ShedLog

Privacy policy

ShedLog keeps records about your reptiles. This page explains what we store, who helps us store it, and how you take it with you or wipe it.

Last updated: 20 October 2026

Who we are

ShedLog is made by Galactic Digital (PTY) Ltd, Unit 143, Platinum Junction, 4 School Street, Cape Town, South Africa ("we", "us"). We are the responsible party (under POPIA) and controller (under the GDPR) for the personal information described here.

What we collect

Your account

  • The name and email address Apple or Google shares when you sign in. If you use Sign in with Apple's Hide My Email, we only see the relay address.
  • A user ID created by Firebase Authentication.
  • Your preferences: time zone, weight and temperature units, reminder settings.

What you log

  • Reptile profiles: name, species, morph, sex, hatch date, notes and an optional photo.
  • Feeds, sheds, weights, care entries, temperature and humidity readings, and medication schedules.
  • Photos are resized and re-encoded on your phone before upload, which removes location (GPS) and camera details.

Your devices

  • If you allow notifications, a push token for each iPhone so we can reach it. Feeding and care reminders themselves are scheduled on the phone.

Purchases

  • Apple handles payment. We never see your card details. RevenueCat tells us whether your Pro subscription or lifetime purchase is active, linked to your ShedLog user ID.

How we use it

Purpose Legal basis
Running your account, syncing your records between your devices, and sending reminders Performing our contract with you
Checking whether you have Pro Performing our contract with you
Fixing crashes and understanding which features are used Our legitimate interest in a working app
Measuring which ads and links bring people to the app (attribution), without your advertising identifier Our legitimate interest in knowing where installs come from
Including your device's advertising identifier in that measurement, only if you tap Allow on the iPhone tracking prompt Your consent, which you can withdraw in iPhone Settings
Answering support emails Our legitimate interest, and your request

We do not sell your personal information, and your reptile records are never shared for advertising.

Who processes it

  • Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Analytics, Crashlytics) stores your account, records and photos and runs account deletion.
  • Apple for Sign in with Apple, in-app purchases and delivering notifications.
  • Google Sign-In if you choose to sign in with Google.
  • RevenueCat to manage subscriptions and purchases. RevenueCat passes purchase, renewal and refund events to AppsFlyer for attribution.
  • AppsFlyer to measure which ads and links lead to installs and purchases.
  • Expo (650 Industries) to route push notifications to your iPhone.

Each acts on our instructions under its own data processing terms. Their privacy policies: Firebase, Apple, Google, RevenueCat, AppsFlyer and Expo.

Analytics, attribution and tracking

Analytics records a fixed list of events, such as "feed logged" or "paywall viewed", with coarse details like which screen you were on. It never includes your name, email, reptile names, notes, weights or health information.

Crash reports include your ShedLog user ID so we can find and fix a problem you report. They do not include your records.

On first launch the app asks once whether it may track you, using Apple's App Tracking Transparency prompt.

  • Ask App Not to Track: your device's advertising identifier (IDFA) is never collected, and Firebase ad storage stays off. AppsFlyer still receives install and app-open information without the IDFA, so we can count where installs came from.
  • Allow: AppsFlyer and Firebase Analytics may also use the IDFA to match an install to the ad that led to it.

Either way, AppsFlyer receives your ShedLog user ID and a short list of events: account created, reptile added, feed logged and paywall viewed, plus purchases via RevenueCat. These events never include names, notes, weights or health details. You can change your tracking choice at any time in iPhone Settings, Privacy & Security, Tracking.

Where it is stored

Your records and photos are stored by Google Cloud in the European Union (Firestore multi-region eur3). Some processing, including account deletion and analytics, runs in the United States. Where data leaves South Africa or the EU, we rely on our providers' standard contractual clauses or equivalent safeguards.

Data is encrypted in transit and at rest by our providers. It is not end-to-end encrypted, so it is protected by your sign-in and by access rules that only let your account read your records.

How long we keep it

  • Your account and records: until you delete them or your account.
  • When you delete your account in the app, we delete your records, photos, devices and reminder settings, then your sign-in account. If deletion is interrupted, it resumes when you try again.
  • Analytics, attribution and crash data: kept under Firebase's and AppsFlyer's retention settings, 14 months for Analytics, 90 days for Crashlytics, and the 14 months AppsFlyer retention period.
  • Purchase records: Apple and RevenueCat keep transaction history as required for tax and accounting.
  • Support emails: support@galacticdigital.co.za.

Your rights

Depending on where you live, including under POPIA in South Africa and the GDPR in the EU and UK, you can ask to access, correct, export or delete your personal information, object to or restrict how we use it, and withdraw consent.

  • Export: Settings, then Export my data, gives you a file with everything in your account. It is free on every plan.
  • Delete: Settings, then Delete account. Deleting the app or your account does not cancel an App Store subscription; cancel that in your Apple ID settings.
  • Anything else: email us and we will reply within 30 days.

If you're unhappy with how we handled a request, you can complain to the Information Regulator of South Africa or your local data protection authority.

Children

ShedLog is not directed at children under 13, and we do not knowingly collect their personal information. If you think a child has given us their information, contact us and we will delete it.

Changes

If we change this policy in a way that matters, we will update the date above and tell you in the app before the change applies.

Contact

Email support@galacticdigital.co.za with "privacy" in the subject.