Locality is a climate and husbandry app for keepers of reptiles, amphibians, and invertebrates, operated by The Nocturne Collective (a sole trader business), based in the United Kingdom. For the purposes of UK GDPR, we are the "data controller" for the information described here.
If you have any questions or want to exercise your rights, contact us at locality@thenocturnecollective.co.uk.
The short version
We collect the minimum needed to run your account and your animals' records.
We do not use third-party analytics or advertising, we do not track you across other apps or websites, and we never sell your data.
You can use most of the app with no account at all.
You can delete your account and its data from within the app at any time.
What we collect
If you create an account (optional):
Your email address and a password (stored securely and hashed by our authentication provider; we never see your plaintext password).
Optional profile details you choose to add: your name and a "home location" (a place name you type, which we convert to approximate coordinates to power features like your home greeting and future climate comparisons).
An optional country (two letters, e.g. GB) that you choose from a list. This is separate from the home location above, is never worked out from it, and is used for one purpose only: showing you the invasive-species and legal rules that apply where you keep your animals. Leave it unset and we show you nothing about them.
Your keeper preferences (hemisphere, temperature and length units, experience level, and similar settings).
If you track animals (requires an account):
Animal records you create: species, sex, dates, whether an entry is one animal or a group kept together, enclosure setup, and your logs (feeding, weight, enclosure readings, sheds, moults, and population counts for a group).
Photos you add to an animal. These are uploaded to your account so they follow you to a new device.
Automatically, to make the app work:
Basic technical data such as your device's IP address, which is inherently visible to the services that deliver maps and climate data to your device (see "Who we share data with").
Local app data stored on your device (settings and a cached copy of your animals) so the app is fast and works offline.
We do not collect precise background location, contacts, or any advertising identifiers.
How we use your information
To provide the app: create and secure your account, save and sync your settings and animal records across your devices.
To send you essential service email, such as password-reset codes. We do not send marketing email.
To provide climate and map features by requesting data from the third-party services listed below.
To show the invasive-species and legal information relevant to your country, if you have chosen to give us one. This happens on your device from a list built into the app: your country is not sent anywhere for this purpose.
To keep the app working, prevent abuse, and fix problems.
Legal bases (UK GDPR)
Performance of a contract — to give you the account and features you ask for.
Legitimate interests — to keep the service secure, reliable, and improving, in a way that doesn't override your rights.
Consent — where you optionally add details like your name, home location or country. You can remove these at any time.
Who we share data with
We use a small number of trusted service providers ("processors") to run the app. We share only what each needs, and none of them are permitted to use your data for their own purposes.
Supabase — hosts our database and authentication; stores your account, profile, and animal records.
Resend — sends our emails; receives your email address to deliver them. This covers account emails such as password-reset codes and account confirmations, and, if you joined the waiting list, emails about testing and about the app's release.
Tally — hosts the waiting list sign-up form; stores the email address you entered there. This applies only if you joined the waiting list, and not to using the app.
Mapbox — renders the maps shown on species pages; receives map requests from your device (including your IP address) but not your account data.
Open-Meteo — provides historical climate data and converts location searches to coordinates; receives the location text or coordinates you look up.
We do not share your data with advertisers or data brokers, and we do not sell it.
Where your data is stored and international transfers
Your account and animal data are stored by Supabase in the European Union. Some providers (for example email delivery) may process data outside the UK. Where that happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
How long we keep it
We keep your account and animal data for as long as your account exists. If you delete your account, we delete your associated personal data from our systems, except anything we're legally required to retain. Locally cached data on your device is cleared when you sign out.
Your rights
Under UK GDPR you have the right to: access your data; correct it; delete it; restrict or object to processing; and data portability. You can do much of this directly in the app (edit your profile, delete your account). To make any other request, contact us at locality@thenocturnecollective.co.uk. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.
Deleting your account
You can delete your account and its data from within the app. Deletion removes your account, profile, and animal records from our systems.
Photos
Animal photos you add are uploaded to your account and stored in a private area of our storage, filed under your user ID. They are not public, they are not shared with anyone, and they are not used for anything except showing you your own animals. The app fetches them using short-lived links that expire after an hour, rather than through a permanent public address.
This changed on 16 August 2026. Before that date photos stayed on your device only, and this policy said so. They now sync, because the app told keepers their animals survive a change of phone and their photos did not, which was not true enough. Photos saved before that date stay on the device that took them until you replace them.
Deleting an animal deletes its photos. Deleting your account deletes all of them.
Children
Locality is not directed at children under 13. If you are under this age, please do not create an account. If you believe a child has provided us with personal data, contact us and we will delete it.
Security
We use reputable providers and standard measures (encryption in transit, hashed passwords, access controls) to protect your data. No system is perfectly secure, but we take reasonable steps to keep your information safe.
Changes to this policy
We may update this policy as the app evolves. We'll change the "Last updated" date and, for significant changes, tell you in the app.
Contact
The Nocturne Collective — locality@thenocturnecollective.co.uk