Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information: email address and username provided at registration.
• Catch data: species, location (GPS coordinates), date, size, weight, and photos you log in the app.
• Boat information: vessel name, registration, service records, and related documents you add to your boat profiles.
• GPS waypoints: coordinates and labels for locations you save on the map.
• Trip data: planned routes, costs, participants, and notes for trips you create.
• Usage analytics: pages visited, features used, and error logs to help us improve the platform. This data is aggregated and not linked to identifiable individuals.

2. How We Use Your Information

• To create and manage your account and provide the Service.
• To power AI recommendations — your catch history and location data may be sent to AI providers (see Section 4) to generate personalised insights.
• To display your data on maps and in catch history.
• To send service notifications such as subscription renewals and licence reminders.
• To analyse usage patterns and improve platform features.
• To comply with legal obligations.

We do not sell your personal data to third parties.

3. Cookies and Local Storage

ReefCast AI stores session tokens in your browser's localStorage to keep you logged in. We do not use third-party tracking cookies or advertising cookies. We may use minimal first-party cookies for essential session management.

4. Third-Party Services

We share limited data with the following trusted third parties to operate the Service:

• Stripe — processes subscription payments. We do not store your card details. See Stripe's Privacy Policy.
• Anthropic / OpenAI — powers AI assistant features. Queries and relevant catch context may be sent to these providers. Data is used solely to generate your response and is not retained for training without consent.
• Google Maps — provides mapping and geocoding functionality. Location data is shared to render maps and marine zone overlays.
• UploadThing — stores catch photos and boat documents securely in the cloud.

5. Data Storage and Security

Your data is stored on servers hosted on Fly.io infrastructure. Data is encrypted at rest and in transit using industry-standard TLS. We apply access controls to limit who can view your data internally.

While we take reasonable steps to protect your data, no system is completely secure. Please use a strong, unique password for your account.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will permanently delete your personal data within 30 days, except where retention is required by law. Aggregated, anonymised analytics data may be retained indefinitely.

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Export — download your catch logs, waypoints, and trip data from the app settings.
• Correction — update inaccurate information directly in the app or by contacting us.
• Deletion — request deletion of your account and all associated data.

To exercise any of these rights, contact us at support@reefcastai.com. We will respond within 30 days.

8. Children's Privacy

ReefCast AI is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has registered, please contact us and we will delete the account promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email before they take effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

10. Contact

For privacy questions or requests, contact us at support@reefcastai.com.