Your field notes, handled plainly.

Account information includes your name, email address, Badland account identifier, an Apple account identifier when you use Apple sign-in, encrypted account authorization credentials, Tallgrass sessions, and an optional profile photo.

Discoveries include the photos, RAW files, and videos you choose to post. Videos can include sound. Tallgrass also keeps file and capture details, the caption and place name you enter, and the precise latitude, longitude, and available accuracy used for the discovery.

Tallgrass stores activity needed to provide the journal and game, including AI reports, content-screening results, scores, rankings, likes, comments, reports, blocks, challenges, private field-guide questions and replies, moderation actions, and upload and processing status. If you enable push notifications, Tallgrass stores an Apple Push Notification service device token linked to your account.

Email sent to an @tallgrass.social address can include sender and recipient addresses, routing information, subject, message content, and attachments. Cloudflare forwards mail for [email protected] to the Badland LLC operator's Gmail inbox; messages to other recipients at that domain are collected in an admin-only operational inbox.

Tallgrass uses this information to authenticate members, save and display discoveries, prepare media, place discoveries on the map and calendar, provide AI identification and conversation, calculate scores and rankings, support social features, prevent duplicate requests, enforce service limits, deliver requested notifications, and keep the service secure and reliable.

Tallgrass does not use this information for targeted advertising and does not share it with data brokers. The current app does not include third-party advertising, analytics, or crash-reporting SDKs.

Signed-in beta members can see resolved discoveries, including their photos or playable video, the member name and profile photo, caption and place name, AI report, score, ranking, challenges, likes, and comments. New discoveries include an exact map location shared with signed-in beta members. Earlier private locations stay private, and earlier shared locations remain approximate.

Your email address, account credentials, private AI conversations, RAW originals, and ordinary discovery responses containing exact coordinates are not shown in the shared feed. Your private AI conversation is visible to you, although the discovery owner and other members may see the underlying shared discovery. Blocking another member hides each member's content and activity from the other while the block remains in place.

Tallgrass sends prepared photographs or sampled video frames to AWS Bedrock Mantle for processing by an Anthropic Claude model. Identification can also include your caption and place name. Reassessment can include the earlier report and your challenge reason. Private field-guide chat can include the discovery, saved report, and recent messages in that conversation. AI processing does not receive precise coordinates, account name, email address, account identifier, passwords, session credentials, RAW originals, or video audio.

The same AI response separately screens new media for a narrow set of clearly prohibited content before publication. A discovery with an explicit prohibited result is rejected. A new discovery cannot publish when a valid screening result is missing or unavailable. Existing resolved discoveries are not automatically rescreened, and identification uncertainty is not treated as a content-safety violation.

Tallgrass also uses Badland services for account access, Cloudflare for email routing, Google for the Gmail inbox that receives support mail and when you choose Google sign-in, and Apple when you choose Sign in with Apple, enable push notifications, or install the app. Tallgrass stores an encrypted Apple authorization credential when Apple sign-in is linked to your Tallgrass account. Those providers process information under the service terms and settings that apply to Badland LLC's accounts. This notice does not promise a provider retention period or training policy beyond those applicable terms and settings.

AI analysis runs only after the relevant account has allowed AI sharing in Profile. Tallgrass checks that setting again immediately before sending a provider request, including permission from each discovery owner whose media would be compared and from the member requesting a chat or challenge. You can stop future AI sharing in Profile. Revoking permission stops new, queued, and retried provider requests; it does not erase results already saved in your journal.

Unfinished server upload sessions expire after 24 hours. Signed-in discoveries and related account, social, game, and AI records otherwise remain until they are deleted or are no longer needed to operate Tallgrass. RAW originals remain with their discovery; other upload originals are removed after successful preparation, while prepared viewing copies remain.

You can delete an individual discovery from its detail view. In Profile, Delete Tallgrass data removes your live Tallgrass profile, discoveries and media, rankings, sessions, chats, comments, likes, reports, blocks, challenges, notification tokens, and pending uploads. If an Apple authorization is linked, Tallgrass also asks Apple to revoke its saved authorization. It also asks this device to remove locally saved Tallgrass drafts and media. This action does not delete the underlying Badland account used for authentication. Security and moderation audit records can remain when needed to document operator actions.

Operational backups may retain earlier copies after live deletion while Badland LLC establishes and applies a documented backup-rotation schedule. Tallgrass does not currently publish a fixed backup deletion period.

Support and operational email, including envelope and routing details, message content, and attachments, remains available to the operator while needed to answer the request, operate or secure Tallgrass, or keep a necessary business record. Badland LLC deletes it when it is no longer needed or in response to a valid deletion request, except where retention remains needed for security, legal, or operational records.

You choose whether to allow future AI sharing, enable notifications, and use Google or password sign-in. A precise location is required to post a new discovery in the current beta and is shared as described above. You can remove your own discoveries and comments, report a discovery, comment, or member, block a member, or delete your Tallgrass data in the app.

For help with access, correction, deletion, or a privacy question, email [email protected] or visit the Tallgrass Support page.