Privacy Policy — YardWild

Last updated: 2026-09-29 · Effective from public launch on the Ring Appstore

YardWild ("the App", "we", "us") is operated by Erbacci LLC, a company registered in Wyoming, United States. This Privacy Policy explains what personal data we collect when you use YardWild, why we collect it, how we use it, who we share it with, and the rights you have.

1. Summary at a glance

We connect to your Ring account via Ring's official Partner OAuth — we never see or store your Ring password.
We process motion event metadata and snapshot images from your Ring outdoor camera(s) to identify wildlife.
We never identify people. We do not name, count, recognise or describe any person. From 22 September 2026 YardWild may keep a frame in which a person appears and identify the wildlife in that frame, so a stored snapshot may contain a person in the background. This takes effect as that release is certified and rolled out; until then, as before that date, any frame containing a person is discarded before species identification and never stored.
From 22 September 2026 YardWild may identify birds alongside other backyard wildlife. Before that date birds were not identified.
We do not record audio. Ring's Partner API does not expose audio to us.
Snapshots are analysed on GPU hardware we operate ourselves. This means a snapshot leaves the United States: it travels encrypted via a server in Germany to our machine in the United Arab Emirates, is processed in memory there, and is never stored on it. See sections 3 and 4.
Snapshots are stored encrypted on AWS S3 (us-east-1) and are deletable on request.
We never sell your data. We never share for advertising.
You can delete your account and all associated data from the App at any time. Deletion completes within 24 hours.

2. What data we collect

Category	Data	Source	Lawful basis
Identifier	Ring account ID (opaque token)	Ring OAuth	Contract
Device data	Ring device IDs, device names, device kind	Ring Partner API	Contract
Activity data	Motion event timestamps + Ring subtype, single snapshot JPEG at event time	Ring webhook + Snapshot API	Contract
Inferred data	Identified species (Latin + common name), confidence score, conservation status lookup	Derived from the snapshot by our vision model (AWS Bedrock for frames with a person or a bird, and as fallback)	Contract
App settings	Per-camera enable/disable, notification preferences, quiet hours, digest frequency, time zone, push notification token	You	Contract
Subscription	Plan tier (trial / premium / expired), trial end date, active camera count for per-camera billing, renewal date	Ring Billing System	Contract

3. How we use your data

Wildlife identification: each motion-event snapshot is analysed on GPU hardware operated by Erbacci LLC, by a vision model (Qwen 3.5) reached over an encrypted connection — TLS terminated by our reverse proxy on a Contabo server in Germany, then an encrypted WireGuard tunnel to the GPU machine, which is located in the United Arab Emirates. That hardware answers all three questions: is a non-human animal present, is a person present, and — when an animal is present — which species it is. When a person also appears in the frame, the species may instead be identified by AWS Bedrock (Anthropic Claude), and the frame is kept only if the animal is recognised with confidence. A bird is always identified or confirmed by AWS Bedrock (Anthropic Claude). The snapshot is processed in memory only and is never written to disk on that hardware; the model performs inference only and is never trained on your data. If no animal is detected, the snapshot is discarded at that point and goes no further. A person is never identified. If our own hardware is unavailable, or returns an answer we cannot use, the same questions are put to AWS instead — AWS Rekognition DetectLabels for the animal/person check and AWS Bedrock with Anthropic Claude vision for the species — bound by the AWS Service Terms not to train on customer data. People are never identified, whichever path runs.
Service delivery: rendering the timeline, the species library, the biodiversity score, push notifications, and the optional weekly/monthly digest.
Species context: enriching identified species with public reference data such as a Wikipedia summary (no personal data is shared with these sources).
Customer support: when you email us.

We never use Ring data to train AI models. The vision model on our own GPU hardware performs inference only — it is never fine-tuned or trained on your images, and no image is retained there. AWS Bedrock and AWS Rekognition operate under AWS Service Terms which prohibit model training on customer inputs.

4. Who we share data with

Recipient	Purpose	Location
Erbacci LLC — own GPU hardware	Vision analysis of the motion snapshot (animal / person / species). Processed in memory only; never stored on that hardware	United Arab Emirates
Contabo GmbH	Server that terminates the encrypted connection and forwards it to our GPU hardware. Transits the snapshot; does not store or analyse it	Germany
Amazon Web Services	Hosting (Lambda, DynamoDB, S3, SNS); species identification or confirmation (Bedrock) when a person appears in the frame or the animal is a bird; and the fallback vision path (Rekognition, Bedrock) when our own hardware is unavailable, declines a frame, or returns an answer we cannot use	USA (us-east-1)
Ring LLC / Amazon	Source of camera events; subscription billing via Ring Billing System	USA
Apple / Google push services	Push notification delivery	USA
Resend (Plus Five Five, Inc.)	Delivery of transactional email: the sign-in one-time code and account notices. Receives your email address and the message body; no camera images.	USA
Wikipedia / IUCN Red List	Public species metadata lookup — no personal data shared	USA / global

We never sell your data. We never share for advertising. We do not work with data brokers.

Privacy zones. Any privacy zone you configure on the camera in the Ring app is masked by YardWild on every copy of the frame we process and on the copy we store. If that masking cannot be applied, the event is dropped and no frame is stored.

5. How long we keep your data

Data type	Retention
Camera snapshots (raw JPEGs)	Automatically deleted 90 days after capture (S3 lifecycle policy). Deletable sooner on request; removed within 24 hours when you delete or close your account.
Sighting records (timestamp, species, thumbnail)	Timeline metadata (timestamp, species) kept until you delete; the associated snapshot image expires after 90 days (see above).
Motion event audit log	30 days (DynamoDB TTL)
Account record	Until you delete. After deletion request: removed within 24 hours; backup retention up to 35 days.
Deletion audit log	90 days (per Ring policy requirement)

6. Your rights

Under applicable privacy law (UK/EU GDPR, California CCPA/CPRA, and others) you have rights including access, rectification, erasure, portability, restriction, and objection. To exercise any right, email info@erbacciltd.com. We respond within 30 days.

7. How to delete your account

Disable YardWild from the Ring app — instant revocation of our Ring access token.
Or use Settings → "Delete account & all data" in the YardWild web dashboard, or Settings → "Delete account and all data" in the mobile app.
Or email info@erbacciltd.com.
All your data — Ring tokens, settings, sightings, snapshots — is deleted within 24 hours. Some backups may persist up to 35 days then are purged.

8. Security

TLS 1.2+ for all data in transit
S3 server-side encryption (AES-256) at rest for snapshots
DynamoDB encryption at rest
No human ever reviews your snapshots — identification is fully automated
We do not store your Ring password (OAuth tokens only)

9. Children

YardWild is not directed to children under 13 and we do not knowingly collect data from children. The Ring camera ecosystem is adult-oriented; YardWild requires an active Ring account (which itself enforces age limits).

10. Changes to this policy

We may update this policy as the App changes. The "Last updated" date above always reflects the current version, and when a change materially affects how we handle your data we highlight it in the YardWild dashboard so you can review it. You can disconnect the App from the Ring app at any time.

2026-09-29: sections 2, 3 and 4 now state that a bird, like a frame in which a person appears, is identified or confirmed by AWS Bedrock (Anthropic Claude) — AWS was already listed as a recipient, and no new data is collected. Section 3 no longer promises IUCN Red List status, which YardWild does not currently show. Section 7 quotes the real account-deletion controls, and the contact address is now info@erbacciltd.com.

2026-09-22 (entity): the operating entity is stated correctly as Erbacci LLC, a Wyoming (United States) company. Earlier versions of this page described it as Cyprus-based; nothing about how your data is handled changes.

2026-09-22: birds are now identified alongside other backyard wildlife, and a frame is no longer discarded merely because a person appears in it — the wildlife in it is identified and the frame is kept, so a stored snapshot may show a person in the background. People are still never identified: YardWild does not name, count, recognise or describe any person. Privacy-zone masking is now described in section 4. The optional iNaturalist contribution described in earlier material was never built and has been removed.

2026-08-05: sections 1–4 updated to describe the vision pipeline as it operates today. Since 17 July 2026, snapshot analysis runs on GPU hardware operated by Erbacci LLC — reached through a server in Germany, with the machine located in the United Arab Emirates — and AWS Rekognition and AWS Bedrock are retained as the automatic fallback. No additional data is collected, nothing is stored on that hardware, and your retention and deletion rights are unchanged.

11. Contact

Privacy inquiries: info@erbacciltd.com
General support: info@erbacciltd.com
Data controller: Erbacci LLC, Wyoming, United States

12. Reporting abuse

If you believe YardWild is being used to target or surveil another person, or in violation of these terms or applicable law, report it immediately to info@erbacciltd.com. We investigate every report within 48 hours and may suspend accounts pending resolution.