Account: email, phone (optional), password hash, display name, username, avatar.

Content: catches (species, size, technique, photo, location if enabled), community posts, comments, likes, saved spots, vessel profiles.

Device & usage: browser type, operating system, IP address, and interaction analytics used to keep the app reliable.

Location: only when you allow it, used to fetch weather/marine data at your position and to log catches.

To operate the app: sign you in, show your data on your devices, deliver marine conditions at your location.

To improve the app: understand what's used, fix bugs, and prioritize new features.

To keep you safe: send weather and marine alerts you opt into, and prevent abuse.

Data is stored in managed cloud databases with row-level security so users can only access their own data. Passwords are hashed. Sessions use short-lived tokens.

We use industry-standard encryption in transit (TLS) and at rest. No system is perfectly secure — you are responsible for protecting your device and credentials.

Fishability integrates with the following services strictly to deliver core functionality:

• Supabase — authentication, database, and storage.
• Open-Meteo Marine — wave, wind, and weather forecasts.
• NOAA / National Weather Service — marine warnings and advisories.
• Lovable AI Gateway — AI assistant queries.
• Map tile providers (MapLibre-compatible) — base maps.

These services may process your queries and coordinates as required to return data. They do not receive your account credentials.

Location is only accessed when you explicitly enable it. You can revoke access at any time in your browser or device settings. Your live location is never broadcast without your action.

Camera is used only when you attach a photo to a catch or post. Photos are uploaded to secure storage and are visible according to the privacy setting you chose for the post.

Push and email notifications are opt-in per category. You can adjust every category individually in Settings → Notifications.

We use privacy-friendly usage analytics to understand aggregate app health. We do not sell personal data.

When you interact with AI Bite, your prompt and relevant context (recent catches, location if shared, vessel) are sent to the AI Gateway. Prompts are not used to train third-party models.

You can export a complete JSON archive of your data anytime from Settings → Security → Export personal data.

You can permanently delete your account from Settings → Account → Delete Account. Deletion is irreversible.

Privacy questions: privacy@fishability.app