RiseCast Privacy Policy

This is written in plain language on purpose. If anything here is unclear, email privacy@risecast.fish and we will explain it.

What we collect

• Account: email address and display name, plus your Apple or Google account identifier if you sign in with those.
• Catches you log: species, size, fly, notes, optional photos, and the location where you logged them.
• Spots you save: a name, notes, and exact coordinates.
• Location: only when you use a feature that needs it (nearby streams, logging a catch, downloading an offline region). We do not track your location in the background.
• Conditions queries: which streams you look at, so we can cache data and improve rankings.
• Purchases: subscription status via RevenueCat and the app stores. We never see or store card numbers.
• Crash reports via Sentry (device model, OS version, stack traces).

Location is sensitive data and we treat it that way

Fishing spots are the most guarded secret in this sport. Our handling:

• Spots and catch locations are private by default. Nobody else can see them unless you explicitly share a spot with a private circle you created.
• Privacy is enforced in the database with Row Level Security, not just hidden in the app. Even our own client code cannot read another user's exact spot coordinates.
• We do not sell spot access and we do not operate a marketplace for it.
• Shared heat maps and any aggregate views use fuzzed grid cells (snapped to a coarse grid), never exact points.

Analytics is opt-in

Analytics (PostHog) is off until you turn it on in Settings. If you opt in, events describe feature usage ("opened stream detail", "logged a catch") and never include coordinates. Coordinates are scrubbed before any analytics event is sent.

What we never do

• We do not sell your data. To anyone. Ever.
• We do not share your spots, catches, or location with advertisers or data brokers.
• We do not use your data to train AI models. AI features send only the current conditions context needed for a suggestion.

Your controls

• Export: Settings > Account > Export my data gives you a machine-readable file of your catches, spots, and journal.
• Delete: Settings > Account > Delete account removes your account and personal data from our systems. Billing records are retained as long as tax and payment law requires, with personal fields minimized.
• Analytics can be toggled off at any time; historic opt-in events can be deleted on request.

Third parties we rely on

Supabase (database, auth, storage), RevenueCat plus Apple/Google (subscriptions), Anthropic (AI suggestions, no personal data sent), Sentry (crash reports), PostHog (opt-in analytics), MapTiler (map tiles), USGS/NOAA/Open-Meteo (public conditions data, your requests go through our cache).

Contact

privacy@risecast.fish for privacy questions, export, or deletion requests.