Privacy Policy — YardWild

Last updated: 2026-08-05 · Effective from public launch on the Ring Appstore

YardWild ("the App", "we", "us") is operated by Erbacci Ltd, a company registered in Cyprus. This Privacy Policy explains what personal data we collect when you use YardWild, why we collect it, how we use it, who we share it with, and the rights you have.

1. Summary at a glance

We connect to your Ring account via Ring's official Partner OAuth — we never see or store your Ring password.
We process motion event metadata and snapshot images from your Ring outdoor camera(s) to identify wildlife.
We do not identify or store humans. A frame containing a person is discarded before species identification — it is never stored, never shown in your timeline, and never sent in a notification. We never attempt to recognise who a person is.
We do not identify birds. Bird identification is intentionally out of scope.
We do not record audio. Ring's Partner API does not expose audio to us.
Snapshots are analysed on GPU hardware we operate ourselves. This means a snapshot leaves the United States: it travels encrypted via a server in Germany to our machine in the United Arab Emirates, is processed in memory there, and is never stored on it. See sections 3 and 4.
Snapshots are stored encrypted on AWS S3 (us-east-1) and are deletable on request.
We never sell your data. We never share for advertising.
You can delete your account and all associated data from the App at any time. Deletion completes within 24 hours.

2. What data we collect

Category	Data	Source	Lawful basis
Identifier	Ring account ID (opaque token)	Ring OAuth	Contract
Device data	Ring device IDs, device names, device kind	Ring Partner API	Contract
Activity data	Motion event timestamps + Ring subtype, single snapshot JPEG at event time	Ring webhook + Snapshot API	Contract
Inferred data	Identified species (Latin + common name), confidence score, conservation status lookup	Derived from the snapshot by our vision model (AWS Bedrock as fallback)	Contract
App settings	Per-camera enable/disable, notification preferences, quiet hours, digest frequency, time zone, push notification token	You	Contract
Subscription	Plan tier (trial / premium / expired), trial end date, active camera count for per-camera billing, renewal date	Ring Billing System	Contract

3. How we use your data

Wildlife identification: each motion-event snapshot is analysed on GPU hardware operated by Erbacci Ltd, by a vision model (Qwen 3.5) reached over an encrypted connection — TLS terminated by our reverse proxy on a Contabo server in Germany, then an encrypted WireGuard tunnel to the GPU machine, which is located in the United Arab Emirates. That hardware answers all three questions: is a non-human animal present, is a person present, and — when an animal is present and no person is — which species it is. The snapshot is processed in memory only and is never written to disk on that hardware; the model performs inference only and is never trained on your data. If no animal is detected, or a person is detected, the snapshot is discarded at that point and goes no further. If our own hardware is unavailable, or returns an answer we cannot use, the same questions are put to AWS instead — AWS Rekognition DetectLabels for the animal/person check and AWS Bedrock with Anthropic Claude vision for the species — bound by the AWS Service Terms not to train on customer data. Identifications exclude humans and birds by design, whichever path runs.
Service delivery: rendering the timeline, the species library, the biodiversity score, push notifications, and the optional weekly/monthly digest.
Conservation context: enriching identified species with Wikipedia summary and IUCN Red List status (public data; no personal data shared with these sources).
Customer support: when you email us.

We never use Ring data to train AI models. The vision model on our own GPU hardware performs inference only — it is never fine-tuned or trained on your images, and no image is retained there. AWS Bedrock and AWS Rekognition operate under AWS Service Terms which prohibit model training on customer inputs.

4. Who we share data with

Recipient	Purpose	Location
Erbacci Ltd — own GPU hardware	Vision analysis of the motion snapshot (animal / person / species). Processed in memory only; never stored on that hardware	United Arab Emirates
Contabo GmbH	Server that terminates the encrypted connection and forwards it to our GPU hardware. Transits the snapshot; does not store or analyse it	Germany
Amazon Web Services	Hosting (Lambda, DynamoDB, S3, SNS) and the fallback vision path (Rekognition, Bedrock) when our own hardware is unavailable	USA (us-east-1)
Ring LLC / Amazon	Source of camera events; subscription billing via Ring Billing System	USA
Apple / Google push services	Push notification delivery	USA
Resend (Plus Five Five, Inc.)	Delivery of transactional email: the sign-in one-time code and account notices. Receives your email address and the message body; no camera images.	USA
Wikipedia / IUCN Red List	Public species metadata lookup — no personal data shared	USA / global

We never sell your data. We never share for advertising. We do not work with data brokers.

5. How long we keep your data

Data type	Retention
Camera snapshots (raw JPEGs)	Automatically deleted 90 days after capture (S3 lifecycle policy). Deletable sooner on request; removed within 24 hours when you delete or close your account.
Sighting records (timestamp, species, thumbnail)	Timeline metadata (timestamp, species) kept until you delete; the associated snapshot image expires after 90 days (see above).
Motion event audit log	30 days (DynamoDB TTL)
Account record	Until you delete. After deletion request: removed within 24 hours; backup retention up to 30 days.
Deletion audit log	90 days (per Ring policy requirement)

6. Your rights

Under applicable privacy law (UK/EU GDPR, California CCPA/CPRA, and others) you have rights including access, rectification, erasure, portability, restriction, and objection. To exercise any right, email privacy@yardwild.erbacciltd.com. We respond within 30 days.

7. How to delete your account

Disable YardWild from the Ring app — instant revocation of our Ring access token.
Or tap "Request account deletion" in the YardWild dashboard or mobile app.
Or email privacy@yardwild.erbacciltd.com.
All your data — Ring tokens, settings, sightings, snapshots — is deleted within 24 hours. Some backups may persist up to 30 days then are purged.

8. Security

TLS 1.2+ for all data in transit
S3 server-side encryption (AES-256) at rest for snapshots
DynamoDB encryption at rest
No human ever reviews your snapshots — identification is fully automated
We do not store your Ring password (OAuth tokens only)

9. Children

YardWild is not directed to children under 13 and we do not knowingly collect data from children. The Ring camera ecosystem is adult-oriented; YardWild requires an active Ring account (which itself enforces age limits).

10. Changes to this policy

We may update this policy as the App changes. The "Last updated" date above always reflects the current version, and when a change materially affects how we handle your data we highlight it in the YardWild dashboard so you can review it. You can disconnect the App from the Ring app at any time.

2026-08-05: sections 1–4 updated to describe the vision pipeline as it operates today. Since 17 July 2026, snapshot analysis runs on GPU hardware operated by Erbacci Ltd — reached through a server in Germany, with the machine located in the United Arab Emirates — and AWS Rekognition and AWS Bedrock are retained as the automatic fallback. No additional data is collected, nothing is stored on that hardware, and your retention and deletion rights are unchanged.

11. Contact

Privacy inquiries: privacy@yardwild.erbacciltd.com
General support: support@yardwild.erbacciltd.com
Data controller: Erbacci Ltd, Cyprus

12. Reporting abuse

If you believe YardWild is being used to target or surveil another person, or in violation of these terms or applicable law, report it immediately to abuse@yardwild.erbacciltd.com. We investigate every report within 48 hours and may suspend accounts pending resolution.