Effective Date: May 2026 | Last Updated: August 3, 2026
Mancs ("we," "our," "us," or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.
Mission: Mancs helps animals through community reporting of lost/injured animals, shelter discovery, and transparent monetization. We believe privacy and safety go hand-in-hand.
Where the GDPR applies, we rely on the following legal bases:
| Purpose | Data | Legal Basis (Art. 6 GDPR) |
|---|---|---|
| Account creation, sign-in, and providing the service | email, name, credentials | Performance of a contract — Art. 6(1)(b) |
| Publicly displaying animal reports and coordinating community rescue | report content, location, photos, display name | Legitimate interests (animal welfare, public safety) — Art. 6(1)(f); and Art. 6(1)(b) for the reporting user |
| Push notifications | device token | Consent — Art. 6(1)(a) |
| Analytics | usage events, device identifier | Consent — Art. 6(1)(a) |
| Personalized / non-personalized advertising | ad identifier, interactions | Consent (UMP/ATT) — Art. 6(1)(a) |
| Marketing email | Consent — Art. 6(1)(a) | |
| Security, fraud, and abuse prevention | logs, IP address | Legitimate interests — Art. 6(1)(f) |
| Legal compliance (e.g., tax, lawful requests, child safety) | data required by law | Legal obligation — Art. 6(1)(c) |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. Where we rely on legitimate interests, you may object (see Section 6).
Animal reports (including location, photos, and descriptions) are publicly visible on the map by design—the core feature of Mancs is community visibility. Your display name and profile picture appear alongside your reports. If you do not wish to share location data, do not submit a report or disable location services before reporting.
We share data with the following services to operate the app:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Supabase (Backend) | Database, auth, storage, functions | All user data, photos, reports, profile info | supabase.com/privacy |
| Google Cloud (Maps, Analytics, AdMob) | Map display, usage analytics, ad serving | Location (map queries), session events, ad ID | Google Privacy Policy |
| Firebase Cloud Messaging (FCM) | Push notifications | Device token, notification payload | Firebase Privacy |
| Firebase Analytics | Usage analytics, crash reporting | Session events, app crashes, page views | Firebase Analytics Privacy |
| Sentry (Error Tracking) | Crash and error reporting | Stack traces, app logs, device info (no PII) | Sentry Privacy Policy |
| OpenStreetMap / Leaflet | Map tiles, geolocation | Map view coordinates, zoom level | OSM Privacy Policy |
| OAuth Providers (Google, Facebook) | Social login | Email, name, profile picture (during login only) | Google, Meta |
We may disclose your information if required by law, subpoena, court order, or government request. We will attempt to notify you of such requests unless legally prohibited.
If Mancs is acquired, merged, or its assets are transferred, your information may be transferred as part of the transaction. We will provide notice of any such change.
Some processors (for example, Google/Firebase and Sentry) may process data outside the European Economic Area, including in the United States. Where this happens, the transfer is safeguarded by an appropriate mechanism: a European Commission adequacy decision (such as the EU–US Data Privacy Framework) and/or the Commission's Standard Contractual Clauses (SCCs) with supplementary measures where needed. You can request details of these safeguards by emailing us.
| Data Type | Retention Period | Reason |
|---|---|---|
| User Account | Until deletion | You can request account deletion anytime |
| Animal Reports | 5 years | Legal hold for evidence; case follow-ups |
| Profile Information (name, avatar, bio) | Until deletion | Display on reports and public profile |
| Analytics & Crash Logs | 90 days | Performance monitoring and debugging |
| Advertising Data (ad ID, interactions) | 30–90 days | Per Google AdMob and platform policies |
| IP Logs & Access Logs | 30 days | Security and abuse prevention |
If you are in the EU or UK, you have the following rights:
If you are a California resident, you have the following rights under CCPA:
To request access, deletion, correction, or portability of your data:
You can delete your account anytime through the Settings → Account → Delete Account. This will:
If you believe our processing of your data infringes your rights, you may lodge a complaint with a data protection supervisory authority. In Hungary, this is:
You may also seek a judicial remedy, or contact the supervisory authority in your country of residence.
We do not make decisions producing legal or similarly significant effects about you based solely on automated processing (GDPR Article 22). Content moderation may use automated flagging, but meaningful actions involve human review.
On iOS 14.5+, we request permission via the system ATT prompt before tracking you across apps. If you deny this permission, we will not use your IDFA for cross-app tracking. We may still use analytics and ads within the Mancs app.
On Android and web, we display a consent form on first launch (if required by your region). You can:
If you access Mancs through a web browser, we may use cookies for:
You can disable cookies in your browser settings. This may limit app functionality.
You can change your consent preferences anytime in Settings → Privacy → Tracking or by re-displaying the UMP consent form.
We implement industry-standard security measures to protect your information:
Disclaimer: No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential. If you believe your account has been compromised, contact us immediately.
Mancs is not directed to children. Within the European Economic Area (EEA), you must be at least 16 years old to consent to the processing of your personal data (GDPR Article 8); elsewhere, the minimum age is 13. We do not knowingly collect personal data from children below these ages. If we become aware that we hold such data, we will delete it promptly.
For California Users (COPPA): If you believe a child under 13 has an account, please contact us at szakika1997@gmail.com.
Over the past 12 months, we have collected the following categories of personal information:
We limit the use of sensitive personal information (precise location, biometrics) to:
We do not sell or share your personal information with third parties for their independent use. We share information only with service providers who help operate the app (see Section 4.2).
We may update this privacy policy periodically as we add features, comply with new regulations, or change our practices. We will notify you of significant changes by:
Your continued use of the app after changes means you accept the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: