ReefCast AIOpen App

Privacy Policy

Last updated: April 2026

ReefCast AI (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.

The authoritative version of this policy is published in the app at reefcastai.com/privacy. If this page and the in-app version differ, the in-app version applies.

1. Information We Collect

We collect the following categories of information:

  • Account information: email address and username provided at registration.
  • Catch data: species, location (GPS coordinates), date, size, weight, and photos you log in the app.
  • Boat information: vessel name, registration, service records, and related documents you add to your boat profiles.
  • GPS waypoints: coordinates and labels for locations you save on the map.
  • Trip data: planned routes, costs, participants, and notes for trips you create.
  • Usage analytics: pages visited, features used, and error logs to help us improve the platform. This data is aggregated and not linked to identifiable individuals.

2. How We Use Your Information

  • To create and manage your account and provide the Service.
  • To power AI recommendations — your catch history and location data may be sent to AI providers (see Section 4) to generate personalised insights.
  • To display your data on maps and in catch history.
  • To send service notifications such as subscription renewals and licence reminders.
  • To analyse usage patterns and improve platform features.
  • To comply with legal obligations.

We do not sell your personal data to third parties.

3. Cookies and Local Storage

ReefCast AI stores session tokens in your browser's localStorage to keep you logged in. We do not use third-party tracking cookies or advertising cookies. We may use minimal first-party cookies for essential session management.

4. Third-Party Services

We share limited data with the following trusted third parties to operate the Service:

  • Stripe — processes subscription payments. We do not store your card details. See Stripe's Privacy Policy.
  • Anthropic / Google Gemini — powers AI assistant features. The provider handling a request receives query text, conversation history, supplied photos, and relevant location and fishing context. Query text is not automatically anonymised. Provider retention and data-use terms depend on the provider and account configuration.
  • Google Maps / OpenStreetMap / Nominatim — provide mapping and geocoding functionality. Map and location requests may be sent to these providers.
  • Fly.io / Cloudflare — host the API, PostgreSQL database, photo storage and website. Uploaded photos use persistent storage. Anyone with a photo link can view it, so avoid sharing private photo links.

5. Data Storage and Security

The website and API use HTTPS. Uploaded-photo volumes and operational backups are encrypted at rest. We apply server-side session validation and account access controls to limit access to your records.

While we take reasonable steps to protect your data, no system is completely secure. Please use a strong, unique password for your account.

6. Data Retention

We retain account data while your account is active. Completed account deletion removes it from the active database. Active subscriptions must first be cancelled. Removing the last record reference to an uploaded photo, or deleting its account, revokes photo access and queues file deletion with retries. Unattached uploads are eligible for cleanup after 24 hours. Previously downloaded or cached copies cannot be recalled. Restricted backup copies expire on their retention schedule; deletion requests must be reapplied before a restored service reopens. AI and payment providers apply their own retention terms.

7. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Export — download your catch logs, waypoints, and trip data from the app settings.
  • Correction — update inaccurate information directly in the app or by contacting us.
  • Deletion — request deletion of your account and all associated data.

To exercise any of these rights, contact us at support@reefcastai.com. We will respond within 30 days.

8. Children's Privacy

ReefCast AI is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has registered, please contact us and we will delete the account promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email before they take effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

10. Contact

For privacy questions or requests, contact us at support@reefcastai.com.