1. Personal Information You Provide

• Account Information: Email address, full name, password (encrypted)
• Profile Data: Any additional information you choose to add to your profile
• Payment Information: Processed securely through Stripe (we do not store credit card details)

2. Fishing Data You Create

• Catch Records: Fish species, weight, length, date/time, notes
• Location Data: GPS coordinates of your fishing spots (latitude/longitude)
• Photos & Videos: Images and videos you upload of your catches
• Weather Data: Weather conditions at time of catch
• Tackle/Technique: Lures, baits, and fishing methods you record

3. Automatically Collected Information

• Device Information: Browser type, operating system, device model
• Usage Data: Pages visited, features used, time spent in app
• IP Address: For security and analytics purposes
• Cookies: To maintain your login session and preferences

Camera Permission (Android & Apple iOS)

My Fish Vault requests access to your device's camera on both Android (android.permission.CAMERA) and Apple iOS (NSCameraUsageDescription) devices for the sole purpose of allowing you to take photos of your catches and attach them to your fishing log entries. This permission is required on both Android and Apple platforms for the in-app catch photo feature to function.

• On both Android and Apple iOS, the camera is only activated when you explicitly tap a "Take Photo" or camera button within the app.
• We do NOT access your camera in the background or without your action on Android or Apple devices.
• Photos taken are uploaded to your private catch log and are visible only to you, unless you choose to share them.
• We do NOT use the camera for facial recognition, advertising, analytics, or any purpose other than capturing your catch photos.
• Camera images are NOT sold, shared with third parties, or used for any marketing purpose.
• You may deny or revoke camera permission at any time through your Android system settings (Settings → Apps → My Fish Vault → Permissions) or Apple iOS system settings (Settings → My Fish Vault → Camera); the rest of the app will continue to function without the photo capture feature.

Photo & Video Library Permission (READ_MEDIA_IMAGES & READ_MEDIA_VIDEO)

On Android 13 and later (API level 33+), My Fish Vault may request the READ_MEDIA_IMAGES and READ_MEDIA_VIDEO permissions, and on Apple iOS, the equivalent NSPhotoLibraryUsageDescription permission, only when you choose to upload an existing photo or video from your device to attach to a catch entry, or save a catch photo to your device.

• Access is requested only at the moment you tap "Choose from Library" or a similar upload button — never in the background.
• We only access the specific photo or video you select. We do NOT scan, index, browse, or upload any other media on your device.
• Selected photos/videos are uploaded only to your private catch log and are visible only to you unless you explicitly choose to share them (e.g., to the Bragging Board).
• Photos and videos are NEVER used for advertising, analytics, facial recognition, machine-learning training, or sold/shared with third parties for marketing.
• You may deny or revoke this permission anytime via Android system settings (Settings → Apps → My Fish Vault → Permissions) or Apple iOS system settings (Settings → My Fish Vault → Photos). Denying it only disables the photo/video upload feature; the rest of the app continues to function.

Why we request broad media permissions instead of using only the Android Photo Picker: My Fish Vault provides core functionality that requires direct read access to selected media — including (1) reading photo/video EXIF metadata (date taken, GPS coordinates) so we can auto-populate the catch date and location for accurate fishing logs, (2) uploading multiple photos and videos in a single batch to a single catch entry, and (3) supporting in-app gallery management of catch media. These features are not fully supported by the Android system Photo Picker alone, which is why the READ_MEDIA_IMAGES and READ_MEDIA_VIDEO permissions are requested. Access is still strictly limited to media you explicitly select, and the data is used only to log your fishing activity within your private account.

Location Permission

Location access is used only when you log a catch or use the map feature, to record the GPS coordinates of your fishing spot. Your location data is private and never shared publicly.

Security Measures:

• Industry-standard encryption for data transmission (HTTPS/SSL)
• Secure password storage with hashing and salting
• Regular security audits and updates
• Restricted access to personal data (employees only when necessary)
• Secure cloud infrastructure with backups

Third-Party Service Providers:

• Base44: Application hosting and database services
• Stripe: Payment processing for Premium subscriptions
• Resend: Transactional email delivery

These providers only access data necessary to perform their services and are bound by confidentiality agreements.

Legal Requirements:

We may disclose information if required by law, court order, or to protect our rights, safety, or property.

Business Transfers:

If My Fish Vault is acquired or merged, your data may be transferred to the new owner with continued privacy protections.