See features
Legal & Data Protection

Privacy Policy

Effective date: November 9, 2026

This Privacy Policy explains how TrophySnap (the fishing companion mobile app and the website at trophysnap.app) collects, uses, shares, and safeguards information. It applies to the TrophySnap product only. It does not cover PennyPatrol. For PennyPatrol’s Google API Limited Use disclosure, see PennyPatrol Privacy.

Effective date: November 9, 2026.

1. Who we are

TrophySnap is operated by the TrophySnap team. Contact: [email protected].

2. Information we collect

Depending on how you use TrophySnap and which permissions you grant, we may collect:

  • Account data: Name, email address, and account / user IDs when you create or sign in to an account (email and password and/or Sign in with Apple or other OAuth sign-in options supported by the app).
  • Photos and catch content: Catch photos you capture or choose from your library, plus related catch details you enter or that the app derives (for example species labels, measurements, metallic data-plate overlays, and logbook / trophy-vault entries).
  • Location: Approximate and/or precise GPS location when you allow it — used for tide charts, solunar / bite context, weather and rain radar, map features, and saving private fishing spots.
  • Device sensors: Barometric or motion-related readings when the OS and your settings permit, for fishing-condition context.
  • Purchase and subscription data: Purchase / entitlement status for premium features or credits processed through the App Store, Google Play, and our subscription partner (Qonversion), used to unlock features and help prevent fraud.
  • Device and advertising identifiers: Device identifiers that may be shared with advertising partners (including Google Mobile Ads / AdMob) for ads and measurement when the free experience includes advertising. On iOS, App Tracking Transparency may apply where required.
  • Local app data: Preferences and caches stored on your device (for example SharedPreferences and local SQLite / offline map or forecast caches) so features work offline or between sessions.
  • Support communications: If you email us (including from this website’s contact links), we receive whatever you send to [email protected]. This static website does not store form submissions on our servers.
  • Technical / usage signals: Basic technical information needed to run the app and backend (for example authentication tokens, API requests, and error responses). We do not operate a separate named crash-analytics product in the current app code beyond what platform or ad SDKs may collect as part of their own services.

3. How we use information

  • Provide core features: AI-assisted species identification and related catch analysis, measurement and plate overlays, logbook / trophy vault, private GPS spots, offline map cache, tide and solunar tools, weather and rain-radar context, and cloud sync when you are signed in.
  • Authenticate you, sync your account data across devices, and manage entitlements.
  • Send local notifications you enable (for example solunar / session cues or rain-related alerts).
  • Show ads and measure ad performance where advertising is part of the free experience.
  • Respond to support requests, secure the service, and prevent abuse or fraud related to accounts and purchases.
  • Comply with law and enforce our terms where applicable.

4. Third parties and service providers

TrophySnap uses the following categories of third-party services that may process data on our behalf or as independent controllers for their own products (subject to their privacy policies):

  • Supabase — authentication, database, storage, and edge functions used for account sync, catch/photo backup when signed in, quota checks, forecast proxying, account deletion, and subscription webhook handling.
  • Google Gemini / Google AI (via the app’s generative-AI integration) — analysis of catch photos and related fishing prompts (for example species identification and bite suggestions). Photos or text you submit for those features may be sent to Google’s AI APIs for processing.
  • WeatherAPI — weather / forecast data requested with location and date (typically via our backend).
  • WorldTides — tide height data requested with location and date (typically via our backend).
  • RainViewer — rain-radar map tiles.
  • Open-Meteo — precipitation / forecast checks used for rain-related alerts.
  • Map tile delivery — basemap / bathymetry tiles delivered through our map-tile worker and local PMTiles archives for offline or cached map use. Tile requests may include map coordinates needed to fetch the correct tiles.
  • Qonversion — in-app purchases and subscription entitlement management (with App Store / Google Play).
  • Google Mobile Ads (AdMob) — advertising and related device / ad identifiers where ads are shown.
  • Apple / Google sign-in — when you choose Sign in with Apple or other platform OAuth options.

We do not sell your personal email contents. Device and advertising identifiers may be shared with ad partners as described above and as reflected in store data-safety disclosures when the app is listed.

5. Legal bases (EEA/UK and similar)

Where GDPR or similar laws apply, we rely on one or more of: performance of a contract (providing the app features you request), consent (for example optional permissions, certain advertising/tracking where required), legitimate interests (securing the service, basic analytics needed to run the product, fraud prevention), and legal obligation where applicable. You may withdraw consent in device settings or by contacting us, without affecting prior lawful processing.

6. Retention

We keep account, catch, photo, and related synced data while your account remains active and as needed to provide the service. Local caches remain on your device until cleared or the app is uninstalled. After account deletion (see below), we delete or de-identify associated account data in our systems within a reasonable period, except where we must retain limited records for security, fraud prevention, accounting, or legal compliance. Third-party processors may retain data for their own periods under their policies.

Exact backup and log retention windows on our infrastructure may vary; if you need confirmation for a specific dataset, email us.

7. Account and data deletion

  • In-app: Open Settings, choose Delete Account, and confirm twice. The app calls our backend delete-account function, which removes your auth user (and associated synced data per our deletion flow), then signs you out and resets local settings.
  • By email: Write to [email protected] from the email on your account and ask us to delete your account and associated data. We may need to verify ownership before acting.

Deleting the app from your device alone does not delete cloud-synced account data.

8. Your rights (including GDPR and CCPA/CPRA basics)

Depending on where you live, you may have rights to access, correct, delete, or export personal data; to restrict or object to certain processing; to withdraw consent; and to lodge a complaint with a supervisory authority. California residents may have rights to know, delete, and correct personal information, and to opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising where those terms apply. TrophySnap’s use of advertising IDs with AdMob may constitute “sharing” under some California definitions when personalized ads are enabled — use OS-level ad / tracking controls (for example Limit Ad Tracking / App Tracking Transparency) and contact us to exercise rights.

To exercise rights, email [email protected]. We will respond as required by applicable law.

9. Children

TrophySnap is not directed at children under 13 (or the equivalent minimum age in your region). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

10. Security

We use industry-standard measures appropriate to a consumer app, including HTTPS for network traffic to our backends and access controls on cloud services. No method of transmission or storage is 100% secure. Please use a strong password and protect your device.

11. International transfers

We and our providers (including Supabase, Google, Qonversion, WeatherAPI, WorldTides, RainViewer, Open-Meteo, and ad platforms) may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses or the provider’s comparable transfer mechanisms. Your data may be subject to the laws of those countries.

12. Your choices

  • Deny or revoke camera, photos, location, motion, notification, or tracking permissions in system settings (some features will not work).
  • Stay signed out to limit cloud sync (local-only use still processes data on-device and may call AI or forecast APIs when you use those features).
  • Use in-app Delete Account or email us to remove your account.
  • Opt out of personalized ads via device settings where available.

13. Changes

We may update this Privacy Policy from time to time. We will change the effective date at the top of this page and, when changes are material, take additional steps as required by law. Continued use after an update means you accept the revised policy.

14. Contact

TrophySnap Privacy
Email: [email protected]

Related: PennyPatrol Privacy & Google API Limited Use