Privacy Policy

MessierMate is built by Cosmic Flow Labs. This policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

When you create an account, we collect your email address, password (stored as a secure hash by Supabase), and an optional display name. When you log observations, we store session records including the date, location name, Bortle sky-quality class, objects observed, any notes you write, ratings, and photos you choose to upload. We also store your equipment list (telescopes, eyepieces, filters, cameras) and display preferences (theme, card layout, filters).

2. Guest Mode

You can use MessierMate without creating an account. In guest mode, all data stays on your device and is never sent to our servers. If you later create an account, your local observations are migrated to your new account.

3. Location Data

The app requests your GPS location to calculate which objects are visible from your position. Your exact GPS coordinates are stored locally on your device only and are never uploaded to our servers. When you save an observing site to your account, we store only the site name and Bortle class number — coordinates are stripped before the data leaves your device.

4. How We Use Your Data

We use your data solely to provide the app's features: syncing your observations across your devices, displaying your progress, and enabling session sharing with friends via opt-in share codes. We do not use your data for advertising. We do not have analytics trackers in the app. We do not sell or share your personal data with third parties.

5. Session Sharing

You can optionally share a session by generating a short share code. Anyone with that code can view that session's objects, location name, and duration. Sharing is always opt-in — nothing is shared without your explicit action.

6. Observation Photos

Photos you attach to observations are uploaded to Supabase Storage in a private folder scoped to your user ID. Photos are accessible only through your authenticated account and are not publicly browsable.

7. Data Retention & Deletion

Your data is retained as long as your account exists. To delete your account and all associated data, email us at hello@cosmicflowlabs.com. We will permanently delete your account and all stored data within 30 days of your request.

8. Third-Party Services

We use Supabase (supabase.com) for authentication, database storage, and file storage. Supabase processes data on your behalf under their own privacy policy. We use the Open-Meteo API to fetch elevation data for your location — only your latitude and longitude are sent in that request and no data is retained by Open-Meteo.

9. Children

MessierMate is suitable for all ages. Users under 13 should have a parent or guardian review this privacy policy and consent to account creation on their behalf. If you believe a child's data has been submitted without appropriate consent, contact us and we will address it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. We will update the "Last Updated" date at the top of this page when we do. Your continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Email us at hello@cosmicflowlabs.com.