Privacy Policy — BEEnet Mobile App

Last updated: May 31, 2026  |  App version: 2.6.8

This policy explains how WWF Romania Association (“WWF Romania”, “we”, “us”) processes personal data when you use the BEEnet mobile application (“the App”) on iOS and Android. BEEnet is part of the HiveFive / BEEnet nature and pollinator conservation programme.

This policy supplements WWF Romania’s general privacy notice: https://www.wwf.ro/confidentialitate/. For processing through this App, this policy takes precedence where they differ.

1. Data controller

WWF Romania Association
Address: Afi Tech Park 1, Floor 3, Tudor Vladimirescu Blvd. 29, Sector 5, Bucharest, 050881, Romania
Tax ID: 18742789
General email: [email protected]
Privacy email: [email protected]

2. What the App does

BEEnet lets you browse conservation content, identify plants from photos, sign petitions, save personal collections, manage an account, and send feedback to WWF Romania.

3. Data we collect

3.1 Account data

• Name, email, password (stored hashed), user ID, session tokens;
• Profile image URL when using Google or Apple sign-in;
• On iOS, auth tokens are stored in the device Keychain.

3.2 Plant identification

• Camera / photo library — only with your permission;
• Photos — sent to Pl@ntNet for identification; we do not store your original photo on our servers. See Pl@ntNet terms: my.plantnet.org/terms_of_use;
• Location — latitude, longitude, altitude from image EXIF or device location when needed;
• Saved results — species data, coordinates, and reference image URLs on https://beenet.wwf.ro (not your original photo).

3.3 Collections, petitions, feedback

• Bookmarks/collections linked to your account;
• Petition form fields submitted via our API to Gravity Forms on wwf.ro;
• Feedback including optional marketing consent.

3.4 Technical data

Limited server logs (e.g. IP, request metadata) for security and operations. We do not use third-party advertising or behavioral analytics SDKs in this App.

4. Legal bases (GDPR)

Contract performance, consent (petitions, marketing opt-in), legitimate interests (security, service improvement), and legal obligations where applicable.

5. Third parties

Hosting, Pl@ntNet, Wikimedia (species search), Google/Apple sign-in (if chosen), WWF WordPress/Gravity Forms, AWS SES (transactional email). International transfers use appropriate safeguards.

6. Retention

Account-related data until deletion or your request; technical logs for a limited period (typically up to 12 months).

7. Your rights

Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. In the App: edit profile, export data (email JSON), delete account. Contact: [email protected]. You may complain to the Romanian DPA (ANSPDCP): dataprotection.ro.

8. Changes & contact

We may update this policy; the current version will be posted at the same URL with an updated date. Privacy: [email protected] | Service: beenet.wwf.ro