Privacy Policy

Overview

Surfishlog ("we", "us", "our") respects your privacy. This policy explains what data we collect, why we collect it, and how we protect it.

Information We Collect

Account Information

When you create an account, we collect your email address. This is used for authentication, account recovery, and important service communications.

Fishing Data

You provide fishing spot locations (zip codes), trip times, catch details, and notes. This data is used solely to provide the Service to you.

Automatically Collected Data

For each trip, we automatically fetch and store weather conditions, tide times, moon phases, and water temperature from third-party APIs (NOAA, OpenWeather) based on the spot's location.

How We Use Your Data

• To provide and improve the Service
• To generate personal analytics and insights from your fishing data
• To send important service updates (rare)
• To respond to your feedback or support requests

Aggregate Community Analytics

By default, your catch data may be included in anonymized, aggregate analytics to help the fishing community understand trends and patterns. For example: "Striped bass catches decreased 20% this season" or "Most popular lure types in 2024."

This aggregate data never includes:

• Your name, email, or any identifying information
• Your fishing spot locations or names
• Your personal notes or photos
• Any data that could be traced back to you individually

You can opt out of contributing to aggregate analytics at any time in your privacy settings. Opting out will not affect your ability to use the Service.

What We Don't Do

• We don't sell your data to third parties
• We don't share your fishing spots or catch data with other users
• We don't send marketing emails or spam
• We don't track you across other websites
• We don't use your data for advertising

Data Storage & Security

Your data is stored securely on servers in the United States. We use industry-standard encryption for data in transit (HTTPS) and follow security best practices. Passwords are hashed and never stored in plain text.

Third-Party Services

We use the following third-party services:

• NOAA - For tide predictions and water temperature data
• OpenWeather - For weather conditions
• Resend - For transactional emails (account confirmation)
• Gigalixir - For hosting the application

These services receive only the minimum data necessary (e.g., zip codes for weather lookups).

Your Rights

You can:

• Access your data at any time through the app
• Export your trip data
• Delete your account and all associated data
• Contact us with privacy concerns

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all your personal data within 30 days, except where required by law.

Children's Privacy

Surfishlog is not intended for children under 13. We do not knowingly collect data from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.

Contact

For privacy questions or concerns, please use our feedback form.