Fishlore Privacy Policy
In short
- Your photos, identifications and catch log stay on your iPhone or iPad. They are never uploaded.
- There is no account and no sign-up. The app gives your installation a random anonymous ID.
- We receive anonymous usage statistics and crash reports, without the advertising identifier.
- We show no adverts, sell no data and do not track you across other companies' apps or websites.
Who we are
Fishlore is made by Tofesoft. We are the data controller for the data described on this page. Contact: tofesoftware@gmail.com.
What stays on your device
Fishlore identifies a fish from a photo on the device itself and stores everything it makes for you in the app's own private storage:
- Photos you take with the camera or choose from your photo library, and the identification made from them. The camera is used only while you take a photo; the app does not read your photo library beyond the picture you pick.
- Your catch log: species, the rule region, the length you entered, whether you kept or released the fish, the time, and the photo.
- Your appearance setting and a cached copy of the fishing rules.
Deleting a catch deletes it; deleting the app deletes all of it. If your device backs up to iCloud or a computer, this data is part of that backup under Apple's terms, not ours.
What leaves your device
Rules download. Once per launch the app fetches the current fishing rules from our website, hosted by Google (Firebase Hosting). Like any web server, it records the request: your IP address, the time and the app's user agent. We use these logs only to serve the file and keep the site secure.
Usage statistics. We use Google Analytics for Firebase in the variant without the advertising identifier. It sends automatic events (app opened, session started, app updated, screens viewed), the device model, the operating system and app versions, the device language, a country derived from a masked IP address, Apple's identifier for vendor, and a random app instance ID. We use this to learn how the app is used and which countries ask for fishing rules. None of it is linked to a name or email address, and we log no custom events.
Crash reports. Firebase Crashlytics sends a report when the app crashes: the stack trace, what the app was doing, the device model, the operating system and app versions, free memory and storage, and a random installation ID. We use it to fix crashes.
Your subscription. If you buy Fishlore Pro, Apple takes the payment — we never see your card, your name or your Apple Account. RevenueCat, on our behalf, receives the purchase Apple confirms (which product, when it started, when it renews or lapses, the country of your App Store account, the device model and operating system version) and a random app user ID it creates for your installation, and tells the app whether the subscription is active. We use it for nothing else. Fishlore is free to use without it, three identifications a day.
Anonymous sign-in. Firebase Authentication assigns your installation a random anonymous user ID. It carries no name, email address or password. We use it to tell installations apart for features tied to an installation; today nothing else in the app reads it.
What we do not do
- No advertising identifier, no advertising networks, no tracking across apps or websites, and therefore no App Tracking Transparency prompt.
- No location services. Your region comes from your device's region setting and is read on the device.
- No access to your contacts, health data or files, and no selling or sharing of data for advertising.
Legal basis
Where the UK GDPR or the EU GDPR applies, we process the data above on the basis of our legitimate interests: keeping the app working, fixing crashes and understanding how it is used, in ways you would reasonably expect from an app of this kind. You can stop all of it at any time by deleting the app.
Who processes the data and where
RevenueCat, Inc. processes subscription purchases on our behalf under its data processing terms, on servers in the United States. Google LLC processes usage statistics, crash reports and anonymous IDs on our behalf under Google's data processing terms. Google may store this data on servers in the United States and elsewhere; transfers out of the UK and the EU rely on Google's standard contractual clauses and the UK addendum. See Privacy and Security in Firebase and Google's Privacy Policy. Apple processes your App Store purchases and device backups under Apple's Privacy Policy.
How long
- On your device: until you delete a catch or the app.
- Usage statistics: Google keeps event-level data for two months, its default for this project.
- Crash reports: Crashlytics keeps them for 90 days.
- Subscription records: RevenueCat keeps them while the subscription exists and for as long as Apple's receipt is valid.
- The anonymous ID: until we remove it from Firebase Authentication. Deleting the app severs the link; a reinstall creates a new ID.
Your rights
Depending on where you live you may have the right to access, correct, delete or restrict the data we hold about you, to object to our processing, and to complain to a supervisory authority such as the UK Information Commissioner's Office. Because we hold no name, email address or other contact detail, we cannot connect the anonymous data above to you; if you would like the data tied to your installation deleted, write to us and we will explain what we can do.
Children
Fishlore is not aimed at children under 13 and we do not knowingly collect data from them.
Changes
We will post any change to this policy at this address with a new effective date.