Privacy Policy

Fauna keeps your library on your own devices. Its AI runs on your Mac, so no cloud AI ever sees your pictures, and nobody signs in to use it.

Fauna goes online only for a few things: starting your trial and activating your licence, checking for updates, fetching its search models once, sync you turn on, and crash reports or feedback you choose to send. This page lists every one of them.

We do not sell your data, show ads, track you across apps or websites, or train any model on your library.

This policy covers getfauna.com, Fauna for Mac (from the Mac App Store or from this website), Fauna for iPhone, and the Save to Fauna extension for Safari, Chrome, Brave and Edge. They work together, so they share one policy. Where one of them behaves differently, the section says so.

Your images, videos, audio, notes, saved web pages, tags, ratings, collections and boards stay on your Mac or iPhone, in the folder or storage you choose. So does the search index Fauna builds from them.

Fauna's search, tagging and Same Fauna all run on your Mac. On iPhone, tagging and colour detection run on the iPhone using Apple's Vision framework. Nothing is uploaded for analysis.

Fauna for Mac registers the Mac with our licensing server when your trial starts and when you activate a licence. It sends:

• a hardware identifier for the Mac;
• the Mac's name as set in System Settings, which often includes your first name;
• the Mac's model, and the macOS and Fauna versions;
• whether your copy came from the App Store or this website.

With a licence bought on this website, Fauna also sends your licence key or the email address you bought with. We email you a link to activate it, and you can ask for the link again at any time. With an App Store purchase, Fauna sends Apple's transaction record so the purchase can be verified.

Fauna checks your licence again from time to time, so a licence covers only the number of Macs it was sold for. If Fauna cannot reach our server, it keeps working for up to 14 days, then asks you to reconnect so it can check your licence.

Fauna for iPhone has no trial, licence or account, and sends nothing to our servers.

The licence settings in Fauna for Mac have an optional email field. It is sent only when you press Update, so support can find your licence. If you are offline, Fauna keeps it on your Mac and sends it when you reconnect.

We add your email address to our mailing list only if you tick the box to receive product emails. Every email has an unsubscribe link, and unticking the box in the app removes you too.

Fauna asks our server whether a newer version exists, sending only the version you have. The version of Fauna sold on this website also reads its update list from our server and receives updates from getfauna.com. The App Store version is updated by Apple.

After installation, Fauna for Mac fetches its on-device search models from our server once.

None of these requests carry anything about you beyond what every internet request carries, your IP address.

On Mac, crash reports are off until you turn them on in Settings, Privacy:

• Send crash reports sends a report through Sentry when something goes wrong, or when a library's sync has been stuck for a while: the error, the stack trace, your Mac model, and the macOS and Fauna versions. File names and folder paths are removed first. When this switch is off, Sentry never starts and nothing is sent to it, crashes included.
• Include recent actions adds the last few things you did in Fauna, such as opening the gallery, to a crash report. They are kept on your Mac and sent only with a report.

On iPhone, reports are also off until you turn them on in Settings, Privacy, Send Crash and Usage Reports. When it is on, Fauna sends crash reports and app freezes through Sentry and Firebase Crashlytics, and anonymous usage counts, such as which screens are opened, through Firebase Analytics. A report contains the stack trace, your iPhone model, the iOS and Fauna versions, and a random identifier for that install. When the switch is off, Sentry, Crashlytics and Analytics are all switched off and nothing is sent to any of them.

Crash reports never include your pictures, notes, name, email, or Apple or Google account.

When you send feedback from Fauna for Mac, we receive your message and your Mac's name, model and macOS version. If you choose, we also receive diagnostic logs, with your user name, file names and folder paths removed, and screenshots you attach. Screenshots are sent exactly as they appear, so attach only what you mean to share. Withdrawing a report deletes its screenshots.

Sync is off until you turn it on for a library. A synced library goes to your own iCloud Drive or Google Drive, under your own account. It never passes through our servers and we cannot read it. This is also how Fauna for Mac and Fauna for iPhone share a library: through your storage, never through us.

Google Drive: Fauna asks only for access to the files and folders it creates, and cannot see anything else in your Drive. Your Google account's email address is shown in the app so you know which account is connected, and is not sent to us. Fauna's use of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

iCloud: Apple handles sign in and storage. Fauna never sees your Apple ID.

When you save a page, picture or video, Fauna fetches it directly from the website it came from. Opening a saved page in Fauna loads it from that website, and videos play in the site's own player. The website sees an ordinary visit. We see nothing.

The extension acts only when you click to save. It gathers the address of what you chose, the page title, for pictures and videos the address of the page they came from, the time, and the collection you pick. It never reads your browsing history, page text, passwords or payment details, and contains no analytics, tracking or advertising.

It sends what you save only to the Fauna app on the same device: in Safari through Safari's own app extension messaging, and in Chrome, Brave and Edge through a local connection that never leaves your computer. We run no servers for the extension and never receive what you save.

On some sites, such as Instagram, the extension asks for access to that site only when you try to save from it, so it can find the real picture or video under your cursor. You can decline, and remove access at any time in your browser's settings. On Instagram it asks Instagram for the video's address using the session you are already signed in with; that request goes straight from your browser to Instagram.

Save to Fauna's use of information received from Chrome APIs follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

Licences bought on this website are sold by GrandWorks. Payments are processed by Stripe, which handles your card details and billing address and sets its own cookies on its checkout page, under its own privacy policy (https://stripe.com/privacy). We receive your email address, your name and billing address, what you bought, the country for tax, the order reference, and the type and last four digits of your card. We never see your full card number.

App Store purchases are handled by Apple under Apple's privacy policy.

The site sets no cookies of its own, except sign in cookies when you sign in to your account, which keep you signed in and are removed when you sign out or when they expire. It has no advertising or tracking pixels. It is delivered through Vercel, which processes your IP address to serve and protect the site. The installer and updates are delivered through Cloudflare.

When you download the installer, we count the download: the country, the app version, the browser family and a one-way code made from your IP address that changes every day, so a download cannot be traced back to you or linked to your other downloads.

Your account on this website keeps your email address and when you signed in, and our sign in provider records the IP address and browser of each sign in to keep accounts secure. Only people who bought Fauna on this website can sign in.

We measure visits with Vercel Web Analytics, which sets no cookies and stores no personal data. It counts page views, referring sites, and country and device type in aggregate, without identifying you.

• Supabase stores licence and device records, the email you add in the app, feedback, the mailing list, website purchase records and download counts, and hosts the update list and search models.
• Sentry receives crash reports from Mac and iPhone, only when you turn them on. Reports are stored in the EU, in Germany.
• Google Firebase receives crash reports and usage counts from iPhone, only while that switch is on.
• Resend sends licence emails, sign in links and, if you opted in, product emails.
• Stripe processes payments for website licences. Apple handles App Store purchases.
• Vercel delivers this website and measures visits without cookies. Cloudflare delivers the installer and updates.
• Google and Apple store synced libraries in your own account, only if you turn sync on.

Each provider receives only what it needs and is bound by data processing terms.

We use your data to run your trial and licence, offer updates, answer support and feedback, fix crashes you report, and send product emails you asked for.

Under the GDPR and UK GDPR we rely on performance of a contract for the trial, licence, updates and the sync you ask for; on consent for crash reports, recent actions, product emails, and the optional email; on legitimate interests for preventing licence abuse and keeping Fauna secure; and on legal obligation for purchase records. In India, under the DPDP Act 2023, processing rests on your consent or the Act's statutory exemptions.

Our providers may process data outside your country, including in the United States. Where the law requires, transfers rely on safeguards such as the EU Standard Contractual Clauses and the UK and Swiss addenda.

Your library stays on your devices, and in your own cloud if you sync, until you delete it. Licence and device records are kept while your licence exists, and purchase records for as long as tax law requires. Feedback is kept until it is resolved or you withdraw it. Crash reports are kept for a short rolling period. Mailing list records are kept until you unsubscribe.

Download records hold no IP address, and the daily code that links a day's downloads cannot be reversed once the day ends. Stripe also keeps payment records under its own policy.

Wherever you live, you can ask us what data we hold about you, and ask us to correct or delete it. Deleting removes your licence, device, feedback and mailing list records from our servers.

• EU, EEA and UK: you can also restrict or object to processing, ask for a portable copy, withdraw consent at any time, and complain to your data protection authority.
• California and similar US states: you can know, access, delete and correct your personal information. We do not sell or share it, and we will not treat you differently for using these rights.
• India: you can access a summary of your data and who it is shared with, ask for correction and erasure, nominate someone to act for you, and raise a grievance with our Grievance Officer.

To use any of these rights, email privacy@grandworks.co.

Everything Fauna sends travels encrypted. Access to our servers is restricted, and sign in credentials such as your Google sign in are kept in the Mac or iPhone keychain. No system is perfectly secure, but we work to protect your data and will tell you about incidents where the law requires.

Fauna is not directed to children under 13, or the minimum age where you live. We do not knowingly collect data from children. If you think a child has given us data, contact us and we will delete it.

When Fauna changes what it sends, or a provider changes, we update this page and the date at the top. Where the law requires, we will ask for your consent again.

GrandWorks, a trading name of Mungozone Web Solutions LLP, privacy@grandworks.co. For requests under India's DPDP Act, write to the Grievance Officer at the same address.