stores, where, and how to get rid of it.
What we collect
Your account. When you sign in with Apple or Google we receive your email address and, if the provider supplies it, your name and profile picture. That is the whole of it — we never see your password and we receive nothing else from those accounts. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's relay address.
Your collection. The records you create: animals, species, morphs and genetics, feedings and feeding plans, weights, sheds, treatments, observations, breeding events, notes, tasks, racks and enclosures, tags, food and feeder stock, and your keeper profile.
Nothing else. There is no analytics, no crash reporting, no advertising identifier and no tracking of any kind. No third-party SDK in the app receives your data. The app does not ask for your location, contacts, calendar or health data.
What never leaves your phone
- Photographs of your animals. Every photo you take or attach stays in the app's storage on your device. Photos are not uploaded and are not synchronised between devices.
- Device preferences — light or dark theme, which hand you hold the phone in, which racks are visible, reminder times, label formats.
- Reminders, which your phone schedules locally.
Where your data is stored
On your device, in a database belonging to your account alone. Signing in as somebody else on the same phone gives that account its own separate database; neither can see the other's records.
A copy of your collection — not your photos — is synchronised to our backend so that it survives a lost or replaced phone and reaches your other devices. That backend runs on infrastructure operated by Supabase Inc. on our behalf, as our data processor and for no other purpose. Access is restricted at the database level so that each account can read and write only its own rows. Depending on where that infrastructure is located, your data may be processed outside your own country, under the safeguards in Supabase's data processing terms.
Why we hold it
Only to make the app work: to show you your collection, to sync it between your devices, and to restore it if you lose your phone. We have no other purpose for it. Under the GDPR the legal basis is the performance of our contract with you — providing the app you asked for.
Who we share it with
Nobody. The only third parties involved are Apple and Google, for signing in — they tell us who you are, and we tell them nothing about what you keep in the app — and Supabase, our hosting provider, acting solely as a processor under contract.
We do not sell your data, we do not use it to advertise, and we do not use it to train anything.
How long we keep it
Until you delete it. There is no other retention period and we do not archive deleted accounts.
Deleting your account
In the app: Profile → Settings → Delete account. It asks you twice, then deletes your account and every record attached to it from our backend immediately and permanently, along with the database and photos on that device. There is no recovery afterwards and we keep no copy.
If you would rather keep a copy first, Settings → Export full backup gives you a zip of your database and photos, and Export CSV gives you spreadsheets. Both are free.
Your rights
If you are in the EU/EEA or the UK you have the right to access, correct, export and erase your data, and to object to or restrict our processing of it.
The app gives you most of these directly: everything we hold is visible in the app, editable in the app, exportable from Settings and erasable from Settings. For anything else, write to us and we will respond within 30 days. You also have the right to complain to your data protection authority — in Portugal, the CNPD.
Children
HerpBase is not directed at children and we do not knowingly collect data from anyone under 13, or under 16 in the EEA where local law sets that age. If you believe a child has created an account, write to us and we will delete it.
Changes
If this policy changes materially we will update the date above and note the change in the app's release notes. Continuing to use HerpBase after a change means you accept the updated policy.