Ranger Wild

Privacy Policy

Last updated: 17 October 2026

This policy explains what personal information Ranger Wild collects, why, and what rights you have over it. It’s written in plain English. If any of it isn’t clear, email hello@rangerwild.com and we’ll explain.

The app is Ranger Wild, run by Phil Gillett in the UK.

1. What’s collected

If you’re a visitor using the mobile app:

  • Which centre you’re looking at, and when — so the app can show you what’s on at that centre today, send you a push if an event you’ve bookmarked is starting soon, and (for the centre you’re at) notice which animals seem to hold your attention. We never sell this to anyone.
  • A device-level push token (if you turn notifications on) — this is how iOS and Android know which phone to send a push to. It’s a random identifier, not tied to your name.
  • Your approximate location (if you grant permission), only while you’re inside a wildlife centre. Used to show you on the park map and work out which animals you’ve been near. We don’t store historical location trails — only aggregate “attention” data per visit.
  • The name and party size you give when you register for an event at a centre. The centre needs this to know who to expect; we don’t use it for anything else.
  • A random session identifier, stored locally on your phone, so the app can remember you between visits without us knowing who you are.
  • Anonymous crash diagnostics may be collected to help us fix bugs.

If you’re an operator using The Ranger Station admin:

  • Your email, name, and the centre you run — needed to sign in and show you the right content.
  • Standard sign-in records (when you last signed in, from where roughly) for security.

Not collected:

  • Your real name, phone number, or payment info (in the mobile app)
  • Contacts or background location
  • Third-party ads

2. Purposes

Running the service, showing you what’s on at the centre you’re visiting, sending you push notifications you’ve opted into, letting operators keep their centre’s content up to date, and fixing bugs.

3. Sharing

We use the following third-party services to run Ranger Wild. Each is contractually bound to only use the data to run the service, and to protect it.

  • Supabase (database + file storage + sign-in) — hosts accounts and content in an EU data centre.
  • Vercel (hosts the Ranger Station admin website) — EU hosting.
  • Expo / EAS (manages mobile app updates) — US hosting; receives nothing identifiable about visitors.
  • Resend (sends operator sign-in emails) — EU hosting.
  • Apple App Store and Google Play Store — handle installs and app distribution.
  • GoDaddy — DNS for rangerwild.com.

Data is not sold, rented, or shared with advertisers or data brokers.

4. Operator and visitor visibility

Operators of a centre only see data for their own centre. They can see event sign-up names and party sizes, and anonymised attention trends across their centre’s species. They cannot see personal identifiers of visitors (no email, no device ID), and they cannot see any data for other centres.

5. Your rights (UK GDPR)

You can:

  • Ask for a copy of the personal data we hold about you
  • Ask us to correct anything that’s wrong
  • Ask us to delete your data — in the mobile app you can do this yourself under Settings → Delete my data; email for the operator side
  • Ask us to stop processing your data for specific purposes
  • Object to specific uses
  • Complain to the UK Information Commissioner’s Office (ico.org.uk) if you think we’ve got it wrong

Email hello@rangerwild.com to exercise any of these. We aim to respond within one month.

6. Retention

  • Push tokens are kept until you turn off notifications or we detect the token is dead.
  • Visit attention data is kept for three months, then automatically deleted.
  • Event sign-ups are kept until 30 days after the event, then deleted.
  • Operator records are kept while you’re actively managing a centre, plus a reasonable period after if we need to for accounting or legal reasons.
  • Backups are retained for up to 30 days.

7. Children

Ranger Wild is a family-friendly app that children may use while visiting a centre, but we don’t knowingly collect personal data from under-13s. The only identifiable information a child could enter is a name on an event sign-up form, and that’s optional — a party booked by a parent is one party.

8. Security

Access to visitor data is protected by Supabase’s Row-Level Security policies: each centre’s operator can only see their own centre’s data; visitors can only see their own; no one but Ranger can see across centres. Operator sign-in uses two-factor authentication by email. Backups are encrypted at rest.

No system is unhackable. If we detect a breach that affects you, we’ll let you know within 72 hours as the law requires.

9. Changes

If we change anything material we’ll give notice through the app. The current version always lives at station.rangerwild.com/legal/privacy. Significant changes get a date update at the top.

10. Contact

hello@rangerwild.com for anything related to this policy or your data.