Privacy notice

Last updated: 8 November 2026

Who is responsible

Fungelo is run by MCO, spletno svetovanje, Marko Humar s.p., Podrgrajsova ulica 8, 2000 Maribor, Slovenia. We are responsible for your personal data in Fungelo (the "controller"). For anything about your data, write to hello@fungelo.app.

In short

• You can use Fungelo without an account. The map, the scores and My places all work without one.
• An account is optional. It holds your email address and your sign-in records. There is no password.
• Places you save in My places, your saved areas and your visit records stay on your phone. They are not part of your account.
• If you are signed in, you can choose to send a visit to us as a field report: the date, what you found, how long you searched and the named area. Never your exact position.
• You can delete your account in the app at any time.
• We do not sell your data. Fungelo has no advertising and no analytics trackers.

Using Fungelo without an account

Without an account, Fungelo keeps no personal data about you on its servers. The only record is the technical request data in our hosting provider's logs, described under "Hosting" below.

On your device. My places, saved areas, visit records and your settings are kept in your browser's storage on your phone. We cannot see them. If you delete the app or clear the site's data, they are gone.

Your location. When you use "Use my location", your phone works out the area. Your exact position never leaves your phone.

Determining your free country. Without an active subscription, Fungelo determines which country's mushroom-activity information is available to you for free. Depending on how you use Fungelo, the country is determined from the country of your connection on the website, your Google Play country where it is available through RevenueCat when you are signed in, or your device's region setting in the app. Fungelo stores the resulting country only on your device; the underlying country signal is not stored by Fungelo for this purpose (our hosting provider's request logs and RevenueCat's records are described in their own sections below). You can change your free country once.

Field reports. After you log a visit, the app may ask whether to send it as a field report. Without an account, nothing is sent to us: your records stay on your phone. Field reports from signed-in users are described below.

Hosting. Fungelo and fungelo.app are served by Cloudflare. Like any website, Cloudflare receives technical data with each request: the time, the address requested, and details about your browser and network, including your IP address. Cloudflare's Workers Logs keep this data for 3 days. We use it only to run the service and fix faults. The website also works out from your connection which country you are in, only to show whether the subscription is available there, to suggest that country as your billing country when you subscribe and to first set your free country, without storing it. The sign-in form and the cancellation page also use Cloudflare Turnstile to check that a person, not a script, sends the request. Turnstile processes technical data about your browser and device, including your IP address, for that check; Cloudflare also uses such data to improve its detection of bots. Legal basis: our legitimate interest in running a secure, working service and protecting it from misuse (Article 6(1)(f) GDPR).

What the app asks our server for. The addresses in these logs show which files the app loaded. A country's or a region's data names that country or region, and a day's conditions name the date and the country. When you open a saved place, an alert or a link to an area whose region your phone does not know yet, the app asks our server which region the area belongs to (/api/area/ followed by the area's id) and then loads that region. Cloudflare's logs keep these addresses, like the rest of the request data, for 3 days. When you search for a place, the text you type goes to our server (/api/search) inside the request, not in its address, so it is not in these logs; our server uses it only to find matching places and does not store it.

Map tiles. Your phone loads the base map from OpenFreeMap and the terrain shading from Amazon Web Services (public terrain tiles). These services receive your IP address and which parts of the map you look at. They are not our processors; their own privacy policies apply.

Checking for a newer version. The Android and iPhone apps ask Google Play or the App Store whether a newer version of Fungelo exists. Google or Apple receive that request from your phone with your device's IP address, the app's identifier and the usual technical details of a request; on Android, Google Play handles it as part of its own service for the Google account on the phone. Fungelo receives nothing from it. Their own privacy policies apply. The web app does not do this.

Using Fungelo with an account

An account is for people aged 15 or over.

What we collect

• Your email address. We need it to send you the sign-in code and to recognise your account.
• The language of your emails. Slovenian, English, German, Czech, Slovak, French, Croatian, Dutch, Polish, Danish or Italian, the language you use the app in, so the sign-in code comes in it.
• Your consent at sign-up. That you agreed to the terms of service and this notice and confirmed being at least 15, with the date and the version of the terms, so we can show it and ask again when the terms change.
• Sign-in records. When you signed in and which sessions are active, so you stay signed in. For security, our account provider also logs sign-in events with your IP address and browser type.
• If you choose Google sign-in: Google sends us your Google account ID, your name, your email address and the address of your profile picture. We use only your email address: the name and the picture address are removed as you sign in and never stored. Google also learns that you signed in to Fungelo; Google's privacy policy applies to that.
• If you choose Sign in with Apple: Apple sends us an ID for your Apple Account that Apple makes for Fungelo, and your email address. In the iPhone app, Fungelo asks Apple only for your email address, not your name. If you choose Apple's "Hide My Email", Apple gives us a private relay address (ending in @privaterelay.appleid.com) instead of your real one and forwards our emails to you; we registered our sending addresses with Apple so that the sign-in code and our replies reach you. We use only the email address. Apple also learns that you signed in to Fungelo; Apple's privacy policy applies to that.

If you subscribe. Payment happens on Stripe's own pages; we never see or store your card details. We keep only which Stripe customer belongs to your account, the state of your subscription (for example active or cancelled) and the end of the paid period. Stripe holds your email address, your billing country and the address details needed to work out VAT, your payment method, your subscription and your invoices, together with your Fungelo account ID, the time you asked for access to start at once (terms, section 6) and the billing country you chose in the app (the subscription is sold in the countries the app shows; currently Austria, Belgium, Croatia, Czechia, Denmark, Germany, Luxembourg, the Netherlands, Poland, Slovakia, Slovenia and Switzerland).

If you subscribe in the Android app. There you subscribe through Google Play: Google takes the payment under its own terms, and we never see your card details. So that the subscription belongs to your Fungelo account, and also unlocks Fungelo on the web, the app gives RevenueCat, the service that checks app-store subscriptions for us, your Fungelo account ID (a random code, not your email address). RevenueCat receives from Google the record of your purchase (the product, purchase and renewal dates, renewals, cancellations and refunds, the country and price) and, from the app, basic technical data (app and system version, language, IP address). When you are signed in, the app also reads your Google Play country through RevenueCat to first set your free country. We keep only the state of your subscription and the end of the paid period, as with Stripe. You manage or cancel the subscription in Google Play.

If you subscribe in the iPhone app. Once the subscription is offered in the iPhone app, you subscribe there through the App Store: Apple takes the payment under its own terms, and we never see your card details. As in the Android app, the app gives RevenueCat your Fungelo account ID (a random code, not your email address), and RevenueCat receives from Apple the record of your purchase (the product, purchase and renewal dates, renewals, cancellations and refunds, the country and price) and, from the app, basic technical data (app and system version, language, IP address). We keep only the state of your subscription and the end of the paid period. You manage or cancel the subscription in your Apple Account's subscription settings, and refunds are requested from Apple.

If you cancel on the cancellation page. On our cancellation page you can cancel a subscription without signing in. We record your cancellation: the email address you give, the account with that address (if there is one), whether the cancellation is ordinary or extraordinary, the reason you give for an extraordinary one, when we received it, and what we did (for example that a subscription bought on the web was set to end). We send the confirmation to that address; an extraordinary cancellation also comes to us at hello@fungelo.app. We keep the record as proof of your cancellation, and the reason for an extraordinary one only for 6 months. An ordinary cancellation needs no reason; for an extraordinary one, please do not include health or other sensitive details. To keep the page from being misused, we also keep a scrambled form (a hash) of the IP address of your connection, only to count how many cancellations and confirmations come from it; we delete it after 24 hours. If your first payment was less than 14 days ago, the confirmation email has a link to get that payment back; the link holds a signed code that names your subscription and account, and works for 7 days.

Renewal reminders. If you subscribed on the web, we email you 45 and 30 days before each yearly renewal, with the date, the amount and how to cancel. Stripe also sends you its own reminder 7 days before the renewal. We record which reminders we sent for which renewal, so that each goes out once.

If you turn on alerts. With the subscription you can ask for a notification when a named area you follow reaches High, for any mushroom type or for the types you choose. We store which areas and types you chose, and for each phone or browser where you turn notifications on, its push address (in the Android and iPhone apps a token from Google's Firebase Cloud Messaging, which on the iPhone delivers through Apple's push service; in a browser a Web Push address from your browser) and the app's language. After each daily update, an alert is queued when an area you follow has just reached High; it is sent at a random time within 90 minutes, at most once a day per area and never between 22:00 and 06:00. The notification names the area and the mushroom type; it carries no score and nothing about your account. Your phone works out nothing about your position for this: the areas are the ones you chose. You can pause or remove alerts in Profile → Alerts; signing out removes the device you sign out on, and in the apps also deletes that phone's Firebase token.

Conditions resemble your find. With the subscription, the app can tell you when an area's conditions today are close to those on the day of a find you recorded there. The comparison happens on your phone. To make it, the app downloads the day's conditions for the days of your finds: such a request names only a date and a country, never the area, what you found or your spot, and the file is the same for everyone who asks for that day and country. Nothing about it is stored on our servers. For "How the estimates matched your visits" the app asks the same way for the activity estimates of the days of your visits: such a request also names only a date and a country, and the app finds your visit's area in that file on your phone.

If you send field reports. Signed in, you can choose to send a visit to us as a field report. The app asks before the first one, and you can keep every visit private. A report contains: the date of the visit, whether you found anything, the species you ticked with a rough count (for example 4-10), how long you searched, the named area (for example Areh) and whether your phone worked out the area or you chose it. We also record when it arrived (after 30 days, only the day) and how many days old your account was. A report never contains your exact position, the pin of a place in My places, notes or photos. Your phone works out the area itself; your position never leaves it.

The report is linked to your account on our server, so that we can count each person once, limit misuse (at most 10 reports a day) and, later, recognise regular contributors. Other users never see who sent a report, and we never publish single reports: anything shown on the map will be computed from many people's reports. Only the part of our system that computes these results can read reports; the app cannot read them back.

We do not collect a password, your exact location, or the places you save.

Why we use it, and on what legal basis

• To create and run your account, and to sign you in: this is needed to provide the account you asked for (Article 6(1)(b) GDPR, contract).
• To keep accounts secure (sign-in logs, limits on attempts): our legitimate interest in preventing misuse (Article 6(1)(f) GDPR).
• To sell and run your subscription (payment, renewal, cancellation, access to paid features), through Stripe on the web, Google Play and RevenueCat in the Android app, or, once offered there, the App Store and RevenueCat in the iPhone app: this is needed for the contract you enter (Article 6(1)(b) GDPR).
• To send the alerts you set up, to the devices where you turned notifications on: this is needed for the feature you asked for, part of the subscription (Article 6(1)(b) GDPR).
• To receive and confirm a cancellation and carry it out: needed for the contract (Article 6(1)(b) GDPR), and for a subscription bought on our website by a consumer in Germany also a legal obligation (Article 6(1)(c) GDPR; BGB § 312k). To keep proof of it afterwards (when it arrived, what was asked and what we did): our legitimate interest in showing this if it is ever disputed (Article 6(1)(f) GDPR).
• To remind you before a yearly renewal: the first reminder, 45 days ahead, is needed for the contract (Article 6(1)(b) GDPR) and, where a country's law requires a notice before an automatic renewal (for example France), a legal obligation (Article 6(1)(c) GDPR); the second, 30 days ahead, is our legitimate interest in helping you decide in time (Article 6(1)(f) GDPR). Both are information about your subscription, never advertising.
• To keep invoices and payment records as tax and accounting law requires: a legal obligation (Article 6(1)(c) GDPR; the Slovenian VAT Act, ZDDV-1).
• To use the field reports you choose to send for checking and improving Fungelo's activity estimates and, later, for showing what others found nearby (always combined from many people): your consent, given when you choose to send (Article 6(1)(a) GDPR). You can stop at any time by keeping visits private; to remove reports you already sent, delete your account or write to us.

We use your email address only for sign-in and for messages about your account. We do not send newsletters or marketing.

On your device. While you are signed in, your session is kept in your browser's storage (fungelo.auth), so you do not have to sign in every time. Where you turned on notifications, the device's push address is kept there too (fungelo.push), so signing out can remove it. Signing out removes both. Fungelo uses no cookies for this.

Who processes your data for us

We have data processing agreements with these services.

Your browser's push service delivers alerts to a browser where you turned notifications on (Google for Chrome, Mozilla for Firefox, Apple for Safari). The notification is encrypted on its way (Web Push), so the push service cannot read it; it sees the push address and when a message is sent.

Google is involved if you choose Google sign-in, and if you subscribe in the Android app: Google Play sells the subscription and takes the payment under its own terms. For your Google account and Google Play purchases, Google decides itself how it uses your data; Google's privacy policy applies.

Sign in with Apple. If you choose to sign in with Apple, Apple processes personal data as part of its sign-in service and gives Fungelo an identifier for your Apple Account and the email address you allow it to share (with Hide My Email, a private relay address through which Apple forwards our emails to you). Apple acts under its own privacy arrangements for its processing; Fungelo is responsible for the data it receives and then processes. Apple states that Apple Distribution International Limited in Ireland controls personal data of people in the EEA and that its international transfers of such data are governed by the EU standard contractual clauses.

Alerts in the iPhone app. If you turn on notifications in the iPhone app, Google's Firebase Cloud Messaging delivers our alerts to your iPhone through Apple Push Notification service (APNs). This uses your phone's push token, and the notification (the area and the mushroom type) passes through Apple's service. Apple processes this data under its own terms and privacy arrangements, and states that its international transfers of personal data collected in the EEA are governed by the EU standard contractual clauses.

The App Store. Once the subscription is offered in the iPhone app, the App Store sells it and takes the payment under its own terms. For your Apple Account and App Store purchases, Apple decides itself how it uses your data; Apple's privacy policy applies.

Downloading the app. When you download Fungelo from Google Play or the App Store, Google or Apple processes your data as an independent controller, under its own terms and privacy policy.

How we protect your data

• Encrypted connections. Everything the app and the website exchange with our servers and with our account provider travels encrypted (HTTPS with TLS).
• Access to the database. Only we manage the account database. The parts of our system that run outside our account provider, such as the daily update that queues alerts, have their own access, limited to what that task needs.
• Each account sees only its own data. The database's access rules (row-level security) let a signed-in account read only its own records, such as its subscription state and its alerts. Field reports, payment links and cancellation records cannot be read from the app at all.
• Backups. Our account provider backs up the database every day and keeps each backup for up to 7 days. A deleted account can remain in a backup until that backup is replaced.

Transfers outside the EU

Resend and RevenueCat store data in the United States. Stripe may process payment data, and Google's Firebase Cloud Messaging alert deliveries, in the United States. Supabase, a Singapore company, and Cloudflare, a US company, may access data from outside the EU, for example for support. These transfers are protected by the EU standard contractual clauses and, where the company is certified, the EU-US Data Privacy Framework. Apple's own processing for Sign in with Apple and alerts on the iPhone is described above.

If you live in Switzerland. Your data goes from Switzerland to us in Slovenia and to the services listed above: Supabase stores it in Germany, Stripe Payments Europe in Ireland, and Resend, RevenueCat and Stripe in the United States; Cloudflare and Google's Firebase Cloud Messaging may process it in the other countries where they run servers. Switzerland recognises the EU and EEA countries as giving adequate protection (Swiss Data Protection Ordinance, Annex 1). For the other countries, our data processing agreements with these services cover transfers from Switzerland: they apply the EU standard contractual clauses with changes for Swiss law, or name the Swiss Federal Act on Data Protection, and give the Swiss Federal Data Protection and Information Commissioner as the supervisory authority where those clauses apply (Swiss Federal Act on Data Protection, Article 16(2)(d)).

How long we keep your data

Deleting your account

In the app: Profile → Account and subscription → Delete account. If you have a subscription, it is cancelled first and does not renew, also one bought in Google Play, and your data at RevenueCat is deleted. Once the subscription is offered in the iPhone app: Apple does not let us cancel a subscription bought in the App Store, so cancel it yourself in your Apple Account's subscription settings before you delete your account. Paid access ends at once; within 14 days of your first payment you get your money back (for an App Store purchase, a refund is Apple's decision), otherwise there is no refund for the rest of the paid year (terms, section 7). This deletes your account straight away: your email address, sign-in records, sessions, your Google or Apple link if you used Google or Apple, the field reports you sent, your alerts and your devices' push addresses, and anything recorded about payments. Places, saved areas and visits on your phone stay on your phone. Copies in backups and logs expire as listed above. Invoices stay at Stripe as the law requires (see the table). You can also ask us by email to delete your account.

Your rights

Under the GDPR you have the right to:

• access your data and get a copy;
• rectification, if something is wrong (to change your email address, write to us, or delete the account and sign in with the new address);
• erasure (deletion), in the app or by email;
• restriction of processing;
• data portability: receive your account data in a common machine-readable format;
• object to processing based on our legitimate interest.

To use these rights, write to hello@fungelo.app. We answer within one month. It is free. Before we act on a request, we check that it is yours: it should come from your account's email address, or we ask you to confirm it by signing in.

You can also complain to a data protection supervisory authority, in particular in the EU or EEA country where you live, where you work or where the alleged infringement took place (Article 77 GDPR). Fungelo is supervised by the Slovenian authority: Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.

Testers

Until launch, the test versions of the app (dev.fungelo.app and spots.fungelo.app) are open only to invited testers. Cloudflare Access checks your email address with a one-time code before letting you in, and keeps a record of these logins for 24 hours.

Changes to this notice

We will update this notice when Fungelo changes how it uses data, for example before paid features start or before results computed from field reports are shown on the map. If you have an account, we tell you about material changes by email or in the app before they apply. The date at the top shows the latest version.