Privacy Policy

Last updated: 20 October 2026

This Privacy Policy explains what information the FishSpot mobile app (the "App") and this website (the "Website") collect, why, who processes it, and the choices you have. FishSpot is operated by Pixoby ("we", "us"). Contact: info@pixoby.space.

In short: you do not need an account, your location is used to find water and weather near you and is not stored with your account unless you attach it to a catch, we do not sell your data, and the App shows no ads. If you allow it, we measure which ad campaign brought you to the App.

1. What we collect and why

Your account

When you first open the App it creates an anonymous account for you: a random identifier and a secret that keeps you signed in on this device. If you choose to register, we also store your email address and a password (stored only as a secure hash). You can delete your account at any time (see section 6).

Location

• Spots and forecasts. With your permission, the App reads your device's approximate (reduced accuracy) location and sends it to our server to find fishing water nearby and to calculate the forecast. The server uses it to answer that request and does not store it with your account. Areas are cached on our server as anonymous map cells of about 22 km, with no link to who asked.
• Catch location (optional). When you log a catch you can choose to attach your current location. Only then is that location saved, on that catch record in your account.
• You can use the map without location access by moving it to any area yourself.

Photos and text you submit

• Catch photos. When you add a catch from a photo, the photo is sent to an AI model provider to name the fish (see section 3); the answer only fills in the species field and is not stored on its own. The photo is saved with the catch when you save it.
• Fishing Coach. Your questions and the answers are saved as conversations in your account, and your questions (with any photo you attach) are sent to an AI model provider to produce the answer.
• Catches. What you log (species, an optional photo, spot name, weight, length, notes and the optional location) is saved to your account.
• Reports. If you report an AI answer, we store the report (the reason and which answer it concerns) so we can review it.

Before the first catch photo is named or the first Coach question is sent, the App asks for your agreement to send this content to the AI provider. Please do not include personal details in photos or questions.

Stored only on your device

Some things never leave your phone: your saved spots, the last forecast kept for offline use (the spots and hours you already saw and where they were requested), your answers to the onboarding questions, your settings, and the best-time alert, which the App schedules on the device itself.

Purchases

Payments are handled by the App Store or Google Play; we never receive your card details. RevenueCat manages your subscription status using your account identifier, so Premium works and can be restored.

Notifications

If you allow notifications, the App stores your device's push token with your account. We use it for promotional messages about your subscription (for example a reminder before it ends or an offer after it ended) only if you turn on "Offers and reminders" in Profile; you can turn this off at any time. Best-time fishing alerts are scheduled on your device and do not use this token.

Usage and diagnostics

• Analytics. Google Firebase Analytics records how the App is used (for example which screens are opened and whether a catch was saved), with device and app information and your account identifier. We use it to understand and improve the App. It is not used for advertising.
• Install attribution. Tenjin records which ad campaign, if any, led to your install, so we know which of our own ads work. It receives your device's advertising identifier (IDFA on iOS only if you allow tracking when the App asks, GAID on Android), device and app information, your account identifier and subscription events, and passes install and purchase events back to the ad networks we advertise on (for example Google Ads). On iOS, if you do not allow tracking, the install is still counted without the advertising identifier. You can reset or limit the advertising identifier in your device settings.
• Crash reports. GlitchTip receives crash and error reports (technical details of the error, device and app version, your account identifier) so we can fix problems.

Email

If you register with an email address, we email you only about your account, for example a password reset. Emails are sent through Brevo.

The Website

The Website does not use analytics or advertising cookies. It remembers your light or dark theme choice in your browser's local storage.

2. What we do not do

• We do not sell your personal information.
• The App does not show ads. The only cross-app use of your data is the install attribution described above, which you control with your device's tracking and advertising identifier settings.
• We do not use your photos, questions or catches to build an advertising profile.

3. Who processes your information

We use the following service providers, each only for the purpose described:

• DigitalOcean (servers and file storage, United States) and Cloudflare (network security and delivery): host our backend, your account data and uploaded photos.
• OpenRouter, which routes requests to Google (Gemini) and, as a backup, OpenAI: process catch photos and Coach questions to produce answers.
• Google Firebase: analytics and push notification delivery.
• GlitchTip: crash and error reports.
• RevenueCat: subscription status and restoring purchases.
• Tenjin: install attribution for our ad campaigns.
• Brevo: account emails.
• Apple and Google: app distribution, payments, and sign-in with Apple or Google where offered.
• OpenStreetMap Foundation: the map images in the App are loaded directly from OpenStreetMap's tile servers, which receive your device's IP address and the map area you view, under the OSMF privacy policy.

Our server, not your device, fetches weather from Open-Meteo, water features from OpenStreetMap (Overpass) and species records from GBIF, using only the map area, never your identity.

We may also disclose information if required by law, to protect the rights and safety of users or others, or as part of a merger or sale of the business, in which case this policy continues to apply.

4. Legal bases (EEA, UK and similar laws)

We process your information to provide the App you asked for (contract), with your consent where we ask for it (location access, notifications, sending content to the AI provider, promotional notifications, tracking on iOS), and for our legitimate interests in keeping the service secure, fixing errors and understanding how it is used. You can withdraw consent at any time in the App or in your device settings.

5. How long we keep information

• Your account, conversations, catches and reports: until you delete them or your account.
• Location sent for spots and forecasts: not stored with your account; anonymous area caches are refreshed weekly.
• Server request logs (which include IP addresses): about 5 days.
• Crash reports, analytics and attribution data: for the retention periods set in GlitchTip, Firebase and Tenjin, after which they are deleted.
• Database backups are kept for up to four weeks and then overwritten.

6. Your choices and rights

• Delete everything. In the App, open Profile and choose "Delete my data" (or Account, "Delete Your Account" if you registered). This removes your account with all conversations, catches and reports, and clears the copies kept on your device. It does not cancel a subscription; manage that in your App Store or Google Play account.
• Location, camera, photos, notifications and tracking can be turned off at any time in your device settings.
• Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to complain to a data protection authority. Email info@pixoby.space and we will respond within the time the law requires.
• California (CPRA). We do not sell personal information. Install attribution may count as "sharing" for cross-context behavioral advertising; you can opt out by limiting your device's advertising identifier, or by emailing info@pixoby.space with the subject "CPRA Opt-Out". You may request access to or deletion of your information as described above.

7. Security

Connections are encrypted, the sign-in secret is kept in secure storage on your device, and access to our servers is restricted. No method of transmission or storage is completely secure.

8. International transfers

Our servers are in the United States, and some providers process data in other countries. Where the law requires it, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. Children

FishSpot is not directed to children under 13 (or under 16 where local law sets a higher age). We do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.

10. Changes

We will update this policy before we change what we collect, and update the date above. Material changes will also be announced in the App.

11. Contact

Pixoby, info@pixoby.space

See also our Terms of Use.