Privacy Policy

Last updated: October 27, 2026 (draft)

This draft describes how MYCORAE currently works. It is being reviewed before launch.

Who we are

MYCORAE is a community for people who grow, forage, cook, photograph and study mushrooms. This policy explains what information the app collects, how it is used and the choices you have.

Questions about privacy can be sent to braxolson16@gmail.com.

Information you give us

Account details: your email address and password (passwords are handled by our sign-in system and are never visible to us), or your basic Google account details if you continue with Google.

Profile details: username, display name, profile photo, bio, an optional location you type in, and the interests you choose.

Content you share: posts, photos, titles, captions, locations you add to posts, hashtags, linked species, comments and replies.

Activity: likes, saved posts and species, follows, community memberships, blocks and reports you file.

Identification requests: the photos and notes you submit to the Identify tool and the results you save.

What is public and what is private

Public: your profile (username, display name, photo, bio, location if you add one, interests), your posts and their photos, your comments, likes, follows and community memberships. Anyone, including people who are not signed in, can see these.

Private to you: your email address, saved items, identification history and identification photos, notifications, the people you have blocked and the reports you have filed.

Moderators can see reports and the content they concern in order to review them.

How we use information

To run the app: show your profile and posts, build feeds, send notifications about likes, comments, replies, saves and follows, and keep you signed in.

To send account emails such as sign-up confirmation and password reset.

To keep the community safe: review reports, enforce blocking and remove content that breaks our guidelines.

To provide AI identification suggestions when you use the Identify tool.

We do not sell your personal information. The app does not currently include advertising or third-party analytics trackers.

Services that process data for us

Hosting, database, sign-in and photo storage are provided through Lovable Cloud.

Account emails are sent through Lovable's email service from our mycorae.com sending address.

When you use Identify, your photos and notes are sent to an AI model through the Lovable AI Gateway to generate a suggestion.

If you continue with Google, Google shares your basic account details with us under Google's own privacy policy.

To confirm: the exact data-storage locations and each provider's own retention terms.

Photos

Photos you attach to posts or use as your profile photo are visible to anyone who can see that post or profile.

Identification photos are private and are only available to your account.

When you upload a photo, the app removes the hidden information your camera may store in it, including GPS location, camera details and the time it was taken, before the photo is saved. Anything visible in the picture itself, such as landmarks, can still reveal where it was taken. Photos uploaded before this change may still contain this information.

Keeping and deleting your information

You can delete your own posts, comments, saves, follows and identification records at any time from within the app.

In-app account deletion is being prepared and is not available yet. Until it is, you can ask us to delete your account by emailing braxolson16@gmail.com from the address on your account.

Reports and moderation records may be kept after content or an account is removed, where needed to protect the community. To confirm: final retention periods for these records.

To confirm: how long backups are kept by our hosting provider.

Your choices

You can edit your profile, choose what to post, remove content you have shared, block other members and adjust what you share publicly.

Depending on where you live, you may have rights to access, correct or delete your personal information. Contact us to make a request.

To confirm: whether specific regional privacy laws (for example GDPR or US state laws) apply, and any age requirement for using MYCORAE.

Changes to this policy

We may update this policy as MYCORAE changes. We will update the date at the top of this page when we do.