Privacy Policy — YardWild

Last updated: 2026-05-18 · Effective from public launch on the Ring Appstore

YardWild ("the App", "we", "us") is operated by Erbacci Ltd, a company registered in Cyprus. This Privacy Policy explains what personal data we collect when you use YardWild, why we collect it, how we use it, who we share it with, and the rights you have.

1. Summary at a glance

We connect to your Ring account via Ring's official Partner OAuth — we never see or store your Ring password.
We process motion event metadata and snapshot images from your Ring outdoor camera(s) to identify wildlife.
We do not identify, store, or process humans. Frames containing only humans are discarded immediately and never reach our identification model.
We do not identify birds. Bird identification is intentionally out of scope.
We do not record audio. Ring's Partner API does not expose audio to us.
Snapshots are stored encrypted on AWS S3 (us-east-1) and are deletable on request.
We never sell your data. We never share for advertising.
Citizen science contributions to iNaturalist are opt-in only with location fuzzed to a 1km radius.
You can delete your account and all associated data from the App at any time. Deletion completes within 24 hours.

2. What data we collect

Category	Data	Source	Lawful basis
Identifier	Ring account ID (opaque token)	Ring OAuth	Contract
Device data	Ring device IDs, device names, device kind	Ring Partner API	Contract
Activity data	Motion event timestamps + Ring subtype, single snapshot JPEG at event time	Ring webhook + Snapshot API	Contract
Inferred data	Identified species (Latin + common name), confidence score, conservation status lookup	Derived from snapshot via AWS Bedrock	Contract
App settings	Per-camera enable/disable, notification preferences, quiet hours, citizen science opt-in flag, push notification token	You	Contract
Subscription	Plan tier (free / premium), renewal date	Ring Billing System	Contract

3. How we use your data

Wildlife identification: each motion-event snapshot is first passed through MegaDetector (an open-source camera-trap model deployed on AWS) to confirm an animal is present. If no animal is detected, the snapshot is discarded. If a human is detected without an animal, the snapshot is discarded. If an animal is present, the snapshot is sent to AWS Bedrock (Anthropic Claude vision) for species identification. Bedrock is bound by the AWS Service Terms not to train on customer data. Identifications exclude humans and birds.
Service delivery: rendering the timeline, the species library, the biodiversity score, push notifications, and the optional weekly/monthly digest.
Conservation context: enriching identified species with Wikipedia summary and IUCN Red List status (public data; no personal data shared with these sources).
Customer support: when you email us.
Citizen science (opt-in): if you enable the toggle in Settings, we submit anonymized observations (species + fuzzed coordinates within 1km of your property + observation date) to iNaturalist. No image, no exact location. You can revoke at any time and request bulk-deletion of past submissions.

We never use Ring data to train AI models. AWS Bedrock and AWS Rekognition operate under AWS Service Terms which prohibit model training on customer inputs.

4. Who we share data with

Recipient	Purpose	Location
Amazon Web Services	Hosting (Lambda, DynamoDB, S3, Bedrock, SNS)	USA (us-east-1)
Ring LLC / Amazon	Source of camera events; subscription billing via Ring Billing System	USA
Apple / Google push services	Push notification delivery	USA
iNaturalist (opt-in only)	Citizen-science observation submission with fuzzed location	USA
Wikipedia / IUCN Red List	Public species metadata lookup — no personal data shared	USA / global

We never sell your data. We never share for advertising. We do not work with data brokers.

5. How long we keep your data

Data type	Retention
Camera snapshots (raw JPEGs)	Until you delete or close your account. Deletable on request.
Sighting records (timestamp, species, thumbnail URL)	Indefinitely for your timeline value, until you delete.
Motion event audit log	30 days (DynamoDB TTL)
Account record	Until you delete. After deletion request: removed within 24 hours; backup retention up to 30 days.
Deletion audit log	90 days (per Ring policy requirement)

6. Your rights

Under applicable privacy law (UK/EU GDPR, California CCPA/CPRA, and others) you have rights including access, rectification, erasure, portability, restriction, and objection. To exercise any right, email privacy@yardwild.erbacciltd.com. We respond within 30 days.

7. How to delete your account

Disable YardWild from the Ring app — instant revocation of our Ring access token.
Or tap "Request account deletion" in the YardWild dashboard or mobile app.
Or email privacy@yardwild.erbacciltd.com.
All your data — Ring tokens, settings, sightings, snapshots — is deleted within 24 hours. Some backups may persist up to 30 days then are purged.

8. Security

TLS 1.2+ for all data in transit
S3 server-side encryption (AES-256) at rest for snapshots
DynamoDB encryption at rest
No human ever reviews your snapshots — identification is fully automated
We do not store your Ring password (OAuth tokens only)

9. Children

YardWild is not directed to children under 13 and we do not knowingly collect data from children. The Ring camera ecosystem is adult-oriented; YardWild requires an active Ring account (which itself enforces age limits).

10. Contact

Privacy inquiries: privacy@yardwild.erbacciltd.com
General support: support@yardwild.erbacciltd.com
Data controller: Erbacci Ltd, Cyprus

11. Reporting abuse

If you believe YardWild is being used to target or surveil another person, or in violation of these terms or applicable law, report it immediately to abuse@yardwild.erbacciltd.com. We investigate every report within 48 hours and may suspend accounts pending resolution.