Last updated 8 August 2026 · Applies to app.fishwizz.com and the FishWizz mobile apps
FishWizz is a personal fishing log and planning tool. This policy explains exactly what it collects, why, where it goes, and how to get rid of it. It is written to be read, not to be skimmed past.
FishWizz ("we", "us") operates the FishWizz web application and mobile apps. For privacy questions, data requests, or complaints, contact privacy@fishwizz.com.
| Data | When | Why |
|---|---|---|
| Email address | Account creation | To identify your account and send confirmation and account-related email |
| Google account email and basic profile | Only if you choose "Continue with Google" | To sign you in. We request only your email address and basic profile; we never receive your Google password and request no access to Gmail, Drive, Contacts, or any other Google service. |
| Precise location (GPS) | Only when you tap "Fish where I am", pin a spot on the map, or log a catch with position | To find nearby waters, load local conditions, and attach a position to your catches and spots |
| Photos you upload | Only when you photograph gear or a catch | Gear photos are analyzed to identify equipment; catch photos are attached to your catch log |
| Fishing data | As you use the app | Catches, gear, tackle, saved spots, sessions, Mission plans, and feedback — the content of the product |
| Technical data | Automatically | Browser/user-agent and error diagnostics, to keep the app working |
Where GDPR applies, we process your data to perform our contract with you (running your account and storing your fishing data), on the basis of your consent (device location and camera access, which you may withdraw at any time in your browser or OS settings), and for our legitimate interests in keeping the service secure and functioning.
We keep the number of processors deliberately small:
| Provider | Role | Location |
|---|---|---|
| Supabase | Database, authentication, file storage, server functions | United States |
| Cloudflare | DNS, CDN, hosting, security filtering | Global edge network |
| Sign-in only, and only if you use it | United States | |
| Weather and public water-data providers | Receive coordinates to return conditions. They receive a location, never your identity or account. | Varies |
If you are outside the United States, your data is transferred to and stored in the US under the providers' standard contractual clauses.
| Data | Retention |
|---|---|
| Catch log, gear, tackle, saved spots, sessions | Until you delete the item or your account. This is your fishing history — we do not expire it. |
| Location attached to catches, spots, and sessions | Kept as part of that record; deleted with it |
| Uploaded photos | Until you delete the associated record or your account |
| Account and authentication records | Life of the account |
| Error diagnostics | 90 days |
| Everything, after account deletion | Removed from live systems immediately; purged from encrypted backups within 30 days |
Every request runs over HTTPS. Your rows are protected by database row-level security policies that scope every read and write to your own user id, enforced by the database itself rather than by the app — so another signed-in user cannot reach your data even by calling the API directly. Uploaded photos live in private storage buckets scoped to your user id and are served only through short-lived signed links.
No system is perfectly secure. If a breach affects your personal data, we will notify affected users and the relevant regulator as required by law.
FishWizz is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us data, email us and we will delete it.
If we make a material change we will update the date above and notify you in the app before the change takes effect.