AVAGA HOLDING AS, organization no. 829 544 482, is the data controller for Mycoverse. Its registered address is Onsøyveien 38, 1614 Fredrikstad, Norway. Privacy questions can be sent to rl@avaga.no.
In short
Mycoverse is a private mushroom journal. Findings, photos, notes and exact locations are available only to the account owner in version 1. We do not sell personal data or use it for advertising, profiling or cross-service tracking.
Data we process
- Email address, password-based sign-in and name are required to create and protect an account. Supabase provides authentication.
- Area and experience level are optional profile data.
- When you use the journal, we process the photo you select, date, personal name label, notes and location.
- Technical security and incident data may include time, IP address, device type, request and error information.
Purpose and legal basis
Account, sign-in, private journal, synchronization, export and account deletion are provided under our agreement with you (GDPR Article 6(1)(b)). Limited operational, error and security data is processed for our legitimate interest in securing and supporting the service (Article 6(1)(f)). Data may be retained where a legal obligation requires it (Article 6(1)(c)).
Camera, photos and location
Camera and photo access are used only when you choose to document a finding. Location is obtained when you request it or use a map feature that needs it. Permissions can be withdrawn in iPhone Settings. Mycoverse does not make automated decisions or provide safe species identification.
Providers and transfers
Production data is stored with Supabase in the EU. Maps on iPhone are provided by Apple Maps. Any necessary transfer outside the EEA must use a valid transfer mechanism, such as an adequacy decision or EU Standard Contractual Clauses.
Retention, export and deletion
You can export your data and delete findings, photos or your account from Profile. Account deletion removes active profile data, findings and stored photos. Deleted database data may remain in Supabase encrypted daily backups for up to seven days; stored photos are not included in those database backups. Security and support data is deleted or anonymized within 30 days unless an ongoing incident or legal requirement applies.
Your rights
You may request access, correction, deletion, restriction and data portability, object to processing based on legitimate interests, and complain to the Norwegian Data Protection Authority. Contact rl@avaga.no.