Privacy Policy

1. Introduction

Fish Log Co. ("Fish Log," "we," "us," or "our") operates the Fish Log mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. By using Fish Log, you consent to the data practices described in this policy.

Fish Log helps North Carolina anglers log their catches, submit mandatory harvest reports to the NC Division of Marine Fisheries (NC DMF), participate in a community catch feed, and earn rewards through our quarterly rewards program.

2. Information We Collect

2.1 Information You Provide Directly

When you use Fish Log, you may voluntarily provide the following information:

• Account information: Name, email address, phone number, date of birth, and zip code when you register as a Rewards Member.
• Profile information: Profile photo and contact preferences (text/email confirmation opt-in).
• Fishing license information: Whether you hold a license, WRC ID / Customer ID, license number, license type, and license dates.
• Harvest report data: Species caught, quantities, fish length and weight, catch condition, tag numbers, release status, fishing method, bait type, hook type, harvest area (DMF area code), harvest date and time, and any additional notes.
• Photos: Catch photos and profile photos that you choose to upload.
• GPS coordinates: If you voluntarily enter location coordinates for a catch entry. We do not automatically collect your GPS location.
• Feedback and support requests: Messages, bug reports, and feature requests you submit through the in-app feedback system, along with your email if you provide it for follow-up.

2.2 Information Collected Automatically

When you use Fish Log, certain information is collected automatically:

• Device identifier: We generate a unique, random device identifier (UUID) the first time you open the App. This identifier is stored locally on your device and persists across app sessions and updates. It is used to associate your harvest reports with your device and to provide continuity of service.
• Anonymous user record: When you first use the App, we create a record associated with your device identifier in our database. This allows you to submit harvest reports without creating an account. If you later register as a Rewards Member, your anonymous history may be linked to your new account.
• Platform and device information: We collect your device platform (iOS or Android), operating system version, and app version. This information is included with feedback submissions and used to diagnose issues.
• Advertisement interactions: We record aggregated (non-personal) impression counts and click counts for advertisements shown in the app. This data is not linked to individual user profiles, is not used for personalized ad targeting, and is not shared with advertisers.

2.3 Information We Do Not Collect

• We do not automatically access your GPS location. The App includes a location library but does not request location permissions or track your position.
• We do not use third-party analytics or advertising SDKs (such as Google Analytics, Firebase Analytics, Facebook SDK, or AdMob).
• We do not collect contacts, calendar data, microphone input, or browsing history.
• We do not access your device's photo library, contacts, or camera without your explicit action (e.g., choosing to attach a photo to a catch).

3. How We Use Your Information

We use the information we collect for the following purposes:

• Harvest reporting: To submit your mandatory harvest reports to the NC Division of Marine Fisheries on your behalf.
• Account management: To create and manage your Rewards Member account, authenticate your identity via magic link email, and maintain your profile.
• Rewards program: To administer our quarterly rewards drawings, track your entries, and notify winners by email.
• Community features: To display your catches in the community catch feed (Rewards Members only, with your first name and last initial visible to other users).
• App improvement: To diagnose bugs, respond to feedback, and improve the App's functionality and user experience.
• Communication: To send harvest report confirmations via text or email if you opt in, and to respond to your support inquiries.
• Offline functionality: To store pending reports locally when you lack an internet connection, and sync them when connectivity is restored.

4. Information Sharing & Third Parties

We do not sell, trade, or rent your personal information. We share data with the following parties only as necessary to provide our services:

4.1 NC Division of Marine Fisheries (NC DMF)

When you submit a harvest report, the following data is transmitted to NC DMF via their official ArcGIS reporting endpoint: your name, zip code, fishing license status, WRC ID (if applicable), species and quantities caught, harvest area, fishing method, and contact preferences. This data is required by North Carolina's mandatory harvest reporting law. Photos and GPS coordinates you enter in the App are not transmitted to NC DMF.

4.2 Supabase

We use Supabase as our backend infrastructure provider for database hosting, user authentication, and file storage. Your data is stored in Supabase's cloud infrastructure. Supabase processes data on our behalf under a Data Processing Agreement (DPA) that complies with GDPR requirements, including Standard Contractual Clauses for international data transfers. Please refer to Supabase's Privacy Policy for more details.

4.3 Zippopotam.us

When you enter or update your zip code in your profile, we use the Zippopotam.us API to validate the zip code and retrieve associated city and state information. Only the zip code you enter is transmitted to this service. Results are cached locally on your device.

4.4 Other Users (Community Catch Feed)

If you are a Rewards Member, your catch data may be displayed in the community catch feed. Visible information includes your first name and last initial, species caught, fish counts, lengths, and any photos you uploaded. Anonymous users' reports are never displayed in the catch feed.

4.5 Law Enforcement & Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

• Account data: Retained until you delete your account.
• Harvest reports: Retained in our system until account deletion. Reports already submitted to NC DMF are retained by the government agency per their own policies.
• Photos: Stored in our cloud storage until you delete your account.
• Anonymous user records: Retained until the associated device identifier data is deleted upon request.
• Feedback submissions: Retained for as long as necessary to resolve your issue and improve the App.
• Local device data: Stored on your device until you clear the app's data or uninstall the App.

6. Data Security

We take reasonable measures to protect your information, including:

• All data is transmitted over encrypted HTTPS connections.
• Authentication tokens are stored using your device's secure storage system (Keychain on iOS, Keystore on Android) when available, with an encrypted fallback.
• Our database uses row-level security policies to ensure users can only access their own data.
• Account deletion is performed as a server-side cascading transaction to ensure complete removal of all associated data.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: You can view your profile data and harvest history within the App at any time.
• Correction: You can update your profile information, including name, email, phone number, and zip code, through the App's edit profile screen.
• Deletion: You can delete your account and all associated data at any time. See the Account Deletion section below.
• Data portability: You can request a copy of your data by contacting us at the email below.
• Withdraw consent: You can stop using the App at any time. Rewards Members can delete their accounts to withdraw consent for data processing.

To exercise any of these rights, contact us at fishlogco@gmail.com. We will respond to data access and portability requests within 30 days. For CCPA requests, we will respond within 45 calendar days as required by law.

8. Account Deletion

You can delete your Fish Log account at any time using either of these methods:

• In the App (immediate): Go to Profile > Edit Profile > scroll to the bottom and tap "Delete Account." You will be asked to confirm twice. Deletion is processed immediately.
• By email (within 7 days): Send a request to fishlogco@gmail.com with the subject "Account Deletion Request" and the email address associated with your account. We will process your request within 7 calendar days and confirm by email.

When you delete your account, all of the following are permanently removed: your profile information, harvest reports, catch photos, fishing statistics, achievements, rewards entries, and community feed posts. Reports already submitted to NC DMF cannot be removed from their systems.

For full details, see our Account Deletion page.

9. Children's Privacy

Fish Log is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. Users between 13 and 17 may use the App for harvest reporting only, with parent or guardian consent, but may not create a Rewards Member account. The Rewards Member program is restricted to users 18 years of age or older.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at fishlogco@gmail.com. We will take steps to delete such information promptly.

10. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
• Sale of personal information: We do not sell personal information to third parties.

To exercise your California privacy rights, email us at fishlogco@gmail.com.

11. International Users

Fish Log is designed for use in the United States, specifically North Carolina. If you access the App from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and data portability. To exercise these rights, contact us at fishlogco@gmail.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

For material changes that significantly affect how we handle your data, we will make reasonable efforts to notify you through the App or by email.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Fish Log Co.
Email: fishlogco@gmail.com
North Carolina, USA