Privacy

Version of 28 Oct 2026. Working draft – to be reviewed by a lawyer before release.

Who processes the data

The controller is the operator of the WildBadges app. Contact details are listed with the app on Google Play and the App Store.

What data we process

About parents and leaders: email and password (stored only in encrypted form), the list of children they can access.

About the child: a nickname (not the real name), an animal picture, date of birth, completed and submitted tasks including answers, notes and photos, earned badges and approval history. The child has no email or password. The region where the child lives (required – for the weather in the header and region statistics without names); the phone's location is never used.

About the phone: a notification token, time zone and language – only if you allow notifications.

Why we process it

So that the child can complete tasks and collect badges and a parent or leader can approve them. The date of birth is used only to place the child in the Cadet or Ranger group. We do not use the data for advertising or profiling and we do not sell it.

Parental consent

The child’s data is stored only after a parent (legal guardian) gives consent when adding the child. Consent can be withdrawn at any time by deleting the child in the app.

Where the data is stored

In the Amazon Web Services cloud in the European Union (Frankfurt). Notifications are delivered by Expo, on Android via Google Firebase Cloud Messaging (it receives only a technical device identifier and the notification text, no other data about the child). Only the child’s parents and approved leaders can see the data. Weather for the chosen region is fetched by our server from MET Norway (yr.no); it receives no data about the child or their phone. Friends (added in person via QR code and only with the consent of both children's parents) see only the nickname, animal picture, level and earned badges – no answers, photos, age or location. A parent can remove a friend at any time.

How long we keep it

The child’s data until the child or the last parent’s account is deleted. Task photos are deleted automatically after 90 days. Temporary pairing codes are deleted within an hour.

Your rights

You have the right to access, correct, export (“Download child data” button) and delete the data (“Delete child” and “Delete my account” buttons), to restrict processing and to withdraw consent. You can also lodge a complaint with your data protection authority.