Last updated: 5 July 2026.
This policy explains what personal data CarnaFish (“we”) collects, why, and what your rights are. It applies to the CarnaFish mobile app and the carnafish.com website.
1. Data controller
CarnaFish is the controller of the data collected via the app and the website. For any question about your data: contact@carnafish.com.
2. Data we collect
- Account: email address, password (encrypted), username.
- Your catches: photos, species, size, lure, spot, date and conditions you log in the Logbook.
- Location: a one-off GPS position, only when you analyse a spot or log a catch, for weather and to identify the water body. You can decline this access.
- Beta list: the email address you provide in the sign-up form.
- Technical data: information needed for the app to work (device type, error logs).
3. Why we use it
- Provide the service: AI spot analysis, game plan, Logbook, maps, contests.
- Manage your account and contest participation.
- Improve recommendations from your trip history.
- Contact you about the beta (if you signed up).
Legal basis: performance of the service you request and, for the beta list, your consent.
4. Providers and sharing
To run the app, we rely on technical providers that process some data on our behalf:
- Supabase — database hosting and photo storage.
- Anthropic (Claude) — AI analysis of the spot photo; the photo is not used to identify you.
- Open-Meteo — weather from approximate coordinates.
- OpenStreetMap / Nominatim — water body and locality identification.
We do not sell your data. Your spots are private by default: they are only shared with the friends you add yourself, and never made public without your action.
5. Retention
Your data is kept as long as your account is active. You can delete a catch, a photo or your entire account at any time; the associated data is then erased.
6. Your rights
Under the GDPR, you have the right to access, rectify, erase, port and object to your data. You can exercise these rights in the app (edit/delete) or by writing to contact@carnafish.com. You can also lodge a complaint with your data protection authority.
7. Cookies
The carnafish.com website uses no advertising cookies and no third-party profiling trackers.
8. Security
Passwords are encrypted and traffic is secured (HTTPS). No system is infallible, so let us know if you spot a problem.
9. Changes
This policy may evolve; the update date at the top indicates the latest version.