Bluehunt — Privacy Policy

1. Introduction

This Privacy Policy explains how Bluehunt collects, uses, stores, and protects your personal data when you use our web and mobile application. Bluehunt is a hunting coordination and wildlife management platform that helps hunting teams organise hunts, assign stands, communicate, and optionally use wildlife camera and location features.

Bluehunt acts as the Data Controller under the General Data Protection Regulation (GDPR) for the personal data processed through the service.

We are committed to protecting your privacy and handling your data transparently. Please read this policy carefully to understand how we treat your personal information.

2. Personal Data We Collect

We collect and process only the data necessary to provide and improve the service. The categories of personal data we process are:

Data Category	Details
Account information	Full name, email address, login credentials (password stored in hashed form)
Contact information	Phone number (optional, provided at user discretion)
Hunt participation data	Stand assignments, hunt roles, attendance responses, hunt schedules
Telegram user ID	Collected only if you choose to enable Telegram notifications
Location data	GPS coordinates collected only during active hunts and only when you actively enable location sharing
Wildlife camera images	Trail camera photographs and videos intended for wildlife monitoring
Usage data	Browser type, device information, and access logs for service reliability and security

3. Purpose of Processing

Your personal data is processed for the following specific purposes:

Account creation and management — To create your user account, authenticate your identity, and manage your profile and team memberships.
Hunt coordination and communication — To organise hunts, assign stands, manage attendance, and enable team messaging.
Safety features — To provide optional live location sharing during active hunts, allowing team members to see each other's positions for safety purposes.
Notifications — To send you relevant updates via email or, where you have opted in, via Telegram.
Service improvement and operational reliability — To monitor system performance, diagnose technical issues, and improve the user experience.
Security and fraud prevention — To protect the service against unauthorised access, abuse, and other security threats.

4. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the GDPR:

Legal Basis	Applies To
Performance of a contract (Article 6(1)(b))	Core app functionality: account management, hunt coordination, team communication, and wildlife camera features
Legitimate interest (Article 6(1)(f))	Service security, fraud prevention, system monitoring, and operational reliability
Consent (Article 6(1)(a))	Telegram notifications and live location tracking during hunts. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. Location Tracking

Bluehunt includes an optional live location feature designed for hunter safety during active hunts. We want to be fully transparent about how this works:

Disabled by default. Location tracking is never active unless you explicitly enable it.
Active only during hunts. Location data is collected only during an active hunt session, not at any other time.
Requires your action. You must actively enable location sharing each time. It is never turned on automatically.
Stops automatically. When the hunt ends, location tracking stops immediately. No background tracking occurs outside of hunt sessions.
Visible to your team only. Your location is shared only with members of your hunting team during the active hunt.

You can disable location sharing at any time during a hunt, and the feature can be permanently disabled in your account settings.

6. Wildlife Camera Images

Bluehunt supports integration with trail cameras (such as Spypoint, UbiCam, and others) for wildlife monitoring purposes. These cameras are intended to capture images and videos of wildlife in their natural habitat.

Important: Users must not use the wildlife camera features of Bluehunt for unlawful surveillance of people. Trail cameras must be deployed in accordance with applicable local laws regarding photography, surveillance, and privacy. The responsibility for lawful camera placement and use rests entirely with the user.

If wildlife camera images incidentally capture images of people, these images should be deleted promptly. Bluehunt does not use facial recognition or any form of person identification technology.

7. Hosting and Data Processors

Your data is hosted on servers located within the European Union. Our cloud infrastructure provider acts as a Data Processor under a Data Processing Agreement (DPA) that ensures compliance with GDPR requirements.

We use the following categories of third-party processors:

Cloud hosting provider — EU-based infrastructure for application hosting, database storage, and file storage. Bound by a Data Processing Agreement.
Email service provider — For transactional emails such as account verification, password resets, and hunt notifications.
Telegram — Used as an optional notification channel. If you enable Telegram notifications, your Telegram user ID and notification content are processed by Telegram. See Section 8 regarding international transfers.

8. International Data Transfers

Your core data (account information, hunt data, camera images) is stored and processed within the European Union.

However, if you choose to enable Telegram notifications, data related to those notifications (your Telegram user ID and message content) may be processed by Telegram outside the EU. Telegram is headquartered in Dubai, UAE, with distributed infrastructure.

Where personal data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place as required by the GDPR, such as Standard Contractual Clauses or adequacy decisions where available.

You can avoid any international data transfer by choosing not to enable Telegram notifications.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

Account data — Retained for as long as your account remains active. When you delete your account, your personal data is removed.
Hunt and activity data — Retained for as long as necessary for team coordination and record-keeping. Historical hunt records may be retained in anonymised form for team statistics.
Location data — Retained only for the duration of the active hunt session. Location data is not stored permanently.
Wildlife camera images — Retained according to your team's settings and storage allocation. You and your team administrators can delete images at any time.
Security logs — Retained for a limited period necessary for security and incident investigation purposes.

You may request deletion of your data at any time by contacting us (see Section 12).

10. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

Right of access — You have the right to request a copy of the personal data we hold about you.
Right to rectification — You have the right to request correction of inaccurate or incomplete personal data.
Right to erasure — You have the right to request deletion of your personal data, subject to legal obligations that may require us to retain certain data.
Right to restrict processing — You have the right to request that we limit the processing of your personal data in certain circumstances.
Right to data portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to object — You have the right to object to processing based on legitimate interest. We will cease processing unless we have compelling legitimate grounds.
Right to withdraw consent — Where processing is based on consent (Telegram notifications, location tracking), you may withdraw your consent at any time.
Right to lodge a complaint — You have the right to lodge a complaint with a supervisory authority. If you are located in Sweden, the relevant authority is Integritetsskyddsmyndigheten (IMY), www.imy.se.

To exercise any of these rights, please contact us using the details in Section 12.

11. Security Measures

We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:

Encrypted connections — All data transmitted between your device and our servers is encrypted using HTTPS (TLS).
Password security — Passwords are stored using industry-standard one-way hashing. We never store passwords in plain text.
Access controls — Access to personal data is restricted to authorised personnel and systems on a need-to-know basis.
Logging and monitoring — We maintain security logs to detect and respond to unauthorised access attempts.
EU-based hosting — All primary data is stored on secure infrastructure within the European Union.

While we strive to protect your data, no method of electronic transmission or storage is completely secure. We encourage you to use a strong, unique password for your Bluehunt account.

12. Contact Information

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how your data is handled, please contact us:

Data Controller: Bluehunt

Email: [email protected]

Address: [Company address to be added]

We aim to respond to all data protection enquiries within 30 days.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you through the application or by email. The date at the top of this page indicates when this policy was last updated.

We encourage you to review this policy periodically.