Privacy Policy
Effective date: October 17, 2026
1. Who processes your data
The TODOFISHING app (the “App”) is developed and maintained by Antonina Tsurankova, an individual based in Ukraine.
Contact for any questions about your data: [email protected]
We respond to such requests within 30 days.
2. The key points
We do not sell your data and we do not show ads. We do not share data with advertising networks. User behavior analytics is not enabled in the App.
Two points deserve special attention because they are not obvious:
- Photos of your catches are sent to a third-party artificial intelligence provider to identify the fish species and to check that the photo contains no prohibited content. See section 5.
- We store the exact coordinates of where you fished, but never show them to other users. See section 4.
3. What data we collect
3.1. Account data. When you sign in with Google or Apple, we receive your email address, name and, if available, profile photo. Your Google or Apple password is never shared with us and is unknown to us.
3.2. Profile data that you enter yourself: username (unique), display name, country and city, “about me” text, profile image, links to your external social networks. Country and city can be detected automatically from your location with your confirmation; you can correct them manually and hide them from other users.
3.3. Catch data: photo of the fish, identified species, estimated weight, date and time, points awarded; optionally — tackle, bait, fishing method, your comment; automatically — the weather at the time of the catch; if you grant permission — the location coordinates and the water body determined from them.
3.4. Technical data: device identifier for push notifications, app and operating system version, interface language, error reports. We record requests to our server (including time and IP address) — this is necessary to limit load and detect abuse.
3.5. Subscription data: whether you have an active subscription and its term. Payment data — card number, bank details — is not shared with us and is not accessible to us: payment is handled entirely by Apple or Google.
3.6. Requests: the content of your messages to support and your reports about other users.
4. Location
Permission to access your location is not requested when the App starts, but when you open the add-catch screen or tap “Detect automatically” when choosing your city in the profile.
Location is optional. Without it the App works, the catch is saved and points for the catch are awarded in full. Only features tied to a specific water body become unavailable — water-body achievements and adding a catch to the water-body map (see section 8): for these we need to know where exactly you were fishing.
The exact coordinates of your catch are visible to no one but you. Other users only see the name of the water body the catch is linked to, and only if you published the catch. We understand why anglers don’t like to reveal their spots, and built the App accordingly.
The App does not track your location in the background. Coordinates are recorded only at the moment a catch is added. Exception: if a catch had no location and within 30 minutes of taking the photo you tap “Add to the water-body map”, the App takes your current location once to determine the water body and saves it as the catch location.
City detection. The city in your profile can be detected automatically from your location — only when you tap “Detect automatically”. The city name is provided by the operating system’s built-in service (Apple on iOS, Google on Android); the coordinates are not sent to the TODOFISHING server for this and are not stored. You can skip this button and choose your country and city from a list. City reference data — GeoNames (CC BY 4.0 license).
5. Photos and artificial intelligence processing
When you add a catch, the photo is sent to our server and from there to the artificial intelligence service of Anthropic PBC (USA). This happens twice:
- Content check — an automatic check that the photo contains no prohibited content (see section 10).
- Species identification and weight estimation — the model compares the photo with a reference list of fish species of Ukraine and returns the most likely options.
Before each recognition the App shows a confirmation step, and you can decline — in that case nothing is sent.
Your name, email, coordinates or any other information about you are not sent along with the photo — only the image itself and the request text.
Under the terms on which we work with Anthropic, the images sent are not used to train models.
Profile images go through the same automatic content check.
6. Why we process data and on what legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Create and maintain your account | So that the App works | Performance of a contract with you (acceptance of the Terms of Use) |
| Identify the fish species and weight, award points | The App’s core function | Performance of a contract |
| Show your posts to others | The App’s social function | Performance of a contract; publishing is your choice |
| Record catch coordinates | Water-body achievements, your personal statistics | Your consent (location permission), revocable in device settings |
| Check photos for prohibited content | User safety, compliance with app store requirements | Our legitimate interest |
| Limit request frequency, keep logs | Protection against abuse and points fraud | Our legitimate interest |
| Send push notifications | Informing you about events in the App | Your consent, revocable in the App settings |
| Keep subscription records | Providing paid features | Performance of a contract |
7. Who we share data with
We use the following service providers. Each receives only what is necessary for its part of the work.
| Provider | What it receives | Location |
|---|---|---|
| Supabase (database, file storage, sign-in) | All App data | Servers in the European Union (Frankfurt, Germany) |
| Anthropic PBC (recognition, content check) | Only catch photos and profile images | USA |
| Google Firebase (push notification delivery) | Device identifier and notification text | USA / EU |
| Google, Apple (sign-in, subscription payment) | Your account and payment data — on their side | USA / EU |
| RevenueCat (subscription records) | User identifier and subscription status | USA |
We do not share data with anyone else, except where required by law or where necessary to protect the rights and safety of users.
Transfers outside the EU. Some providers are located in the USA. Transfers are made on the basis of the standard contractual clauses provided by these providers.
8. What other users see
Publicly available: your username, display name, profile image, bio, external links, achievements earned, total points and leaderboard position, and the catches you have published.
Country and city can be hidden in settings.
Visible to no one but you: the exact coordinates of your catches, your journal and statistics (except what you have made public yourself), your email address, subscription data, your support requests and reports.
A published catch can be switched to hidden — it stays in your journal and continues to count toward points and the leaderboard, but disappears from the feed and from your public profile.
Water-body map. A catch appears on the water-body map only if you tap “Add to the water-body map” yourself. Other users then see your username, the fish species, weight, bait or lure, the date of the catch and the name of the water body. The exact spot of the catch on the water body is shown to no one. Anonymized water-body statistics are calculated from catches on the map: which species are caught there, records, average weight, baits, time of day and months. A catch added to the map can only be removed from it by deleting the catch itself. If such a catch is later switched to hidden, it disappears from the water-body feed with your username, but remains in the anonymized statistics and records.
9. How long we keep data
Account data and App content are kept for as long as your account exists.
You can delete any of your catches. Deletion is permanent: the record itself, the photo, its comments and likes are removed, the points awarded for it are deducted, and your leaderboard position is recalculated.
Achievements earned earlier are kept — an achievement records an event that happened and shows its date. The exception is contestable titles such as “biggest fish on the water body”: they always belong to whoever has the best result at the moment, so after deletion such a title may pass to another user.
You can also delete your entire account at any time — then all data is deleted without exception.
Technical server logs are kept for up to 90 days.
Correspondence with support is kept for up to 12 months after the request is closed.
10. Content rules and moderation
Photos are checked automatically before publishing. In addition, any user can report a post or comment.
We review reports manually. Following review, content may be removed and the account blocked. We notify about a block by email to the address in the account.
Links in comments are prohibited and removed automatically.
11. Your rights
You have the right to:
- obtain a copy of the data we hold about you;
- correct inaccurate data — most fields can be edited directly in the App;
- delete an individual catch — in the journal, on the catch card;
- delete your account and all related data — “You” → “Settings” → “Delete account”. Deletion is irreversible and immediate: the profile, all catches, photos, comments, achievements and points are deleted;
- withdraw consent to location (device settings) and push notifications (App settings);
- object to processing based on legitimate interest;
- lodge a complaint with a data protection supervisory authority.
For any of these, write to [email protected].
Please note: subscriptions are cancelled not by us but in your Apple or Google account settings, where you subscribed.
12. Age restrictions
The App is intended for persons over 16 years of age and is not directed at children. We do not knowingly collect data from persons under 16. If you become aware that an account is used by a child under 16, write to us at [email protected] — we will delete that account.
13. Security
Access to data is restricted at the database level: a user can only retrieve the records they are entitled to. Points are awarded and all checks are performed exclusively on the server — it is impossible to change your result from the App. The connection to the server is encrypted. Access keys to third-party services are not embedded in the App.
No system is perfectly secure, and we cannot guarantee the complete security of transmitted data.
14. Changes to this policy
For material changes we will notify you in the App at least 14 days before they take effect. The date of the last change is shown at the top of this document.