Privacy Policy

Last updated: October 6, 2026

COUNT THE CATCH operates this website and mobile application (the Service). This notice explains the information we collect, its use and sharing, and your choices. Reading or using the Service is not blanket consent to optional advertising or other processing that requires a separate choice.

Sign in with Google

Google data we access

If you choose Sign in with Google in Count The Catch, Google provides your basic account identity: your account identifier, email address and, when available, your name and profile picture. We use this information to authenticate you, create or link your Count The Catch account and display your profile. This sign-in does not request access to your Gmail messages, Google Drive files, contacts or calendar.

How we use Google data

We request only basic sign-in permissions (openid, email and profile), not sensitive or restricted Google scopes. The Google account identifier links the sign-in to your Count The Catch account; the email identifies the account and supports account-related communications; the name and profile picture populate profile presentation. You can edit your Count The Catch profile. Google data is not used to identify fish or tackle.

Where we store Google data

Our authentication provider, Supabase, processes the sign-in credentials and stores the account identity and session information needed to operate your account. Connections use HTTPS. Access to account data is subject to authentication and access controls. Your display name and profile picture may be visible according to the profile and sharing features you use; signing in with Google does not make your email public.

Who receives Google data

Google handles authentication, and Supabase processes and stores the identity and authentication session for Count The Catch. Your display name and profile picture can appear to users through friend search, profiles, shared catches, tournament participation and leaderboards. Your email is not automatically published; it can be disclosed through personal-information sharing you enable or tournament registration and organizer contact features you use. We do not provide Google sign-in data to advertising networks, data brokers or AI model providers. Any legally required disclosure or business transfer remains subject to the Google data-use limits below.

How we protect Google data

Google authentication takes place on Google's sign-in pages; Count The Catch does not receive your Google password. Sign-in and server connections use HTTPS/TLS. Supabase authentication, database access policies and server-side authorization limit access to account data; authenticated sessions are retained on your device to keep you signed in. Signing out ends the app session on that device, but does not delete your server-side account. No system can guarantee absolute security.

Limits on Google data use

We do not sell Google sign-in data or use it for targeted advertising, credit decisions or training general-purpose AI models. Providers may process it only as needed to operate and secure the account features; other disclosures are limited to your instructions or consent, applicable legal requirements, or the permitted business transfers described in this policy. These limits apply to Google sign-in data even where other sections discuss advertising or content promotion.

Retention, deletion and revoking access

We retain Google account identity while it is needed for your account and the purposes described in the Data retention section. You can request account deletion using our account deletion page or contact [email protected]. You can also remove Count The Catch access in your Google Account connections settings; removing access there does not by itself delete your Count The Catch account or cancel subscriptions.

To remove your Google identity and associated Count The Catch data, use Delete account in the app's Info/settings area or our account deletion page, or email [email protected] from the account address. After ownership verification, deletion removes the authentication identity and profile, together with associated personal content. Unsettled payments or payouts can delay deletion; legally required financial or tournament records are handled as described in Data retention, not kept for advertising. You can separately revoke Google authorization at any time through Google Account connections. Revocation prevents future authorized access but does not itself erase data already held by Count The Catch.

Count The Catch's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. See our account deletion instructions and Google Account connections settings.

Information we collect

Account information. When you create an account, we collect your name, email address, and your Angler ID. If you contact support, we collect whatever you send us.

Organizer information. If you activate organizer access, we also process the organizer details you submit, such as contact email, phone, address, country, state or region, support contact, website, organization name, organization type, and description.

Profile and activity. Depending on the features you use: profile photo, preferences, notification tokens, tournament entries and registrations, catches, species, measurements, dates, photos, videos, and payment or membership status.

Device and technical data. Device type, operating system, app version, log data, and approximate location derived from IP address — used for security, troubleshooting, and analytics.

Photos and videos

COUNT THE CATCH works with photos and videos. The photos and videos you submit as catch evidence are used to verify your catch and keep competitions fair, and may be shown to tournament participants, organizers, and authorized reviewers as described below. The camera and microphone record catch videos, and you may save a copy to your photo library.

Optional AI identification

When you request fish identification, the selected image is sent through our server to Fishial.ai. When you request tackle identification, the selected image and product prompt are sent through our server to the Meta model service. These providers process the submitted content under their own policies. Do not include faces, documents or other private information that is unnecessary for identification. AI suggestions can be inaccurate and are not official species determinations or fishing regulations. Google sign-in identity is not sent with these identification requests.

Optional species profiles send only the recognized species names and chosen language through our server to Meta. We do not resend the photo or send exact GPS or account identity for this profile. A selected US state and water type are used by our server to consult allowlisted official agency pages, not sent to Meta. Biological profiles are AI suggestions; official excerpts and consultation dates do not confirm that a rule is current or applies to your waterbody. You can use official links without requesting an AI profile.

Only when you request photo measurement assistance, our server sends the tournament photo without EXIF metadata to Meta to locate the fish and ruler. We do not send exact GPS or account identity; information visible in the photo is still included, so avoid unnecessary faces or personal information. We keep a private record of the photo fingerprint, reference points, suggestion and your confirmed measurements for catch review. This experimental assistance is not a certified measurement and does not approve catches or replace organizer review. Manual measurement remains available.

In compatible versions, CTC Pro members can opt in once to automatic Fishing Journal identification. After explicit permission, the first photo of each new catch is sent through CTC to Fishial.ai without another identification click; the other photos are not sent for this purpose. The choice is saved separately for each account on that device or browser, not synchronized to other devices. Turn it off in app Settings or the web Journal identification settings to stop future automatic requests; requests already delivered cannot be recalled. Buying CTC Pro or accepting general policies does not enable this optional sharing. Saving catches without identification remains available, including offline in the app. Only the first photo is used for identification; visible information in it is still included. AI suggestions remain editable and are not official determinations.

Location

When you register a catch, the app may request a one-time device location and read media GPS metadata for verification. Exact catch coordinates are restricted to the submitting angler and authorized tournament access. Community maps show approximate areas, not exact private fishing spots. Location also supports requested maps, local forecasts and links to regional fishing agencies. Tournament venue information may be displayed in tournament details. The app does not continuously track your location.

Payment information. COUNT THE CATCH does not process tournament entry fees: if a tournament charges one, you pay the organizer directly, outside the platform. In-app purchases (CTC Pro, angler packs, Tournament Boost) are processed by the Apple App Store or Google Play. We do not store card numbers or bank details.

How we use information

How we share information

Within tournaments. Content you share in a tournament — including catch photos and videos, measurements, and results — may be visible to its participants, organizers, and authorized reviewers. Leaderboards and results are public within the Service by design.

Service providers. We share data with providers that help us operate the Service, including Supabase (database and storage), Firebase Cloud Messaging (push notifications), Google Maps, Google Mobile Ads, and the Apple App Store / Google Play (in-app purchases). These providers process data under their own terms and privacy policies.

Legal and safety. We may disclose information when required by law, to enforce our policies, or to protect the rights, property, or safety of COUNT THE CATCH, our users, or others — including investigating fraud or cheating.

Business transfers. If we are involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.

We do not sell your personal information for money. However, when we serve personalized advertising through Google Mobile Ads, sharing your advertising identifier and device data with Google may be considered 'sharing' for cross-context behavioral advertising under California law. You have the right to opt out of this sharing — see Your rights and choices below.

Advertising

Google Mobile Ads may process device and advertising identifiers to deliver and measure ads in the app. Personalized advertising may involve sharing for cross-context behavioral advertising or targeted advertising under applicable law. In the app, open Info > Privacy and account to turn off optional advertising on this device. This stops new ad requests and removes loaded ads; it does not erase data already received by providers. Where Google makes its privacy options form available, you can also change consent there. Re-enabling optional advertising does not override your Google consent choices. Browser privacy settings, including Global Privacy Control (GPC), do not automatically change mobile-app preferences. Contact [email protected] for privacy requests. This optional-advertising switch is available only in app versions that include it; older installed versions may not have it yet. If it is missing, request assistance at [email protected].

Optional app crash diagnostics

In app versions that include this feature, optional Firebase Crashlytics diagnostics are off by default. Enable them in Info > Privacy and account to share technical crash reports, app and device information and installation identifiers. This choice applies to the device, including other accounts used there. CTC filters Dart error messages and does not add account identifiers, photos, GPS, payment details or tokens. Native crash reports may contain SDK-generated details and are buffered locally even while sending is off. Reports queued without consent are deleted on startup and before a new opt-in. Turning diagnostics off stops new sends and requests deletion of queued reports; it cannot erase reports already received by Firebase. This does not enable website analytics. Contact [email protected] about privacy requests.

Cookies and tracking

We use cookies and similar technologies (including local storage and mobile identifiers) to keep you signed in, remember your preferences, understand how the Service is used, and — in the app — serve ads through Google Mobile Ads. You can control cookies through your browser settings; disabling them may limit some features. We do not currently respond to "Do Not Track" browser signals, as there is no uniform industry standard for doing so.

Data security

We use safeguards including HTTPS/TLS, authenticated access, server-side authorization and access controls for personal data. Security checks and incident investigation help protect the Service. No system is completely secure; we do not guarantee absolute security or continuous malware scanning of every upload.

Data retention

We keep personal data only as long as needed to provide the Service, run tournaments, resolve disputes, and meet legal obligations. If you request deletion, we remove your account, profile, content, and associated photos and videos — unless an in-app purchase is still processing, in which case deletion may be delayed until that process finishes. Some tournament records and financial ledger entries may be retained for up to 7 years without being linked to your identity, to preserve competitive integrity and meet accounting and tax obligations. The app stores retain their own transaction records under their policies. Deleting your account does not cancel a store subscription or automatically refund entry fees — manage subscriptions separately and contact the tournament organizer about a fee. See our account deletion page for step-by-step instructions.

Your rights and choices

US state privacy rights

Depending on your state of residence (including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia), you may have the right to:

Sensitive information. Precise location can be sensitive personal information. We use it for the location-dependent features you request, catch verification, tournament integrity and security, not to infer personal characteristics for advertising. You can manage location permission on your device or contact [email protected] about limiting its use. Disabling location may prevent features or tournament verification that require it.

To exercise any of these rights, email [email protected] from your account email. If we deny a request, you may appeal by replying to our response, and we will review it as required by your state's law.

Privacy requests and appeals

To request access, correction, or deletion, email [email protected] from your account email and describe your request. We may verify your identity and will respond within the period required by applicable law. If a request is denied, ask for an explanation and appeal by replying to the same contact.

Children

Only people who are at least 18 years old may create an account or use COUNT THE CATCH. The Service is not directed at minors, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it.

Third-party links

The Service may link to third-party sites or services that have their own privacy policies. COUNT THE CATCH is not responsible for their content or privacy practices.

Data breach notification

If a security incident compromises personal information, we will notify affected users as required by applicable law and take reasonable steps to investigate and address it.

Changes to this policy

We may update this notice. We publish the revised notice in the app and on the website with its date. For material changes we may notify you through the Service or by email. Where consent is required, a notice update does not replace your separate consent choice.

Contact

For privacy or data questions, email [email protected].