Privacy by default.
Short version: Your tank journal stays on your device. FISH has no account, ads, third-party analytics, location access, contacts access, or photo access. Optional FISH+ AI sends only the question and tank facts you review before sending.
Who this policy covers
This policy covers the FISH iOS app, its support pages, and the optional FISH+ advisor service. “We” means the publisher identified on FISH’s App Store product page. App Store billing is handled by Apple.
Data kept on your device
Tank names, volume, filter details, livestock, plants, water tests, maintenance, symptoms, notes, reminders, and achievements are stored locally using Apple’s on-device data storage. We do not receive this data during normal app use. Deleting the app or using “Erase all local data” removes it, subject to device backups managed by you and Apple.
Optional AI advisor
The advisor is off-device processing and is used only after you choose “Review & send.” The review screen shows the exact categories sent: your question, tank setup, livestock groups, plant summary, latest water test, recent maintenance, active symptom labels, and the deterministic care summary.
We do not add your name, email, postal address, precise location, contacts, photos, advertising identifier, or a general device identifier. A verified App Store original transaction identifier is sent to our service to confirm FISH+ access. Our service converts it to a salted one-way hash for a UTC daily usage counter.
| Recipient | Purpose | Retention controlled by FISH |
|---|---|---|
| Apple | Subscription purchase, entitlement, and server-side verification | Apple controls its transaction records under its own policy |
| Cloudflare | Runs the small advisor gateway and daily quota database | Only a salted transaction hash, UTC date, and request count are stored by the app service |
| Google Gemini API | Processes the reviewed prompt to return an explanation or draft custom-fish estimate | FISH does not save prompts or answers on its server; Google’s API terms and configured data-use settings also apply |
Service logs and security
The advisor gateway logs only a random request ID, route, status code, and duration. It is designed not to log questions, tank facts, transaction identifiers, or request bodies. Requests are size-limited, subscription-verified, rate-limited, and encrypted in transit.
No tracking or sale
FISH does not track you across apps or websites, sell personal data, serve ads, or use your information for targeted advertising. The app does not include advertising or third-party analytics SDKs.
Your choices
- Use the complete core care experience without an account or AI.
- Review every advisor payload and cancel before it is sent.
- Export your local journal with FISH+.
- Erase all local FISH data from the app’s Settings screen.
- Manage or cancel a subscription in your Apple Account subscription settings.
Children, health, and animal welfare
FISH is a general aquarium-husbandry tool, not a veterinary service. It is not directed to children under 13. Do not include personal information in free-text AI questions. If animal welfare is at immediate risk, contact a qualified aquatic veterinarian or experienced local specialist.
International processing
If you use the optional advisor, service providers may process the reviewed data in countries outside your own. Their safeguards and contractual terms apply. Core on-device use does not send your aquarium journal to us.
Changes and contact
Material changes will be posted here with a new effective date. For privacy or support questions, use the contact method on our support page. The public support contact must be configured before App Store release.