Privacy Policy — FL Offline Fish Check

Version 1.1 Last updated: 2026-07-13

APPFLOW LLC ("APPFLOW LLC", "we") respects your privacy. This policy describes what data our FL Offline Fish Check mobile app (the "App") collects, how it uses it, and what rights you have over it.

1. Guiding principle: offline-first

FL Offline Fish Check is designed to work fully offline and without sending user personal data to our servers. The vast majority of processing happens locally on your device. We only send information to third parties when strictly necessary for the functionality you chose to enable (e.g., subscription payments).

2. Data the App processes locally

These data DO NOT leave your device:

a) GPS location: if you grant the permission, the App uses your location — when you open the App and when you use the zone and map features — to detect the applicable fishing zone (Atlantic vs Gulf vs state/federal waters). The coordinate is processed only in RAM, not saved to disk, and not transmitted. Location is never accessed in the background.

b) Photos selected or taken for species identification: processed locally with the embedded AI model. Not stored on our servers; not uploaded anywhere outside your device. If you choose to save a catch with its photo, the photo is stored locally in the App's private storage. If you choose to share a capture or its photos, they are sent only through the app you pick in the system share sheet (e.g., WhatsApp) — sharing happens only when you initiate it and never goes through our servers.

c) Catches, fishing spots, and records (species, sizes, quantities, dates, waypoints): stored locally in the device's SQLite and SharedPreferences, accessible only to the App. Not backed up to the cloud.

d) License wallet: images of your fishing license or permits that you add to the wallet are stored locally on your device, encrypted with AES-256-GCM. They are never uploaded.

e) Preferences (language, selected zone, UI settings): stored locally.

f) Backups you create: the App can export an encrypted backup file (protected by a passphrase you choose) containing your catches, spots, wallet, and photos. The file is created locally and saved to the location you pick; it never leaves your device unless you move or share it yourself. Restoring reads that file locally.

If you uninstall the App, all of this data is deleted with it — except backup files you exported to a location outside the App, which remain where you saved them.

3. Data third parties process on our behalf

When you use specific features, limited data is shared with third parties that act as processors or independent controllers:

3.1 Subscriptions (RevenueCat + Google Play + Apple App Store)

To manage your Premium subscription, we use:

• RevenueCat (RevenueCat, Inc.). Receives an anonymous device identifier (not your name, not your email, not your exact Google account), the plan type you bought, start/end/renewal dates, and cancellation events. This lets the App know if your Premium is active without us needing to store data on our own servers.
• Google Play (Google LLC) for Android payment processing. Google handles your payment information per its own policy.
• Apple App Store (Apple Inc.) for iOS payment processing. Apple's policies apply.

APPFLOW LLC does not see or store your credit card information. The transaction is handled by Google or Apple directly.

Third-party privacy:

• RevenueCat: https://www.revenuecat.com/privacy/
• Google: https://policies.google.com/privacy
• Apple: https://www.apple.com/legal/privacy/

3.2 Crash reports (future)

In future versions we may integrate a crash reporting service (e.g., Sentry or Firebase Crashlytics) to detect production errors. If we do, this policy will be updated and we'll notify the change. These services collect device information (model, Android/iOS version, anonymized stacktrace) only when the App crashes.

4. What we do NOT collect

To be explicit:

• We do not require a user account. We don't ask for email, name, phone, or password.
• We do not have a backend server that stores your data. There is no cloud database with your catches, photos, or identifications.
• We do not sell data to third parties. We do not use your data for our own or third-party advertising.
• We do not use cookies, pixels, or marketing trackers.
• We do not access your contact list, calendar, messages, or background location. Location is consulted only in the foreground — when you open the App or use the zone features — and only if you granted the permission.

5. Device permissions

The App may request the following permissions:

All are optional. The App works without them, although some features are disabled.

6. Data retention

• Local data: persists until you uninstall the App or clear the package's data from Android/iOS Settings.
• RevenueCat data: persists while your subscription is active and for the period RevenueCat retains for audit and purchase history (typically several years, per their policy).

7. User rights

You have the right to:

a) Access the data the App processes: it's already on your device under Settings > Apps > FL Offline Fish Check > Storage on Android.

b) Delete all local data: uninstall the App, or use "Clear data" from system settings.

c) Cancel the Premium subscription at any time from the Google Play or App Store account. This stops future renewals.

d) Request RevenueCat to delete your subscription data by contacting them directly (https://www.revenuecat.com/privacy/).

e) If you reside in the European Union, United Kingdom, California, or similar jurisdiction, you have additional rights (portability, rectification, objection, etc.). Write to contact@appflowllc.com to exercise them.

8. Minors

The App is not directed at persons under 13 years of age. If we learn we have collected a minor's data without parental consent, we will delete that information.

9. International transfers

RevenueCat, Google, and Apple may process data on servers outside your country of residence (typically the United States). These transfers are governed by each provider's privacy policy.

10. Security

We implement reasonable measures to protect data on your device:

• The AI model and sensitive package data are encrypted with AES-256-GCM.
• Code is obfuscated.
• We do not use server storage for your data.

No system is 100% secure; in case of an incident affecting user data, we will notify through reasonable channels.

11. Changes to this Policy

We may update this Policy. Significant changes will be notified inside the App. The "Last updated" date at the top reflects the current version.

12. Contact

For privacy questions, write to:

APPFLOW LLC contact@appflowllc.com

By using FL Offline Fish Check, you confirm that you have read and understood this Privacy Policy.