Mesozoica Privacy Policy
Last updated: September 16, 2026
Mesozoica ("we", "our", or "the app") is a location-based paleontology game. This Privacy Policy describes how we collect, use, and protect your information when you use Mesozoica.
The data controller is the operator of Mesozoica. Contact: contact@mesozoica.app.
1. Data We Collect
- Account data: email, username, and optional profile fields (name, bio, photo, and similar display fields).
- Authentication data: sign-in provider data needed for account login and linking (email/password, Google, and Sign in with Apple via Firebase).
- Gameplay data: discovered sites, fossils, dinosaurs, tools, skills/XP, titles, walking distance, and related progress.
- Social data: friend and relationship state you create in the app.
- Location data: GPS coordinates while you use the map and, if you enable background exploring or document a site, while the app is in the background. We use this to show nearby sites, complete site documentation, and award walk XP.
- Motion and health-related data: walking distance from Apple Health / Health Connect and motion sensors to orient the map indicator, when you grant those permissions.
- Device and session data: auth tokens, push-notification tokens, and local preferences needed to run the app.
- Support content: questions you send to the in-app field assistant.
We do not collect payment-card details. The current version of Mesozoica does not sell in-app subscriptions.
2. How We Use Data
We use data to:
- operate accounts and sign-in;
- provide map discovery, site documentation, catalogs, tools, and progression;
- send optional push notifications you enable;
- support social features, moderation, abuse handling, and safety workflows;
- maintain security and prevent fraud;
- improve service quality and reliability.
We do not sell personal data.
3. Sharing and Visibility
- Your profile and collection are visible to other users only through features you use (for example friend relationships and public profile fields).
- Mesozoica personnel and authorized processors may access relevant content only for safety, abuse, legal, and support purposes on a need-to-know basis.
- We use third-party processors to operate the service, including hosting, authentication, maps, and push delivery. Those processors receive only what is needed to provide their service.
Notable processors:
- Firebase (Google) for authentication and push notifications;
- Mapbox for map tiles and location display;
- our hosting provider for the API, database, and media.
Location data is used for gameplay. We do not sell location data or use it for advertising.
4. Retention
We retain account and service data while your account is active, and for limited periods afterward as required by law, security, abuse prevention, backup, and legitimate operational purposes.
You can delete selected gameplay data or delete your account from Profile → Settings → Account.
5. Your Rights
Depending on your location, you may have rights to access, correct, delete, export, or restrict certain processing of your data. Contact contact@mesozoica.app for requests.
Public instructions for account and data deletion are also published at:
6. Security
We use reasonable technical and organizational safeguards (for example, encrypted transport, access controls, and role-limited admin access). No system is perfectly secure.
7. Children
Mesozoica is not intended for children under 13, or under the minimum age required in your country. If you believe a child has provided data unlawfully, contact us so we can investigate and take appropriate action.
8. International Transfers
The service may be hosted and processed in countries other than your own. Where required, we use appropriate safeguards for those transfers.
9. Changes
We may update this Privacy Policy to reflect legal, product, or operational changes. The "Last updated" date will be revised accordingly.
10. Contact
Privacy requests and questions: contact@mesozoica.app.