Overview
This policy explains how the Mycora iOS app handles information. Mycora is a mushroom observation and identification aid; it is not a food-safety or medical service.
Information you choose to provide
Mushroom photos
When you choose to identify a mushroom, the edited photo you submit is sent over HTTPS to Mycora's identification service so a result can be generated. Photos you save to your journal are also stored on your device.
AI chat
If you use AI chat after accepting the in-app disclosure, your question and a limited amount of recent chat context are sent to Mycora's service and onward to the AI provider used to generate the response. The request also includes an app-generated device identifier used by the service. Do not put confidential or sensitive personal information in chat.
Journal, notes and optional location
Saved finds, notes, favorites, photos and any location you choose to associate with a find are stored in the app's on-device journal. Mycora provides a user-initiated JSON export where that control is available. Your support email, if you send one, is handled by your mail provider and our support inbox.
Firebase services
The app uses Firebase Analytics to understand important product usage such as screen views, completed identifications, onboarding and subscription-flow events; Firebase Crashlytics to receive crash and non-fatal diagnostic information; and Firebase Remote Config to deliver app configuration values. These services can process app-instance identifiers, device/app technical information, event metadata, diagnostics and related network information according to Google's Firebase terms and privacy documentation.
Our Firebase event instrumentation does not intentionally include mushroom photo contents, chat message text, precise location, or journal notes.
Purchases
Subscriptions and purchase restoration use Apple's StoreKit and App Store services. Apple handles payment details and purchase account information; Mycora receives the purchase/entitlement status needed to provide subscription features.
Advertising and tracking
The current iOS build does not include an advertising SDK or an implementation for cross-app advertising tracking. Remote configuration contains disabled, reserved advertising flags so future app behavior can be controlled safely; those flags do not add an advertising SDK.
Permissions
Camera access is requested when you choose to scan. Photo-library access is used when you choose an existing image. Location is optional and is requested only for features that use it. You can change permission access in iOS Settings.
Retention and control
You control on-device journal content and can remove saved finds from the app. AI chat is presented as session context in the current app. Information sent to service providers can be retained or processed according to their service rules and our operational needs. Contact us if you have a privacy question about Mycora data.
Security
Network requests described above use HTTPS. No online service can guarantee absolute security, so avoid submitting information you do not need to provide.
Changes
We may update this policy when app features or service providers change. The date at the top identifies the current posted version.
Contact
Email support@mycora.app for privacy or support questions. See the companion data disclosure for a shorter service-by-service summary.