Privacy Policy

By using CarpMarks, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our application.

1. Information We Collect

1.1 Information You Provide

When you create an account and use CarpMarks, we collect information that you voluntarily provide, including:

• Account information: email address, display name, and password
• Profile information: profile photo/avatar
• Fishing spot data: location coordinates, spot names, notes, and photos
• Catch records: fish species, weight, bait used, date, and photos
• Preferences: weight unit preference (lbs/kg), notification settings

1.2 Information Collected Automatically

When you use our application, we automatically collect certain information:

• Device information: device type, model name, operating system
• Location data: GPS coordinates when you use map features
• Push notification tokens for delivering notifications
• App usage data and analytics (screens viewed, features used)

1.3 Payment Information

If you subscribe to CarpMarks Premium, payment processing is handled entirely by Apple App Store or Google Play Store. We do not collect, store, or have access to your credit card number, bank account details, or other financial information. We only receive confirmation of your subscription status.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain the CarpMarks service
• To save and synchronize your fishing spots and catch records
• To display your current location on the map
• To provide fishing condition information for your saved spots
• To send push notifications about favorable fishing conditions
• To authenticate your identity and secure your account
• To process and manage your premium subscription
• To improve and optimize our application through analytics
• To detect, prevent, and address fraud, abuse, or technical issues
• To comply with legal obligations

3. Data Storage and Security

Your data is stored securely using industry-standard cloud infrastructure provided by Supabase. We implement appropriate security measures including:

• Encrypted data transmission using HTTPS/TLS protocols
• Row-level security (RLS) ensuring you can only access your own data
• Secure password hashing and authentication protocols
• Ongoing security monitoring and updates

4. Third-Party Services

CarpMarks uses the following third-party services:

• Supabase: Cloud database and user authentication
• Google Maps Platform: Map display and location services
• Expo: Push notification delivery and app updates
• Firebase Cloud Messaging: Push notification infrastructure on Android
• RevenueCat: Subscription management and payment processing
• Apple App Store / Google Play Store: Payment processing and app distribution
• Weather providers: Fishing condition information

These services have their own privacy policies and we encourage you to review them. We do not control and are not responsible for the privacy practices of these third-party services.

5. Location Data

CarpMarks collects and uses location data to provide core functionality:

• Displaying your current position on the map
• Saving GPS coordinates for your fishing spots
• Providing location-specific weather data

Location data is only accessed when you actively use the application. You can disable location permissions at any time through your device settings.

The map feature is provided for personal reference only and is not intended as a navigation tool. Always use proper navigation methods when traveling to fishing locations.

6. Camera and Photo Library

CarpMarks requests access to your camera and photo library for:

• Adding photos to your fishing spots
• Attaching photos to your catch records
• Setting your profile avatar

We do not access your camera or photo library without your explicit action.

7. Push Notifications

With your permission, CarpMarks sends push notifications to alert you when fishing conditions are favorable at your saved spots.

You can customize notification preferences within the app or disable them entirely through your device settings.

8. Data Sharing and Disclosure

Your data is private by default. Your fishing spots, catch records, and personal information are only visible to you unless you explicitly choose to share. We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers: With third-party services listed in Section 4, solely to provide and operate our Service
• Legal requirements: When required by law, court order, subpoena, or government request
• Safety and enforcement: To protect the rights, safety, or property of CarpMarks, our users, or the public, including enforcing our Terms of Service
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case you will be notified of any change in ownership or use of your data
• Catch sharing (opt-in): If you enable the "Share Catches" feature, your catch data (species, general location, and time) may be shared with other users who have fishing spots nearby. This feature is off by default and can be disabled at any time in your notification settings
• With your consent: When you explicitly authorize us to share your information

9. Analytics and Usage Data

We collect usage data to improve the application, including:

• Screen views and feature usage patterns
• App performance metrics and error reports
• General usage statistics and session information

This data may be associated with your account and is used solely to improve app performance and user experience. We do not share analytics data with third parties for advertising purposes.

10. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your personal data will be removed from our active systems upon confirmation. This includes your profile, fishing spots, catch records, and photos.

You may delete your account at any time through the Profile section. Account deletion is irreversible. Residual copies may briefly persist in automated backups maintained by our infrastructure provider before being overwritten. Some anonymized or aggregated data may be retained where required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance, resolving disputes).

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using CarpMarks, you consent to the transfer of your data to these countries.

We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy, including standard contractual clauses where applicable.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours of becoming aware of the breach
• Describe the nature of the breach and the data affected
• Outline the measures taken to address and mitigate the breach
• Notify relevant supervisory authorities as required by law

13. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Request a copy of your data by contacting us via email
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Opt-out: Disable notifications and location services at any time
• Withdraw consent: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at support@carpmarks.com. We will respond to your request within 30 days.

14. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis: We process your data based on your consent (account creation), contractual necessity (providing the Service), and legitimate interests (improving the Service, preventing fraud)
• Right to lodge complaint: You have the right to lodge a complaint with your local data protection supervisory authority
• Data transfers: Where we transfer data outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses
• Right to be forgotten: You may request complete erasure of your personal data

15. CCPA/CPRA Compliance (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:

• Right to know: What personal information we collect and how it is used
• Right to delete: Request deletion of your personal information
• Right to opt-out: We do not sell your personal information
• Non-discrimination: We will not discriminate against you for exercising your privacy rights

We do not sell or share your personal information as defined under the CCPA/CPRA.

16. Children's Privacy

CarpMarks is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete such information promptly.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, providing additional notice through the app.

Continued use of CarpMarks after changes indicates acceptance of the updated policy.

18. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us: