Firewood Friends is provided by Itomic Digital Pty Ltd. This policy covers the mobile app and its hosted services, not the separate product website's cookie choices. Contact [email protected] about privacy or account deletion.
Information and purposes
We process account email, sign-in identifiers and profile details; listing descriptions, photographs and locations; chat messages/images; alert areas and preferences; supplier profiles and community posts. These support accounts, discovery, collections, messaging, notifications, moderation and support.
With permission, location supplies nearby results, listing/alert locations and directions. Camera or chosen photographs supply uploads; notifications deliver alerts. Withdraw permissions in device settings or adjust alerts in the app. This does not remove content already uploaded.
Visibility and providers
Other users can see shared profiles, listings, photographs and community posts; chat recipients see messages. Guests see obscured listing locations, while signed-in users can receive precise collection locations. Do not publish details you do not want recipients to know. Grouped alert-zone trends support internal reporting.
Google Firebase supplies authentication, hosted data/files, Functions, messaging/device tokens, Analytics, Crashlytics, Performance, App Check and Remote Config. These process account/content data, installation/device/network information, usage and diagnostics for their functions. Optional Google or Apple sign-in processes account details with that provider.
Map tiles, geocoding, routing and what3words services receive the network and location information required for requests. Providers include OpenStreetMap/Nominatim, OSRM routing operators and what3words. Opening external directions supplies the destination to your chosen maps provider.
Email alerts use Mailgun, which receives recipient addresses, message content and delivery information. Support emails contain the address, message and attachments you choose to send.
Where available, What Wood sends chosen photos and regional context to Google's Gemini through Firebase AI for identification. Tree identification sends photos and, when supplied, coordinates through our backend to Pl@ntNet. Published identification posts are separate shared content. Avoid including people or private information in photos.
Our Gemini service uses a billing-enabled Google project. Under Google's paid-service terms, submitted photos, prompts and responses are not used to improve Google's products; Google retains logs for a limited period for safety, security and required disclosures. Pl@ntNet's API terms state that submitted photos stay in server memory during identification rather than its image database, while query history is retained for usage control and statistics. These providers' processing is separate from any identification post you publish in Firewood Friends.
We do not sell personal information. Providers may process data outside your country. See Google/Firebase, Apple, OpenStreetMap and what3words.
Account deletion and retention
Use Profile > Delete My Account, or email support from your registered address with the subject Firewood Friends account deletion and your preferred mode. Do not send your password. Uninstalling does not delete a hosted account.
Anonymize retains community listings/messages under Deleted User. Delete Everything removes the records covered by the deletion flow, but currently does not remove supplier profiles or authored What Wood posts. Request their cleanup explicitly with support; we must confirm the outcome before claiming everything has been deleted. Removing sign-in is not proof that all hosted content is gone.
Hosted content remains while needed for the service unless removed. Diagnostics, support records and backups have separate retention and deletion handling. Contact support to request access, correction or erasure and an explanation of any records retained.
Security, children and changes
The service uses HTTPS, Firebase Authentication and database/storage access rules. No system is completely secure. The service is not intended for children under 13; report suspected child data to support. We update this policy when data handling changes.