On your device
Fieldkin stores videos recorded without a microphone, thumbnails, dates, identification suggestions, receipts, progress and notes in its local storage. You can add a place as free text. The app does not automatically collect your location in this flow, and this place is not sent to the identification provider. Any coordinates from older captures remain local and approximate. The app does not provide public social accounts or messaging.
Video challenge and analysis
The service issues a movement challenge valid for ten minutes. After you consent, the MP4 clip, up to 16 MiB, is sent over HTTPS to the Fieldkin service. It is decoded in a private temporary directory and deleted after processing, including on error. An abrupt process shutdown may leave a temporary file until the hosting system cleans it up.
Four JPEG images are re-encoded without metadata and sent to Anthropic (Claude) for identification, movement checks and Professor Hazel's field note. Anthropic does not receive the full clip, your location, your notes or your installation identifier. Temporary images and processing files on the Fieldkin server are deleted after processing, including on error; an abrupt shutdown may leave temporary files until the hosting system cleans them up.
Anthropic may process these images outside the European Economic Area. Its retention and possible use of inputs and outputs to improve models follow the applicable Anthropic policies and account data settings. Fieldkin does not guarantee zero retention or exclusion from model training by Anthropic. Deleting temporary files or remote analyses from Fieldkin does not itself delete data held by Anthropic. See the Anthropic privacy policy. Avoid faces and personal documents. No video is sent without your consent.
Receipts and protection against reuse
Normalized results, request identifiers, receipts and cryptographic fingerprints are retained for thirty days. They allow the service to verify an analysis and reject reuse of the same clip. The database stores no videos or images. Requests made through the older single-image service expire after twenty-four hours. Cleanup may take up to one additional minute.
A random installation identifier, a hash of its secret and technical dates persist until you request deletion. A daily fingerprint of the IP address limits abuse without storing the plain IP address in the application database. Network and global counters expire at the end of their periods.
The service limits analysis to three per day per installation and network, and one hundred provider attempts globally per day. These limits and provider availability may prevent an analysis. A rejected or uncertain attempt does not become a verified capture. The checks can be wrong and do not guarantee that cheating is impossible.
Sharing and deletion
You choose what to share through your phone's share sheet. Deleting a capture removes its entry and media from the local collection. Copies you have already exported, temporary files created by the sharing plugin and system backups are separate; this command does not guarantee their deletion everywhere.
"Delete remote analyses" deletes the installation and its associated receipts and results. Network and global counters remain until they expire. A new request may create a new installation. Resetting local data does not delete remote data.
Automatic backup is disabled on Android. iOS may include data in a system backup depending on your settings. No cloud synchronization of the collection is provided.
Purchases
In builds with purchases enabled, Apple or Google processes the payment. RevenueCat starts when the app opens to check access and retrieve available offers. We do not receive your card number. RevenueCat verifies and restores purchased access and provides purchase statistics for the service. It may process an anonymous identifier created by its SDK, purchase history and status, and technical information about the app and device.
Fieldkin does not send your notes, videos, goals or journals to RevenueCat. The RevenueCat identifier is separate from the identifier used by Fieldkin's analysis service. The stores and RevenueCat retain their own data according to their policies and obligations. Erasing app data does not remove an invoice held by Apple or Google.
See the privacy policies of RevenueCat, Apple and Google. No purchase is enabled unless the store provides a valid offer.
Version 1.3 has no active purchase flow. Builds offering Plus add extended local reports and a readable text export. Your existing journal, core tools and standard data export remain free.
Product measurement
From version 1.5.1, the app sends anonymous usage events to the Fieldkin service so we can see which steps work and which ones fail. They describe what happened, never what you recorded: app opening and session length, the welcome screen, whether the Plus offer was shown and the outcome of a purchase attempt (including the store's error code), starting and finishing a clip, whether an analysis was accepted with its reason code and broad group such as bird or plant, a new catalogue entry and the use of "Report this note".
Each event carries a random identifier created by the app on first launch, separate from the analysis installation identifier and from the RevenueCat identifier, plus the platform, app version, interface language, whether the app came from a store, and the time. Events contain no video, image, species name, note, place, location, account, advertising or device identifier. Your network address is used only for the rate limits described above and is not written with the events.
Events are kept in daily files on our server for up to 180 days, then deleted. They are used only to measure and improve Fieldkin, are not sold, not used for advertising and not shared with third parties. Uninstalling the app removes its identifier. Because this identifier is not linked to you, we cannot retrieve your events from your name or email address.
Purposes and your rights
Captures are processed to provide the feature you request and are transmitted after your consent. Fingerprints and quotas protect the service against abuse. Anonymous product measurement relies on our legitimate interest in keeping the app working and improving it.
Victor Laybats is your contact for this processing: contact@victorlaybats.com.
You can request access, correction, erasure or restriction and, depending on the applicable legal basis, portability or object to processing. You can withdraw your consent to optional features without losing access to the core app. Withdrawing consent does not undo processing that has already taken place.
Include the app name and your request, without attaching a personal journal, video or installation secret. We cannot remotely read data that remains only on your phone. You can also complain to the CNIL or your local data protection authority.
This website and support
These pages do not install advertising tools or tracking cookies. The hosting service processes technical information needed to deliver the pages. A support email shares your email address and its contents; do not attach private videos or secrets unnecessarily.