Privacy Policy
What Dragonfly is
Dragonfly is a citizen-science field app for kids ages 9-12. Kids photograph plants, animals, fungi, and other organisms they find outdoors. A parent or teacher creates the kid account; kids do not enter email addresses and do not have public chat or direct messages.
What we collect from a kid account
- A photo of an organism, stored privately in Azure Blob Storage.
- Location for the observation. The Play Internal pilot uses coarse location.
- Species identification chosen by the kid, optionally suggested by iNaturalist CV.
- Observation timestamp, display name, age band, group membership, Dex/reward progress.
What we do not collect from a kid account
- Email address, phone number, last name, or exact date of birth.
- Advertising identifiers, contacts, microphone, SMS, calendar, or behavioral ad data.
- Kid-to-kid free text, public chat, or direct messages.
What we collect from a parent or teacher account
- Email address for sign-in through Microsoft Entra External Identities.
- Display name, owned groups, provisioned kid accounts, and consent records.
- Standard service logs for debugging and security.
Where data is stored
Dragonfly uses Azure for the active backend: Azure Database for PostgreSQL Flexible Server for structured data, Azure Blob Storage for photos, Azure Container Apps for the API, Azure Key Vault for secrets, and Azure Monitor / Log Analytics for operational logs. Data is encrypted in transit and at rest.
The public landing site may still be served from Firebase Hosting while DNS and hosting migration remain intentionally split under ADR 0010.
Sharing with iNaturalist
iNaturalist public submission is disabled for the W1 Internal Testing pilot. For closed beta and beyond, approved observations may be submitted through a Dragonfly-owned project account, not under the kid's name. Precise child identity is not sent to iNaturalist.
Moderation
Real moderation is asynchronous and must not block the kid's submit response. The production provider target is Azure AI Content Safety. Flagged photos go to adult review before approval or rejection.
Parent rights and deletion
Parents can request access, export, or deletion of their own account and linked kid accounts. The app includes an account-deletion request button in Settings. Full deletion of linked child data, photos, and any future iNaturalist contribution is completed through operator follow-up until the reviewed legal policy is finalized.
Email privacy@dragonfly-app.net with privacy requests. General support: support@dragonfly-app.net.