Privacy Policy

1. Controller and contact

FishPal is operated by Sebastian Ottow, Appventurer, Aushofener Straße 7, 84571 Reischach, Germany. Questions about privacy or requests concerning personal data can be sent to support@fishpal.app.

2. Data FishPal processes

Depending on the features you use, FishPal may process account or guest identifiers, subscription status, device and diagnostics information, fishing logs, catches, photos, notes, tackle, saved waters and spots, trip details, weather context, and analytics events needed to operate and improve the service.

Location data may include precise latitude and longitude, timestamps, route segments, speed, distance, saved fishing locations, catch locations, and an expected return time. FishPal requests device permission before accessing protected location data.

3. Live Sharing

Live Sharing is optional. Before the first invitation is created, the app explains what will be transmitted and asks the angler to confirm. A shorter confirmation is shown when sharing a later trip. The app records the disclosure version and confirmation time for the trip.

When Live Sharing is enabled, FishPal sends the trip's precise live location, route, trip title and status, expected return time, catch count, catch events and available catch details, weather information, and recent trip activity to the sharing service. These details are displayed to anyone with a valid invitation link. Invitation links can be copied or forwarded by recipients, so FishPal cannot guarantee that only the intended person will open a link.

While a trip is being recorded, the angler can choose Stop sharing to revoke its invitation links, or Delete shared trip from web to remove the published trip copy and invalidate its links. Neither choice deletes the trip stored on the angler's device or stops local recording. These actions require a connection to the sharing service; an unsuccessful request does not confirm removal. Viewers with an already-open page may continue to see previously loaded information until that page refreshes. FishPal cannot erase screenshots, messages, or other copies a recipient already made.

Invitation links use long random tokens and are validated by the sharing service before trip data is returned. Live invitation links expire automatically. After a trip ends, FishPal may keep a shared recap available for up to 24 hours unless access was revoked earlier.

4. Purposes and legal bases

FishPal processes personal data for the following purposes:

• to provide requested logging, sync, analysis, mapping, weather, and trip features;
• to provide Live Sharing after the angler's affirmative instruction;
• to process purchases and manage subscriptions;
• to protect accounts, invitation links, infrastructure, and other users from abuse;
• to diagnose failures and improve reliability; and
• to comply with applicable legal obligations.

Depending on the processing activity, the legal basis is performance of the user agreement, consent or another affirmative user request, FishPal's legitimate interests in operating a secure and reliable service, or compliance with a legal obligation. Consent can be withdrawn by stopping sharing, revoking invitations, changing device permissions, or contacting FishPal. Withdrawal does not affect processing that was lawful before withdrawal.

5. Service providers and recipients

FishPal uses service providers to operate the app and website. Depending on the feature, these may include Apple for platform services and optional iCloud sync, Supabase for database and server functions, Vercel for website hosting, Mapbox for maps, and providers used for weather, analytics, subscriptions, and AI-assisted catch analysis. Providers receive only the information needed for their service and are required to protect it under applicable agreements and law.

FishPal does not sell precise location data or fishing logs and does not use Live Sharing data for third-party advertising. Live trip information is disclosed to invitation-link recipients at the angler's direction.

6. International transfers

Some providers may process data outside Germany or the European Economic Area. Where required, FishPal relies on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism.

7. Retention and deletion

Private logs and trip history are retained while needed to provide the service and until the user deletes them or requests deletion, subject to legal obligations and limited backup retention. Ending a trip stops live updates but may leave a recap available for up to 24 hours. Stopping sharing, revoking a link, or link expiry ends viewer access after the sharing service processes the change, but does not by itself immediately erase the published trip data. During an active recording, Delete shared trip from web removes the published trip and its invitations from the sharing service after a successful online request. The local trip remains on the angler's device. For deletion requests outside this in-app flow, contact support@fishpal.app.

Server-held Live Sharing route, event, weather, and media data for completed shared trips is removed from the sharing backend after the limited recap window, while the angler's private in-app trip log may remain available to the angler.

Technical logs and security records are retained only as long as reasonably necessary for reliability, abuse prevention, dispute handling, and legal compliance.

8. Security

FishPal uses technical and organizational safeguards appropriate to the data being processed. Invitation tokens are designed to be difficult to guess, and server access is validated before trip data is returned. No internet transmission or storage system can be guaranteed completely secure, and users should share invitation links only with people they trust.

9. Your choices and rights

Depending on applicable law, users may have rights to access, correct, delete, restrict, or export personal data, object to certain processing, withdraw consent, and lodge a complaint with a data protection authority. Requests can be sent to support@fishpal.app. FishPal may need to verify the requester's identity before fulfilling a request.

10. Children

FishPal is not directed to children who cannot lawfully consent to the processing of their data. Parents or guardians who believe a child has provided personal data should contact FishPal.

11. Policy changes

This policy may be updated when the product, providers, or legal requirements change. Material changes will be communicated through the app, website, or another appropriate channel. The date at the top identifies the current version.