# Privacy Policy for Fishing Lure Analyzer

**Last Updated:** December 20, 2024

**Effective Date:** December 20, 2024

## Introduction

Welcome to Fishing Lure Analyzer ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding data collection and usage when you use our mobile application ("App").

By using our App, you agree to the collection and use of information in accordance with this policy.

## Information We Collect

### 1. Account Information
- **Email Address**: Collected during registration to create your user account
- **Password**: Securely hashed and stored (we cannot see your password)
- **Full Name**: Optional information you provide during signup

### 2. Images and Photos
- **Lure Photos**: Images you take or select from your photo library for AI analysis
- **Catch Photos**: Images you upload when logging fishing catches
- These images are processed by AI services and stored in your account

### 3. Fishing Data
- Lure analysis results and details
- Catch records (fish species, weight, length, location, date)
- Tackle box organization data
- Favorite lures and preferences

### 4. Device Information
- Device type and operating system
- App version
- Unique device identifiers (for authentication and analytics)

### 5. Usage Data
- Number of lure analyses performed
- App features used
- Subscription status and usage
- Error logs and crash reports (to improve app stability)

## How We Use Your Information

### Primary Uses:
1. **AI Analysis**: Process your lure photos using OpenAI's GPT-4 Vision API to identify lures and provide fishing information
2. **Cloud Sync**: Store your data in Supabase cloud database so you can access it across devices
3. **User Authentication**: Verify your identity and secure your account
4. **App Functionality**: Provide core features like tackle box management and catch tracking
5. **Customer Support**: Respond to your inquiries and provide technical assistance

### Analytics and Improvement:
- Analyze app usage to improve features and user experience
- Identify and fix bugs through crash reports
- Understand user preferences to enhance the app

### Legal Compliance:
- Comply with legal obligations
- Protect our rights and prevent fraud
- Enforce our Terms of Service

## Third-Party Services

We use the following third-party services that may collect or process your information:

### 1. **OpenAI (GPT-4 Vision API)**
- **Purpose**: AI-powered lure identification and analysis
- **Data Sent**: Images of fishing lures (temporarily processed)
- **Privacy Policy**: https://openai.com/policies/privacy-policy
- **Note**: OpenAI processes images but does not store them for training purposes (we use their API)

### 2. **Supabase**
- **Purpose**: Cloud database, authentication, and file storage
- **Data Stored**: User accounts, lure analyses, catch records, uploaded images
- **Privacy Policy**: https://supabase.com/privacy
- **Location**: Data stored in secure cloud infrastructure

### 3. **RevenueCat** (if using subscriptions)
- **Purpose**: Subscription management and payment processing
- **Data Shared**: Subscription status, purchase history
- **Privacy Policy**: https://www.revenuecat.com/privacy

### 4. **App Store Providers** (Apple/Google)
- **Purpose**: App distribution and in-app purchases
- **Data Collected**: Standard app store analytics and purchase data
- **Privacy Policies**: 
  - Apple: https://www.apple.com/privacy/
  - Google: https://policies.google.com/privacy

## Data Storage and Security

### Where Your Data is Stored:
- **User Accounts**: Stored securely in Supabase cloud database
- **Images**: Stored in Supabase cloud storage (encrypted)
- **Local Data**: Some data cached locally on your device for offline access

### Security Measures:
- **Encryption**: All data transmitted over HTTPS/TLS
- **Authentication**: Secure password hashing (bcrypt) and session tokens
- **Database Security**: Row-Level Security (RLS) policies ensure users can only access their own data
- **API Keys**: Sensitive API keys stored only on secure backend servers, never in the mobile app

### Data Retention:
- Your data is retained as long as your account is active
- You can delete your account and all associated data at any time (see "Your Rights" below)
- Some data may be retained for legal compliance (e.g., transaction records)

## Permissions We Request

### Camera Permission
- **Why**: To take photos of fishing lures for AI analysis
- **When**: Only when you choose to use the camera feature
- **You can deny**: You can use the app by selecting photos from your library instead

### Photo Library Permission
- **Why**: To select existing photos from your library for analysis
- **When**: Only when you choose to select a photo
- **You can deny**: You can use the camera feature instead

### Network Access
- **Why**: Required to sync data, perform AI analysis, and authenticate users
- **Required**: Essential for app functionality

## Your Rights and Choices

### Access Your Data
- View all your lure analyses, catches, and account information within the app
- Export your data (feature available in Settings)

### Delete Your Data
- Delete individual lures or catches from within the app
- Delete your entire account and all associated data:
  - Go to Settings → Delete Account
  - Or contact us at mytackleboxapp@gmail.com

### Control Permissions
- Manage camera and photo library permissions in your device settings
- Withdraw permissions at any time (some features may become unavailable)

### Opt-Out of Analytics
- Analytics collection can be disabled in app settings
- Crash reporting cannot be disabled as it's essential for app stability

### Unsubscribe
- Cancel your subscription at any time through:
  - App Store/Play Store subscription management
  - App Settings → Manage Subscription

## Children's Privacy

Our App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover we have collected information from a child under 13, we will delete it promptly.

## International Users

If you are using our App from outside the United States, please note that your data may be transferred to, stored, and processed in the United States or other countries where our third-party service providers operate. By using our App, you consent to this transfer.

## California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at mytackleboxapp@gmail.com.

## European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights:
- Right to access your personal data
- Right to rectify inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent

To exercise these rights, contact us at mytackleboxapp@gmail.com.

## Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will:
1. Notify affected users within 72 hours (if required by law)
2. Provide details about what data was compromised
3. Explain steps we're taking to address the breach
4. Recommend actions you should take

## Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy in the app
- Updating the "Last Updated" date at the top
- Sending an email notification (for material changes)

Your continued use of the App after changes become effective constitutes acceptance of the updated Privacy Policy.

## Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

**Email:** mytackleboxapp@gmail.com

---

## Summary for Quick Reference

**What we collect:**
- Email, name, photos, fishing data

**How we use it:**
- AI analysis, cloud sync, app functionality

**Third parties:**
- OpenAI (AI), Supabase (database), RevenueCat (subscriptions)

**Your rights:**
- Access, delete, export your data at any time

**Security:**
- Encrypted storage, secure authentication, RLS policies

**Questions?**
- Email: mytackleboxapp@gmail.com

---

*This Privacy Policy is effective as of December 20, 2024 and applies to all users of Fishing Lure Analyzer.*