Effective September 6, 2026
Privacy Policy
Mephisto is a ball python collection, husbandry and breeding management app. This policy explains what data Mephisto handles and why.
Information we collect
- Account data — your email address and authentication information used to create and secure your account.
- Data you enter — animals, structured genetics and morph data, husbandry logs, breeding pairings and clutches, racks and tubs, tasks and notes.
- Optional photos — animal photos you choose to upload.
- QR identifiers — identifiers printed on animal and tub labels, used to resolve the matching private record inside your account.
Website beta signups
If you join the Android beta list on mephisto.pro, we collect your email address, your confirmation that you use Android, and a record of your consent to receive beta invitations and testing emails. Signing up does not create an app account.
We use this information to manage the tester list and contact you about the beta. If the page link includes campaign labels, we save those labels to understand where signups came from. We also use temporary, hashed network identifiers and request counts to limit abusive submissions. Signup records are stored privately with our database provider, Supabase, and are not available to other visitors.
We retain your signup while managing the beta, unless you ask us to remove it. To stop beta emails or request deletion of your signup, email support@mephisto.pro from the address you used to sign up.
Camera permission
Mephisto may request camera access so you can scan QR labels. The camera is used locally on your device to read a code. Mephisto does not store or upload camera images from scanning; photos are only stored when you deliberately upload them to an animal record.
How we use data
We use your data to provide the app, authenticate you, store and sync your records, respond to support requests, and protect the security of the service. Mephisto does not sell your personal information.
We rely on third-party providers for hosting, authentication, database and file storage, and OAuth sign-in. Those providers may process data as necessary to deliver their services, subject to their applicable terms and privacy practices.
Records are private to your authenticated account. Scanning a QR label does not make an animal or tub record public — it only resolves to a record for a signed-in user with access to that account.
Retention and deletion
Account data is retained while your account is active. When you complete account deletion, your account and associated app records are deleted, subject to limited retention in routine backups or where retention is required for legal or security reasons.
You can delete your account in the app under Settings → Danger zone → Delete account, or follow the instructions on the account deletion page.
Security
We use reasonable technical and organizational measures to protect your data, including authenticated access controls. No online service can guarantee absolute security.
Free-form notes are yours to use, but please avoid entering unnecessary sensitive personal information about yourself or others.
Children
Mephisto is not directed to children under 13.
Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected here with an updated effective date.
Contact
Questions about this policy: support@mephisto.pro
