Privacy Policy
1. Introduction
FishProof ("we," "us," or "our"), a product of Morton Brands LLC, operates the FishProof mobile application (the "App"), which uses artificial intelligence to verify the species and estimate the weight of fish from photographs. This Privacy Policy describes how we collect, use, store, and share your personal information when you use our App. It applies to all users of the App on iOS, Android, and web platforms.
We are committed to protecting your privacy and handling your data transparently. By downloading, installing, or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use the App.
2. Information We Collect
We collect information in three categories: information you provide directly, information collected automatically, and information from third-party authentication providers.
2.1 Information You Provide
| Data Type | Description | Purpose |
|---|---|---|
| Fish photographs | Photos you take with the in-app camera or select from your photo library | Uploaded to our servers for AI-powered species identification and weight estimation |
| Species selection | The fish species you select or confirm during the estimation process | Used to apply species-specific weight formulas and calibration data |
| Journal notes | Optional notes you add to a catch (e.g., lure used, conditions) | Stored locally on your device and associated with your catch history |
| Birth month and year | The month and year of your birth, collected during onboarding | Used for age verification (COPPA compliance) and anonymized demographic analytics. Only the birth year is retained after verification |
| Home state | The U.S. state you select in Settings | Used to provide relevant state fishing regulations and state record comparisons |
| Estimation feedback | Thumbs up/down ratings and optional actual weight measurements | Used to improve AI estimation accuracy over time |
| Profile avatar | The avatar image you select from our preset gallery or upload | Displayed on your profile within the App |
2.2 Information Collected Automatically
| Data Type | Description | Purpose |
|---|---|---|
| Device location | GPS coordinates (latitude and longitude), collected only when you grant permission | Used to tag catch locations, suggest local fish species, and retrieve weather conditions |
| Photo metadata | EXIF data extracted from gallery photos, specifically the capture date and time | Used to display when the photo was taken and retrieve historical weather data |
| Weather data | Temperature, humidity, wind speed, barometric pressure, and conditions | Retrieved from the Open-Meteo API using your location; stored with your catch record |
| Usage data | Trial estimation count, trial start date, and onboarding completion status | Stored locally on your device to manage the free trial experience |
2.3 Information from Third-Party Authentication
When you sign in using Google or Apple, we receive the following information from the authentication provider:
| Data Type | Source | Purpose |
|---|---|---|
| Name | Google or Apple account | Displayed as your profile name in the App |
| Email address | Google or Apple account | Used for account identification and communication |
| Authentication identifier | OAuth provider | Used to securely link your account across sessions and devices |
We do not receive or store your Google or Apple account password. Authentication is handled through industry-standard OAuth 2.0 protocols.
3. How We Use Your Information
Core App Functionality. Your fish photographs are uploaded to our servers where our built-in AI model analyzes them to identify the species and estimate weight, length, and girth. The AI receives only the photograph, the species name, and your home state (if provided) — no other personal information is sent to the AI model. After analysis, your catch data (species, measurements, photo, location, weather, and journal notes) is stored so you can review your catch history and personal best records in the Trophy Room.
Age Verification. During onboarding, we collect your birth month and year to verify that you meet the minimum age requirement of 13 years (as required by the Children's Online Privacy Protection Act, COPPA). Users under 13 are blocked from creating an account. After verification, only your birth year is retained as a demographic data point; the birth month is used solely for the age calculation and is not stored separately.
Personalization and Demographics. Your home state selection allows us to display relevant state fishing regulations, slot limits, bag limits, and state record comparisons on your estimation results. Your unit preference (pounds or kilograms) is applied throughout the App. Your birth year is used in anonymized, aggregated form to understand the age demographics of our user community and inform product decisions. It is never displayed publicly or shared with third parties in identifiable form.
Accuracy Improvement. When you provide feedback on an estimation (thumbs up/down or an actual scale weight), that data is stored in our database and used to calibrate and improve our AI estimation models. Feedback data includes the species, estimated measurements, your rating, any actual measurements you provide, and a reference to the fish photo.
Account Management. Your name, email, and authentication identifier are used to maintain your account, enable sign-in across devices, and associate your catch data with your account.
Weather Context. Your location coordinates are sent to the Open-Meteo API (a free, open-source weather service) to retrieve current or historical weather conditions at the time and place of your catch. This weather data is displayed alongside your catch record.
4. How We Store Your Information
4.1 Server-Side Storage
| Data | Storage Location | Retention |
|---|---|---|
| Fish photographs (full-res and thumbnails) | Amazon S3-compatible cloud storage | Retained indefinitely until you delete the catch or your account |
| Account information (name, email, login method) | MySQL database on secure infrastructure | Retained until you delete your account |
| Estimation feedback | MySQL database | Retained indefinitely for calibration (anonymized after account deletion) |
| Photo-to-user tracking records | MySQL database | Retained until you delete your account |
Fish photographs are stored persistently on our servers so that your catch history and Trophy Room are accessible across devices. When you upload a photo, we generate a compressed thumbnail (400 pixels wide) for efficient display in list views, while the original full-resolution image is preserved for detailed viewing and sharing.
4.2 On-Device Storage
The following data is stored locally on your device using encrypted local storage and is never transmitted to our servers unless explicitly noted: catch history records (species, measurements, photo URLs, location, weather, journal notes, date), user preferences (home state, unit preference, notification settings, selected avatar, birth year), onboarding completion status, trial usage data (estimation count, start date), and recently used species list. This local data persists until you uninstall the App, delete your account through the App's Settings, or manually clear the App's data through your device settings.
5. How We Share Your Information
We do not sell your personal information. We do not share your data with advertisers, data brokers, or any third parties for marketing purposes. The App does not contain any advertising SDKs or tracking pixels.
We share limited data with the following service providers solely to operate the App:
| Service Provider | Data Shared | Purpose |
|---|---|---|
| Open-Meteo (open-meteo.com) | Latitude, longitude, and date | Weather data retrieval; no user identification is sent |
| Google (via OAuth) | Standard OAuth authentication exchange | Account sign-in only; we receive name and email |
| Apple (via Sign in with Apple) | Standard OAuth authentication exchange | Account sign-in only; we receive name and email |
| Cloud infrastructure provider | Fish photos, account data, feedback data | Secure hosting and storage of App data |
We may also disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of FishProof, our users, or the public.
6. Your Rights and Choices
6.1 Account Deletion
You can delete your account at any time through the App by navigating to Settings > Delete My Account. Account deletion is a two-step process requiring confirmation. When you delete your account, all your fish photographs (full-resolution and thumbnails) are queued for deletion from our cloud storage, your account record is removed from our database, all locally stored data (catch history, preferences, trial data) is cleared from your device, and an anonymized audit record is retained solely for operational integrity. Account deletion is permanent and cannot be undone.
6.2 Device Permissions
You control the following permissions through your device's settings:
| Permission | What It Controls | How to Manage |
|---|---|---|
| Camera | Ability to take fish photos within the App | Device Settings > FishProof > Camera |
| Photo Library | Ability to select existing photos and save watermarked images | Device Settings > FishProof > Photos |
| Location | Catch location tagging, species suggestions, and weather | Device Settings > FishProof > Location |
| Notifications | Push notification delivery | Device Settings > FishProof > Notifications |
Denying camera or photo library access will prevent you from using the core estimation feature. Denying location access will disable location-based features (catch mapping, weather, local species suggestions) but will not prevent estimation.
6.3 Data Portability
Your catch history is stored locally on your device and can be viewed at any time in the Trophy Room. We do not currently offer a bulk data export feature, but you can share individual catch records (including the watermarked photo) using the App's share functionality.
6.4 California Residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to delete your personal information (via the in-app account deletion feature); to opt out of the sale of personal information — we do not sell personal information; and to non-discrimination for exercising your privacy rights. To exercise these rights, use the in-app account deletion feature or contact us at the email address listed in Section 11.
6.5 European Residents (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing, and port your data. Our legal basis for processing your data is your consent (for optional features like location) and the performance of a contract (for core App functionality). To exercise these rights, contact us at the email address listed in Section 11.
7. Data Security
We implement reasonable technical and organizational measures to protect your personal information. All data transmitted between the App and our servers uses HTTPS/TLS encryption. Session tokens are stored in the device's secure keychain (iOS) or encrypted storage (Android). Server-side API endpoints require authenticated sessions, and admin features are restricted by role. Each user's photos are stored with unique keys and can only be accessed through authenticated API calls.
No method of electronic transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.
8. Children's Privacy
The App is not directed to children under the age of 13. During onboarding, we require users to provide their birth month and year to verify they meet the minimum age requirement. Users who indicate they are under 13 are blocked from creating an account and cannot proceed past the onboarding screen. We do not knowingly collect or retain any personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at the email address listed in Section 11.
9. AI and Automated Processing
The App uses artificial intelligence to analyze fish photographs and produce weight, length, and girth estimates. This processing occurs on our servers using a built-in AI model — your photos are not sent to any external AI service or third-party API.
The AI analysis is provided as an estimate only and should not be relied upon for tournament weigh-ins, legal compliance with fishing regulations, or any purpose requiring precise measurements. We encourage users to verify current fishing regulations with their state wildlife agency.
When you provide feedback on an estimation (rating accuracy or entering an actual weight), that feedback is used to improve the AI model's accuracy for all users. Feedback data is associated with the species and estimation context but is not used to build individual user profiles.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy and, where appropriate, providing notice through the App. We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
12. Summary of Data Practices
The following table provides a high-level summary of our data practices for quick reference:
| Category | Data Collected | Stored Where | Shared With | Retention |
|---|---|---|---|---|
| Account | Name, email, login method | Server (database) | Auth provider (OAuth only) | Until account deletion |
| Photos | Fish photographs, thumbnails | Server (S3 cloud) | AI model (server-side only) | Until catch/account deletion |
| Location | GPS coordinates | Device (local) | Open-Meteo (coords only) | Until app data cleared |
| Catch Data | Species, measurements, weather, notes | Device (local) | Not shared | Until app data cleared |
| Feedback | Rating, actual weight, species context | Server (database) | Not shared | Indefinitely (calibration) |
| Preferences | Home state, units, avatar, notifications | Device (local) | Not shared | Until app data cleared |
This Privacy Policy was prepared for FishProof, a product of Morton Brands LLC, and is specific to the App's architecture and data practices as of the date listed above.