نمير وليلى
Nomair & Laila

Privacy Policy

Effective 1 August 2026

Accounts and collection data

You can create a Nomair & Laila account to sync your profile, handle, friendship connections, catch metadata, species progress, preferences and device-sync state. Friends can see the profile statistics and recent catches that the app makes available to them. Original catch photos remain on your device and are not stored in the online catch record. The app does not contain advertising or cross-app tracking.

Animal identification

Captures are made with the in-app camera. Before identification, the app applies the photo's orientation, removes metadata and prepares a resized copy of the complete camera frame (up to 1600 pixels on either side and 5 MiB). The frame may include hands or people visible near the animal. The app explains this scope and sends the copy only after the signed-in user consents, reviews the photo and taps Identify. Exact location and photo metadata are not included. The authenticated copy passes through our Cloudflare Worker to Anthropic Claude for wildlife identification. The same protected copy may be sent to Anthropic again when the user retries or when a second check is required to verify an animal outside the featured catalogue. Uncertain results remain unconfirmed. Our Worker, logs and databases do not retain the submitted image body. Anthropic's commercial API may retain inputs and outputs for up to 30 days, subject to limited policy and legal exceptions. Nomair & Laila keeps a metadata-only identification audit for up to 90 days; it contains no photo, cutout, photo metadata or exact location. After identification, the user may long-press the animal in the saved local photo to use Apple's on-device subject lift and save an optional transparent cutout; that cutout is not required for identification. Featured-catalogue facts shown by the app come from our curated catalogue.

Location and security

Location is optional and stored at reduced precision; sensitive-species locations are coarsened further. Short-lived, one-way identifiers and request hashes are used for rate limiting, idempotency and abuse prevention. Supabase row-level security limits account data by user. Narrowly scoped server roles are used only for operations such as identification and account deletion. Provider credentials are never exposed to the app or application logs.

Your choices

You can deny camera or location access, remove individual catches, manage friendship requests, share a profile card only when you choose, delete your online account in the app, or remove local data by deleting the app. The app does not require Photo Library access to identify an animal.

Children and safety

The experience is designed for families. Do not approach, touch, feed or disturb wildlife. Identification can be wrong and must not be used for medical, safety or conservation enforcement decisions.

Contact

Questions can be sent through our support page. When you submit that form, we store the email address, message and selected language needed to respond to and manage the support request.