Privacy & your data

1. Controller and scope

The controller under the UK GDPR / EU GDPR (as applicable) and related data protection law is the operator of the website fishingwebsiteapp.vercel.app and the mobile application “Fishing Log – Catches & Spots” (together, the “service”).

This privacy policy explains what personal data we process when you use the website or the app, for what purposes, and on what legal basis.

2. Hosting and server logs (website)

When you visit the website, our hosting infrastructure automatically processes technical data that is required to deliver pages, such as IP address (often briefly), time of access, requested resource, browser type, and operating system. This processing is needed to operate the site, maintain security (e.g. abuse prevention), and, where used, to produce aggregated access statistics.

The legal basis is our legitimate interest in a secure, reliable website (Art. 6 (1) lit. f GDPR / UK GDPR equivalent).

3. Data we process in the app

Depending on how you use the app, we may process the following categories of personal data:

• Account data: e.g. email address and display name when you register or sign in (including Apple Sign-In or Google Sign-In).
• Content and usage data: fishing spots, catches, photos, notes, and other entries you create in the logbook.
• Location data: GPS coordinates if you grant permission—used to show your spots on the map and for location-related features.
• Device information: e.g. device type and OS version to provide compatible features and for technical support.
• Payment data: subscriptions and in-app purchases are processed by the App Store (Apple). We do not receive your full card details; processing is handled by Apple and, where applicable, our subscription management provider under their terms.

4. Purposes and legal bases

We process personal data to provide the service, perform our contract with you (using the app with an account), sync your data across devices, improve stability and usability, and comply with legal obligations where required.

Legal bases may include Art. 6 (1) lit. b GDPR (contract), Art. 6 (1) lit. a GDPR (consent, e.g. for optional features or marketing if you agree), and Art. 6 (1) lit. f GDPR (legitimate interests in secure operations and product improvement).

5. Third-party services

We use carefully selected providers for authentication, storage, subscription management, and, where applicable, analytics, for example:

• Google Firebase (authentication, cloud storage)
• RevenueCat or comparable services for subscription management
• Apple (App Store, Sign in with Apple) and, where used, Google (Google Sign-In)

These providers may process data outside the EEA/UK; where required we rely on appropriate safeguards (e.g. standard contractual clauses). Their privacy notices apply in addition.

6. Retention and security

We keep personal data only as long as necessary for the purposes described or as required by law. Account-related data and app content are generally retained while your account exists; when you delete your account, associated data will be deleted or anonymised where technically feasible.

We use technical and organisational measures (including encrypted transmission where appropriate) to protect your information.

7. Your rights

Subject to applicable law, you may have the following rights:

• Access to the personal data we hold about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on legitimate interests (Art. 21 GDPR)
• Withdraw consent at any time, where processing is based on consent (Art. 7 (3) GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

You can adjust many permissions (e.g. location, notifications) in your device settings or in the app.

8. Contact

For questions about this policy or to exercise your rights, contact us at:

We aim to respond to requests without undue delay.

9. Changes

We may update this privacy policy when our service, legal requirements, or our processing changes. The current version is always published on this page with an updated date.