Privacy Policy — FL Offline Fish Check

Version 1.0 — DRAFT Last updated: 2026-06-04

⚠️ This document is a draft written without professional legal advice. Before publishing to production, it must be reviewed by an attorney. If the App is distributed in the European Union, United Kingdom, California, or any other jurisdiction with specific privacy laws (GDPR, UK GDPR, CCPA, LFPDPPP, etc.), additional clauses may be required.

APPFLOW LLC ("APPFLOW LLC", "we") respects your privacy. This policy describes what data our FL Offline Fish Check mobile app (the "App") collects, how it uses it, and what rights you have over it.

1. Guiding principle: offline-first

FL Offline Fish Check is designed to work fully offline and without sending user personal data to our servers. The vast majority of processing happens locally on your device. We only send information to third parties when strictly necessary for the functionality you chose to enable (e.g., subscription payments).

2. Data the App processes locally

These data DO NOT leave your device:

a) GPS location: if you grant the permission, the App uses your location to detect the applicable fishing zone (Atlantic vs Gulf vs state/federal waters). The coordinate is processed only in RAM, not saved to disk, and not transmitted.

b) Photos selected or taken for species identification: processed locally with the embedded AI model and discarded when leaving the screen. Not stored on our servers; not uploaded anywhere outside your device.

c) Catches recorded in the fishing calculator (species, sizes, quantities, date): stored locally in SharedPreferences and the device's SQLite, accessible only to the App. Not backed up to the cloud.

d) Preferences (language, selected zone, UI settings): stored locally.

If you uninstall the App, all of this data is deleted with it.

3. Data third parties process on our behalf

When you use specific features, limited data is shared with third parties that act as processors or independent controllers:

3.1 Subscriptions (RevenueCat + Google Play + Apple App Store)

To manage your Premium subscription, we use:

• RevenueCat (RevenueCat, Inc.). Receives an anonymous device identifier (not your name, not your email, not your exact Google account), the plan type you bought, start/end/renewal dates, and cancellation events. This lets the App know if your Premium is active without us needing to store data on our own servers.
• Google Play (Google LLC) for Android payment processing. Google handles your payment information per its own policy.
• Apple App Store (Apple Inc.) for iOS payment processing, if applicable. Apple's policies apply.

APPFLOW LLC does not see or store your credit card information. The transaction is handled by Google or Apple directly.

Third-party privacy:

• RevenueCat: https://www.revenuecat.com/privacy/
• Google: https://policies.google.com/privacy
• Apple: https://www.apple.com/legal/privacy/

3.2 Crash reports (future)

In future versions we may integrate a crash reporting service (e.g., Sentry or Firebase Crashlytics) to detect production errors. If we do, this policy will be updated and we'll notify the change. These services collect device information (model, Android/iOS version, anonymized stacktrace) only when the App crashes.

4. What we do NOT collect

To be explicit:

• We do not require a user account. We don't ask for email, name, phone, or password.
• We do not have a backend server that stores your data. There is no cloud database with your catches, photos, or identifications.
• We do not sell data to third parties. We do not use your data for our own or third-party advertising.
• We do not use cookies, pixels, or marketing trackers.
• We do not access your contact list, calendar, messages, or background location. Location is consulted only when you open the zone feature and grant the permission.

5. Device permissions

The App may request the following permissions:

All are optional. The App works without them, although some features are disabled.

6. Data retention

• Local data: persists until you uninstall the App or clear the package's data from Android/iOS Settings.
• RevenueCat data: persists while your subscription is active and for the period RevenueCat retains for audit and purchase history (typically several years, per their policy).

7. User rights

You have the right to:

a) Access the data the App processes: it's already on your device under Settings > Apps > FL Offline Fish Check > Storage on Android.

b) Delete all local data: uninstall the App, or use "Clear data" from system settings.

c) Cancel the Premium subscription at any time from the Google Play or App Store account. This stops future renewals.

d) Request RevenueCat to delete your subscription data by contacting them directly (https://www.revenuecat.com/privacy/).

e) If you reside in the European Union, United Kingdom, California, or similar jurisdiction, you have additional rights (portability, rectification, objection, etc.). Write to contact@appflowllc.com to exercise them.

8. Minors

The App is not directed at persons under 13 years of age. If we learn we have collected a minor's data without parental consent, we will delete that information.

9. International transfers

RevenueCat, Google, and Apple may process data on servers outside your country of residence (typically the United States). These transfers are governed by each provider's privacy policy.

10. Security

We implement reasonable measures to protect data on your device:

• The AI model and sensitive package data are encrypted with AES-256-GCM.
• Code is obfuscated.
• We do not use server storage for your data.

No system is 100% secure; in case of an incident affecting user data, we will notify through reasonable channels.

11. Changes to this Policy

We may update this Policy. Significant changes will be notified inside the App. The "Last updated" date at the top reflects the current version.

12. Contact

For privacy questions, write to:

APPFLOW LLC contact@appflowllc.com

By using FL Offline Fish Check, you confirm that you have read and understood this Privacy Policy.