Privacy Policy

1. What we collect

• •Account details: your name, email address, country and profile photo.
• •Explorer activity: species you identify, quests you complete, XP, badges and VUNA tokens.
• •Content you publish: sightings, photos, captions and creator posts.
• •Bookings: the experience, date, guests, amount paid and the operator involved.
• •Technical data: device and browser type, approximate region, and pages visited.

2. Location and wildlife photos

If you add a location to a sighting, we store the park or reserve name so your passport and the conservation map can show where discoveries were made.

Photos you upload to the discovery flow are sent to our identification service to recognise the species, and are stored with your sighting. Please avoid uploading images of people who have not agreed to appear.

3. Payments

Card payments are processed by Stripe. VUNARA never sees or stores your full card number. We receive confirmation of payment, the amount, and the billing country so we can issue your booking and any refund.

4. Email and connected accounts

If you choose to connect Gmail or Google Calendar, we use that permission only to send your own booking confirmations from your address, or to add your quest deadlines to your own calendar. You can disconnect at any time and the permission stops immediately.

We send service email about your bookings, rewards and account. You can unsubscribe from non-essential email at any time.

5. How we use your data

• •To run your passport, quests, rewards and leaderboard position.
• •To take payment, confirm bookings and pay the operator.
• •To verify discoveries and keep reward systems honest.
• •To improve the platform and understand which experiences and species people care about.
• •To meet legal, tax and anti-fraud obligations.

6. Sharing

We share what is necessary with the operator of an experience you book, with our payment provider, our email and calendar providers, and our identification service.

Conservation partners receive aggregated, non-identifying data about discoveries and levies in their region. We do not sell your personal data.

Public parts of your passport — name, handle, country, level, badges — are visible to other explorers. Your email address and payment details are never public.

7. Keeping and deleting data

We keep account and booking records for as long as your account is open, and afterwards for as long as tax and accounting rules require.

You can ask us to delete your account and personal data. Some records — such as completed payment records — must be retained for legal reasons.

8. Your rights

• •Ask for a copy of the personal data we hold about you.
• •Correct details that are wrong.
• •Ask us to delete your account and data.
• •Withdraw a connected Gmail or Calendar permission.
• •Object to marketing email at any time.

9. Security

Access to your records is restricted so that only you and the platform administrators can see your private details. Payments are handled by Stripe over encrypted connections.

No service can promise perfect security. If we ever discover a breach affecting your data, we will tell you promptly.