SuperCatch Privacy Policy
What we collect
- Your account - your email address, a hashed password (we never store the password itself), whether your email is verified, and your plan. You need an account and a plan to use the app, the chart included.
- Payment details - payments are not taken in the app yet. When they are, card and payment details are handled by the payment provider and are never stored by SuperCatch.
- Location - only while you are using the app, only after you tap Locate me, Send my position in Crew, or log a catch, and never in the background. The app never requests location at launch.
- Catch positions - where you caught a fish. These are recorded on your device. Whether they ever leave it is your choice, described below.
- Photos and voice notes - the catch photos and recordings you add, kept with the catch on your device and in your account. Photos are re-encoded on your device before anything is stored, which strips the camera's embedded metadata, including GPS. A voice note is kept as a recording; nothing transcribes or analyses it.
- Catch conditions - the sea state at the moment of each catch: every version of sea temperature and chloro, water clarity, sea height and swell, wind and gust, current, pressure, tide, moon, sun, depth and club grid square, each with its source and age.
- Trip records - trip details you enter.
- Crew and Insights - the messages you send to a Crew group you have joined, a position you choose to send with Send my position (it is a message: sent once, never updated or tracked), catches you choose to share, and the questions you ask Insights about your own catch history. Crew messages stay until they are deleted.
- Feedback you send - when you use Menu → Send feedback, we receive what you say (your voice recording, and the words if your phone turned them into text), a screenshot if you add one, a picture of the map, which layer and view you were looking at, the part of the map that was on your screen (its middle and zoom - wherever you were looking, not where you are), your phone model and iOS or Android version, the app version, your plan, and your email address if you are signed in. It never sends where you are. It is emailed to us and kept so we can act on it, and it is deleted with your account.
- Diagnostics - crash and error reports so faults on the water are not lost. Coordinates are scrubbed from these before they are even stored on the device, and our server request logs drop query strings so no coordinates reach them.
We use no third-party analytics or advertising kits, and we do not sell data - anyone's, ever.
Your catch positions stay private to you
Position sharing is a single switch in Settings, off by default. With it off, every catch still syncs in full - the species, the conditions, the whole record - but without its coordinates. Your own map still shows your spots, because they live on your phone. The honest trade, stated in the app where you make the choice: an unshared position has no backup, so a lost phone loses the spots, though the catches and their conditions survive.
Turning sharing on applies from that moment forward, never retroactively; sharing already-logged catches is a separate, explicit button. You can turn it off again at any time, and you can have every previously shared position removed from our server - the catches keep their conditions and lose their coordinates, and the calibration points they contributed are deleted with them.
When you share a catch with a Crew group, you choose for each share whether it carries the exact position, a general area, or no location.
One thing said plainly rather than hidden: when the app looks up the conditions at a spot - a tap on the map, or logging a catch - the coordinates of that spot ride inside the request so the server can answer it. Those lookups are answered and not stored.
What gets pooled
The research this app supports pools the conditions at capture - what the water was doing - never the position. Shared positions are used only for SuperCatch's own research into what water gamefish are actually caught in. They are not sold, not published, and not shared with anyone outside that research.
Seeing and deleting your data
Logged in, Settings → Download my data gives you one file with your catches and their full conditions record, positions where you shared them, trips, calibration points, photos and voice notes. Crew messages and feedback you have sent are not in that file - email us and we will send them.
To delete your account, email us at the address below and we will delete your account and data within 10 working days, and confirm when it is done. Deletion removes everything that identifies you: your account, your catches, your positions, your trip records, your photos, your voice notes and the feedback you sent, from storage. Aggregated research figures computed from pooled conditions - which never contained your position and cannot be linked back to you - may survive deletion.
Who processes it for us
Your data is held on SuperCatch's own systems, run on these service providers:
- Render - hosting and processing for our server.
- Vercel - delivery of the website and the app.
- Cloudflare R2 - storage for map data, photos, voice notes and feedback recordings and pictures.
- Supabase - our PostgreSQL database.
- Resend - sending account emails such as verification and password reset, and delivering feedback you send to us.
They process data only to provide their service to us. Some of them store data outside New Zealand; we choose providers that protect it to a standard comparable to the Privacy Act 2020.
How long we keep it
We keep your data while your account exists. Server request logs are retained for 30 days. If you stop using the app without deleting your account, your data simply remains yours, held, until you delete it or ask us to.
Your rights - Privacy Act 2020
SuperCatch is a New Zealand service and the New Zealand Privacy Act 2020 applies. You have the right to ask what personal information we hold about you, to receive a copy of it, to ask for it to be corrected, and to ask for it to be deleted. Use the download above, or email the address below - we will respond within 20 working days as the Act requires. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Users in Australia and the Pacific are covered by this same policy and have the same rights to access, correct and delete their data.
Contact
Privacy requests and questions: support@supercatch.co.nz