Deep Catch — Privacy Policy

Prepared for Deep Catch 1.1 and 1.2 · Updated 24 October 2026

Deep Catch is published by Nordvision Rah (sole proprietorship, Norwegian org. no. 931 750 879), Leirsund, Norway, the controller responsible for your data. Contact: indiedevrah@gmail.com.

The short version

The game creates a guest player account and saves your progress on our server. You do not need to provide your name, email or password to start. The account has an identifier; “guest” does not mean the data is anonymous.
You can optionally use Sign in with Apple to restore your progress. Apple may share an email address with us, including a private relay address if you choose one.
Your age choice is handled on your phone. Below the app's regional age threshold, optional usage statistics are disabled and no statistics installation ID is created. At or above it, statistics start only if you choose Accept.
Reward videos are optional, but Google's ad system can start and preload a video before you watch one. It has a separate consent process. On iPhone, players at or above the age threshold are also asked Apple's tracking question; ads are personalised only if you tap “Allow”. Younger players receive restricted ad requests and are never asked or tracked, described below.
Payments go through the App Store, with RevenueCat validating purchases. We do not receive your card details.
In-app feedback is optional and linked to your player account. It is separate from usage statistics.
From version 1.2, players at or above the age threshold can add a profile photo from their photo library. It is optional, stripped of location and other embedded data, and shown only to them and their accepted friends.
You can delete your account in Settings → Account, or contact us without the app. We do not sell your data.

Your age and younger players

On first use, and once after updating from an earlier version, a slider asks how old you are (1 to 99); nothing is selected until you move it. The answer cannot be changed in the app; reinstalling the app asks again. Your choice is processed locally to determine an age band; the exact age and the band are not sent to our server or to Google. The app reads the phone's region setting locally to choose its threshold: 13 in Norway, Sweden, the UK, the US and certain other regions; 14–16 elsewhere; 16 for an unknown region. This is a device setting, not a request for your physical location.

Below that threshold, the app does not ask for usage-statistics consent, collect those statistics or create their installation ID. Previously queued statistics and any statistics ID are cleared. This does not prevent the guest account and game data needed to play from being created.

For these younger players, ad requests are non-personalised and tagged as under the age of consent (TFUA). For players under 13, in every region, they are also tagged for child-directed treatment (COPPA treatment in the US). Google's ad-consent form and its privacy-options form are not shown to players below the threshold, and on iPhone they are never asked Apple's tracking question and are never tracked. Google receives these restriction flags, not the chosen age. The maximum requested ad-content rating is PG for everyone. These restrictions do not mean that ads involve no technical data or that every ad can be guaranteed suitable. The referral reward ladder is hidden below the threshold; ordinary invitations still work. Feedback allows only fixed choices, with no free-text field, and its technical context starts switched off.

The game is intended for a general audience. Parents or guardians can contact us about a child's account or data. The protections above restrict optional processing; they do not mean that no personal data is processed to operate the game.

What we collect and why

Game and account data: the random player account ID, progress, catches, Fish Box, aquarium, materials, coins, trips, upgrades, gear, achievements and records. These keep the game working and allow server checks against cheating. If you use Sign in with Apple, we also store the email address Apple provides. We also receive your phone's time-zone offset, sent with game requests so daily rewards and quests reset at your local midnight, and, with Sign in with Apple, Apple's user identifier for this app.
Social data, if used: your chosen username, friend code, friends, requests, trades, invitation/redemption records and leaderboard entries. Other players can see your username, level, records and their interactions with you. Friends can also see when you were last active; other players see your chosen picture and frame and — if you hold a species' #1 record — the nickname you gave it, shown as “named by” your username. Using a friend's code makes you friends with that player at once.
Profile photo, if you add one (version 1.2 and later): players at or above the app's regional age threshold (decided on the phone as described under Your age; the age is not sent) can choose a photo from their photo library as their profile picture. Below the threshold, or while the age answer is unknown, the option is not offered. The app receives only the photo you pick in the system photo picker, not your library. Before upload, the app crops it to a square, scales it down to 512 pixels and removes all embedded metadata (EXIF, including location, camera model and date taken). The photo is stored privately with Supabase (our project region, Stockholm, EU) and shown only to you and your accepted friends, through links that expire after an hour (a player who became your friend only by entering your invitation code or username sees it only if you sent them a friend request); everyone else, including other players on leaderboards and in leagues, keeps seeing your fish picture, and it never appears on our website. Friends can report a photo: it is hidden from that friend at once, from everyone within a few minutes if it is reported as sexual or inappropriate or as harassment, and from everyone after three reports for other reasons, until we review it. We may remove a photo that breaks the rules and stop the account from adding new ones. You can change or remove your photo at any time in the app (Friends → your picture); the app deletes the old file, except a photo that has been reported, which is kept until we have reviewed the report. After the review we delete it, or your app does the next time you open your picture; it is always deleted with the account. The file of a photo we removed cannot be set as a profile photo again: we keep its file name and your account ID in a list of removed photos, which is deleted with the account. Legal basis: contract (the social feature you choose to use) and, for moderation, legitimate interests in a safe game. Reports are stored with the reporter's and the reported player's account IDs, the photo's file name, the reason and the time. We keep a report for 12 months after it is closed (after our review); then it is deleted automatically.
Purchase data: product, time, store transaction number and player account ID, received through RevenueCat so items are delivered once. Apple processes payment; we do not receive payment-card details.
Advertising data: Google may process IP address (including for approximate location), device/app identifiers, interactions and diagnostics for ad delivery, measurement and fraud prevention. See the ad section.
Optional in-app feedback (Settings → About → Send feedback, or “Report this problem” on a dive error screen): the type you pick (bug, idea, praise or other), an optional area (diving, shop, friends, league or other), your message (up to 500 characters), where it was sent from and your player account ID. Unless you switch off “Attach app version & phone type” (on by default at or above the age threshold, off below it), we also receive the app version, build, game-rule version, operating system and version, the phone's year class, app language, the screen you were on and, from an error screen, the error code. We read feedback through a view that masks e-mail addresses, links and phone numbers and shows the account's level and age. Below the age threshold, or while the age answer is unknown, only fixed choices can be sent, without free text. At most 5 messages per account per 24 hours are stored. Please do not include passwords, payment details or sensitive personal information.
Local reminders: daily-reward and streak reminders, if enabled, are scheduled on your phone. Their notification content is not sent to us.
Operational information: app version and technical request/error information needed to deliver, secure and diagnose the service.
Sign-in sessions: our sign-in service (Supabase Auth) stores, with your account, the IP address and the app's user-agent string from the last time your session was created or refreshed, plus sign-in times, to keep you signed in and protect the account. These are deleted with the account.
Website visits: Expo/EAS Hosting and its infrastructure providers handle IP address, browser/device information, requested URL, time, response status and duration to deliver and protect these pages. A shared link can contain a friend code and a short code for what was shared (an invitation, a catch or the aquarium). App Store links include a developer token and campaign name for Apple's campaign reporting; they do not include the friend code. Website and store processing is separate from optional in-app statistics.
Support and privacy requests: your email address, message and the minimum details needed to answer or verify the request. Do not email passwords, sign-in codes or full card details.
Optional usage statistics: described below.

We do not request access to your contacts, microphone or precise location, and the app has no general access to your photo library: saving a catch picture only adds it to Photos, and a profile photo (1.2) is only the one photo you pick. On iPhone, players at or above the age threshold are asked Apple's tracking permission for ads (see Advertising and your choices); our own code never reads or sends the advertising identifier (IDFA). We do not use usage statistics to track you across other companies' apps or websites.

Usage statistics: optional and pseudonymous

Eligible players are asked to choose Accept or Decline, using equal buttons and no preselected choice. No statistics installation ID is created and no usage statistics are collected before you accept. Declining does not remove game features. These statistics go to our Supabase database in the EU, not an analytics company or an ad network.

Sessions and gameplay: session starts, time played, screens and button-use counts, dives and fishing spots, depth, catches, how a dive ends, levels, trips remaining and their replenishment sources, coins earned/spent and upgrades; Luck Meter progress and lucky dives; Fish Box fill level; time played with a Friend Frenzy or boost active; how far your coins are from the cheapest next upgrade (as a percentage) and whether a material is missing for it.
Where play stops or resumes: empty-boat and full-Fish-Box episodes, how long the pause lasts and the fixed category of action that resolves it; SKIP offers/use, depth buckets and catch counts; quest and league progress. These are recorded game events, not recordings of your screen or activity outside the app.
Offers and purchases: where an offer appears, whether it is closed, purchase attempts and delivery outcomes, product codes and source codes; ad availability, offers, starts and completion. No card, receipt or payment credentials are included.
Social and diagnostic events: how the app was opened (icon, notification, invitation or other link); steps in the invitation flow (where a share started, which app you picked in the share sheet as a fixed code such as Messages or WhatsApp, whether a code came from a link or was typed, and how many days after starting it was used, 0–6); whether the home-screen code card was shown or dismissed; how often the feedback form is opened and a message sent (never its content); whether the app asked for a rating; other social actions, settings, fixed error codes, startup time and gameplay stutters. Never invite/friend codes, usernames, messages or other free text.
Context: a random installation ID, event ID, cohort day, session number, player level, app/platform/rule versions, language and coarse device class. Values are numbers or fixed codes. Event times are stored at minute precision and used to compare hours and weekdays; we do not collect the phone's local time zone for this purpose.

The installation ID ties one installation's events together, so these are pseudonymous personal data, not anonymous data. It is different from the player account ID, which is not sent with the statistics. We do not join it to account identities. Gameplay facts such as level, total dives or a purchase attempt, and — once, at level 5 — whether the account joined with a friend's code, can still be included as described above. Because one random ID ties an installation's events together, app stores classify this data as linked to you; we still never connect it to your account. A separate ID is not a guarantee that identifying a person would be impossible. Names, email, free text, age, age band, phone region, advertising identifiers and precise location are excluded. IP addresses are handled by network infrastructure but are not stored with these statistics.

Retention: raw events expire after 90 days; daily summaries per installation ID after 13 months (396 days). Settings → Privacy → Usage statistics lets you withdraw consent. That clears the pending queue and ID on your phone and stops new collection. If you later accept again, a new ID is created. Account deletion replaces the statistics ID on your phone with a new, unrelated one (collection continues only if you had accepted) but does not automatically erase previously sent statistics. Existing rows expire on the schedule above.

We cannot normally find these rows from a name or player account. If you provide additional information that lets us identify the relevant records, we will assess your rights request (GDPR Article 11(2)). We do not collect extra identification just to link statistics to accounts.

Advertising and your choices

After the age step and, for eligible players, the statistics question, Google handles its separate ad-consent requirements. Accepting statistics is not required to play or to use eligible reward videos. Where ads are available, the app starts the ad SDK and preloads a video only after Google's consent service confirms that ads may be requested. If that confirmation cannot be obtained, ads must remain unavailable. Preloading means technical data can reach Google even if you never watch a video.

Personalised ads require consent where applicable. Otherwise non-personalised or limited ads, or no ad, may be available depending on Google's requirements and your choices. Below the age threshold, only non-personalised ad requests are made, with the restrictions above. Change available Google privacy choices under Settings → Privacy → Ad privacy choices (shown where Google requires it; not offered below the age threshold). See how Google uses data from apps using its services.

Apple's tracking prompt (iPhone). If you are at or above the age threshold, the iPhone app shows Apple's App Tracking Transparency prompt once: after the statistics question and after Google's consent form (where Google requires one, e.g. in the EEA/UK), only when Google's consent service confirms that ads may be requested, and before the ad SDK starts or any ad is requested. Only if you tap “Allow” may Google Mobile Ads (AdMob) use your device's advertising identifier (IDFA) and similar data to personalise ads and to measure them across other companies' apps and websites (tracking). If you tap “Ask App Not to Track”, if tracking is restricted or switched off on your device, or if the prompt was not answered, every ad request is non-personalised and iOS does not give the advertising identifier to the ad SDK. Players below the age threshold are never asked and never tracked. The game, its prices and its rewards are the same whatever you choose. You can change your answer later in iOS Settings → Privacy & Security → Tracking (the app then uses your new answer for its next ad requests), and Google's choices in the game under Settings → Privacy → Ad privacy choices (shown where Google requires it). Our own code never reads, stores or sends the advertising identifier. Android has no such prompt; Google's consent choices apply there.

Improving the game using existing game data

Separately from optional statistics, existing server game data (dives, catches, level, when you reached level 5, gear and how many optional gear videos you have watched, purchases, last-play time, and invitation records: who joined with whose code and whether the referral reward was earned) helps us measure returning players and compare versions of a feature, such as result-screen layouts. These are combined into daily and weekly counts; counts below 5 are hidden. Test assignment is stored with the player account and is not sent with usage statistics. These tests are not used to personalise odds, prices or offers. This processing relies on our legitimate interest in improving the game, with particular care for younger players. You can object by contacting us.

Feedback and App Store ratings

In-app feedback is linked to your account, retained for up to 12 months, and deleted with the account. It is separate from, and does not require, usage-statistics consent. We use it to answer problems and improve the game, on the basis of legitimate interests. Younger players can send only the fixed choices described above.

The app may ask Apple to show its rating prompt at a high point on the results screen (a new rare record, a trophy catch or every fifth level): only from level 5, after at least 25 dives on three different days, never in your first two sessions, at most once per app version and once every 120 days, and never in a session with an error, a purchase, the shop, a reward video or the feedback form. Apple decides whether the prompt appears and does not tell the app whether it did, what rating you gave or what you wrote. To apply these limits the phone keeps a small local record (sessions, play days, when it last asked); it is not sent to us. If you accepted usage statistics, we count that the app asked, not whether the prompt appeared. A review you publish on the App Store may be publicly visible to us and others.

Service providers and recipients

Supabase: game database, accounts, sign-in, feedback and usage statistics; our database region is Stockholm, EU.
RevenueCat: purchase validation and delivery support.
Google AdMob: reward videos, preloading, ad delivery, measurement, fraud prevention and consent handling.
Apple: Sign in with Apple, App Store payments/distribution, ratings and TestFlight.
Expo/EAS Hosting: this website and delivery infrastructure; see Expo's privacy policy.

Supabase and RevenueCat process data on our instructions under their applicable terms. Google (Gmail) receives and stores support correspondence under its own privacy policy and terms. It is a recipient, not our contracted processor for this consumer mailbox.

Legal bases and international processing

We rely on contract to provide the requested game and purchases; legitimate interests to keep the service fair and secure, improve it with existing game data, deliver the website and handle support/feedback; consent for optional statistics (GDPR Article 6(1)(a)); and legal obligations for privacy requests and accounting. For optional access to information on your device, Norwegian Electronic Communications Act § 3-15 also applies.

Non-personalised or limited ads and necessary measurement/fraud prevention rely on legitimate interests where permitted: funding the game with optional videos and preventing abuse. Purposes that require consent use Google's consent flow instead; on iPhone, tracking also requires “Allow” on Apple's tracking prompt. You can object through Google's available privacy choices or by contacting us. Legitimate interests do not replace consent for device access under § 3-15 unless a specific exemption applies. Non-personalised ads are not automatically exempt. Age flags alone are not consent.

Although our database is in the EU, service providers and support recipients may process data outside the EEA. Confirmed destinations, applicable transfer mechanisms and how to obtain a copy of the safeguards: Supabase (Supabase Inc., USA; our database is in Stockholm, but Supabase, its sub-processors and its server functions may process data outside the EEA): EU Standard Contractual Clauses (Commission Decision (EU) 2021/914) in Supabase's Data Processing Addendum. RevenueCat (RevenueCat, Inc.; data stored on Amazon Web Services in the USA): EU Standard Contractual Clauses (Module Two) in RevenueCat's Data Processing Addendum. Google AdMob: Google Ireland Limited for players in the EEA; onward transfers to certified Google entities in the USA rely on the EU-U.S. Data Privacy Framework, otherwise on Standard Contractual Clauses (Google Ads Controller-Controller Data Protection Terms). Apple: Apple Distribution International Ltd. (Ireland); Apple's transfers outside the EEA are governed by Standard Contractual Clauses. Expo/EAS Hosting (650 Industries, Inc., USA): the EU-U.S. Data Privacy Framework and Standard Contractual Clauses. Gmail (support e-mail): Google's own terms and safeguards. Email indiedevrah@gmail.com for a copy of the relevant clauses.

Retention and deletion

Account and game data remain while the account exists. In-app deletion needs an internet connection and removes the account, game data, feedback and our account-linked purchase rows from the active database once the server confirms success. If it fails, you can retry. A profile photo (1.2) is deleted from storage together with the account, before the account itself; reports other players made about it are kept without the photo and without a link to an account (the file name still contains the former account ID), until 12 months after each report is closed. Uninstalling the app alone is not account deletion. Backup copies are not immediately erased; verified retention: up to 7 days (daily backups are kept for 7 days, then overwritten).

Apple keeps its own transaction records under its rules. Our accounting uses store payout reports, separately from game accounts, under applicable bookkeeping requirements. RevenueCat records are not automatically removed by in-app deletion; we can handle a verified request to delete the customer profile and purchase history there. See Delete your account.

Support correspondence and verification details: deleted no later than 12 months after the case is closed. Technical website request logs: Expo does not publish a fixed retention period for EAS Hosting request records; under Expo's privacy policy they are kept only as long as reasonably necessary. We do not copy or export them. Our database host's API and database logs, which include the IP address and time of each request, are kept for 7 days. The separate 12-month feedback and photo-report periods and the 90-day/13-month statistics periods are described above.

Your rights, security and contact

You can request access, correction, export, deletion or restriction, withdraw consent and object to processing based on legitimate interests. Withdrawal does not affect earlier lawful processing. We respond without undue delay and within one month of receipt; any legally permitted extension is explained within that month. Contact indiedevrah@gmail.com. You may complain to your local supervisory authority, including Datatilsynet in Norway.

We use encrypted connections and server-side access controls. Public social information and authorised trades are shared as described above. We update this policy when processing changes and show the new date.

Norsk sammendrag

Ansvarlig: Nordvision Rah (enkeltpersonforetak, org.nr. 931 750 879), Leirsund, Norge. Kontakt: indiedevrah@gmail.com. Spillet oppretter en gjestekonto og lagrer fremgangen hos Supabase i EU. Kontoen har en ID og er ikke anonym. Sign in with Apple er valgfritt og kan gi oss en e-postadresse. Kjøp behandles av Apple og bekreftes gjennom RevenueCat; vi får ikke kortopplysninger.

Alder: Første gang (og én gang etter oppdatering) velger du alder 1–99 på en glidebryter uten forhåndsvalg. Svaret kan ikke endres i appen; ny installasjon spør igjen. Alder og aldersgruppe behandles lokalt og sendes ikke. Telefonens regioninnstilling bestemmer appens grense: 13 i blant annet Norge, Sverige, Storbritannia og USA, 14–16 ellers, 16 ved ukjent region. Under grensen er statistikk av, ingen statistikk-ID opprettes, og eventuell lokal kø og ID slettes. Spillerkonto og nødvendige spilldata finnes fortsatt. Annonser forespørres som ikke-personlige med TFUA, og Googles samtykke- og personvernskjema vises ikke (heller ikke Apples sporingsspørsmål på iPhone; ingen sporing); spillere under 13 år (i alle land) merkes i tillegg som «child-directed». Google mottar disse begrensningsflaggene, ikke valgt alder. Maksimal forespurt annonsevurdering er PG for alle. Vervestigen skjules under grensen, men invitasjoner fungerer.

Statistikk: På eller over grensen velger du selv Godta eller Avslå med likeverdige knapper. Ingen statistikk eller statistikk-ID før ja. Vi teller økter, skjerm- og knappbruk, dykk, tom båt/full Fish Box, ventetid og løsning, SKIP, turer, økonomi, oppdrag/liga, tilbud, kjøpsforsøk/resultater, annonser, invitasjonssteg (hvor delingen startet, hvilken app du delte med som fast kode, lenke eller skrevet kode, dag 0–6), åpning/innsending av tilbakemeldingsskjema (aldri innhold), om appen ba om vurdering, lykkemåler, tid med Frenzy/boost, avstand til neste oppgradering og – én gang på nivå 5 – om kontoen kom via en venns kode, og faste feilkoder. App-/regelversjon, språk, nivå og grov enhetsklasse følger med. Bare tall og faste koder; aldri fritekst, navn, e-post, konto-/venne-/invitasjonskoder, alder eller reklame-ID. Tid avrundes til minutt og brukes til time-/ukedagsanalyser, uten innsamling av lokal tidssone. IP håndteres av infrastrukturen, men lagres ikke sammen med statistikken.

Den tilfeldige installasjons-ID-en binder hendelser sammen: statistikken er pseudonyme personopplysninger. Spillerkonto-ID sendes ikke, og vi kobler ikke statistikken til kontoidentiteter; dette betyr ikke at identifisering er umulig. Fordi én tilfeldig ID binder hendelsene sammen, regnes dataene i App Store som koblet til deg; vi kobler dem likevel aldri til kontoen din. Kontosletting gir telefonen en ny, ukoblet statistikk-ID. Lovgrunnlag: samtykke (GDPR art. 6(1)(a) og ekomloven § 3-15). Råhendelser slettes etter 90 dager, dagsoppsummeringer etter 13 måneder (396 dager). Slå av under Innstillinger → Personvern → Bruksstatistikk: videre innsamling stopper, og lokal kø/ID fjernes. Tidligere sendte rader slettes ikke automatisk ved avslag eller kontosletting. Vi vurderer sletting hvis du gir opplysninger som identifiserer de relevante radene (GDPR art. 11(2)).

Annonser: Googles valg er adskilt fra statistikkvalget. Når Googles samtykketjeneste tillater annonseforespørsler, starter annonsesystemet og kan forhåndslaste en video selv om du aldri ser den. Uten slik bekreftelse skal annonser være utilgjengelige. Google kan motta IP, enhets-/appdata, hendelser og diagnostikk. Endre tilgjengelige valg under Innstillinger → Personvern → Personvernvalg for annonser (vises der Google krever det, ikke under aldersgrensen). Ikke-personlige/begrensede annonser og nødvendig måling/svindelvern bygger på berettigede interesser der det er tillatt; formål som krever samtykke, bruker samtykke. Berettiget interesse eller aldersflagg erstatter ikke påkrevd samtykke til lagring/lesing på enheten. Apples sporingsspørsmål (iPhone): På eller over aldersgrensen viser iPhone-appen Apples spørsmål om sporing (App Tracking Transparency) én gang: etter statistikkspørsmålet og Googles samtykkeskjema (der Google krever det, f.eks. i EØS/Storbritannia), bare når annonser kan forespørres, og før annonsesystemet starter. Bare hvis du trykker «Tillat», kan Google Mobile Ads (AdMob) bruke reklame-ID-en (IDFA) og lignende data til å tilpasse annonser og måle dem på tvers av andre selskapers apper og nettsteder (sporing). Ber du appen om å ikke spore deg, er sporing begrenset eller slått av på enheten, eller er spørsmålet ikke besvart, er alle annonseforespørsler ikke-personlige, og iOS gir ikke reklame-ID-en til annonsesystemet. Under aldersgrensen spør vi aldri og sporer aldri. Spillet, prisene og belønningene er de samme uansett. Endre svaret senere i iOS Innstillinger → Personvern og sikkerhet → Sporing (appen bruker det nye svaret ved neste annonseforespørsel), og Googles valg i spillet under Innstillinger → Personvern → Personvernvalg for annonser. Vår egen kode leser, lagrer eller sender aldri reklame-ID-en. Android har ikke dette spørsmålet; der gjelder Googles samtykkevalg. Vi selger ikke data.

Andre spilldata: Nødvendige serverdata brukes også til å måle retur og sammenligne funksjonsvarianter, inkludert når du nådde nivå 5, utstyr og hvor mange valgfrie utstyrsvideoer du har sett, og invitasjoner/vervebelønning, samlet i daglige og ukentlige tall der tall under 5 skjules, på grunnlag av berettigede interesser. Spillet mottar også telefonens tidssoneforskyvning (for daglige belønninger) og, med Sign in with Apple, Apples bruker-ID for appen. Innloggingsøkter lagrer IP-adresse og user-agent sammen med kontoen og slettes med den. Dette er adskilt fra valgfri statistikk, og testene personaliserer ikke odds, priser eller tilbud. Du kan protestere. Sosiale funksjoner deler blant annet brukernavn, nivå og rekorder med andre spillere. Venner ser når du sist var aktiv; andre ser bilde/ramme og et eventuelt artsnavn du har gitt («navngitt av»).

Profilbilde (fra versjon 1.2): På eller over aldersgrensen (avgjort på telefonen; alderen sendes ikke) kan du velge et bilde fra bildebiblioteket som profilbilde. Under grensen eller når alderen er ukjent tilbys det ikke. Appen får bare bildet du velger, ikke biblioteket. Før opplasting beskjæres det til et kvadrat, skaleres ned til 512 piksler, og alle innebygde metadata fjernes (EXIF, også posisjon, kameramodell og dato). Bildet lagres privat hos Supabase (EU, Stockholm) og vises bare for deg og godkjente venner, via lenker som utløper etter en time (en som ble venn med deg bare ved å skrive inn invitasjonskoden eller brukernavnet ditt, ser det bare hvis du sendte vedkommende en venneforespørsel); alle andre ser fiskebildet ditt, og det vises aldri på nettsiden. Venner kan rapportere et bilde: det skjules straks for den som rapporterer, for alle i løpet av få minutter ved rapport om seksuelt/upassende innhold eller trakassering, og for alle etter tre rapporter av andre grunner, til vi har sett på det. Vi kan fjerne bilder som bryter reglene. Du kan bytte eller fjerne bildet når som helst; et rapportert bilde beholdes til vi har sett på rapporten. Deretter sletter vi det, eller appen din gjør det neste gang du åpner bildet ditt, og det slettes alltid med kontoen. Filen til et bilde vi har fjernet, kan ikke settes som profilbilde igjen: vi lagrer filnavnet og konto-ID-en i en liste over fjernede bilder, som slettes med kontoen. Rapporter lagres med konto-ID-ene, filnavnet, grunnen og tidspunktet. En rapport beholdes i 12 måneder etter at den er lukket (etter vår gjennomgang), og slettes deretter automatisk. Ved kontosletting beholdes rapporter andre har sendt om bildet ditt uten selve bildet og uten kobling til kontoen (filnavnet inneholder den tidligere konto-ID-en), i 12 måneder etter at hver rapport er lukket.

Feedback og vurdering: Valgfri tilbakemelding (Innstillinger → Om → Send tilbakemelding, eller «Meld fra om problemet» ved dykkefeil) har type, valgfritt område, inntil 500 tegn, hvor den ble sendt fra og konto-ID; med «Legg ved appversjon og telefontype» på (standard på over aldersgrensen, av under den; kan slås av) følger appversjon, bygg, regelversjon, operativsystem og versjon, telefonens årsklasse, språk, skjerm og eventuell feilkode. Under aldersgrensen eller når alderen er ukjent finnes bare faste valg. Høyst 5 meldinger per konto per døgn lagres. Feedback lagres i inntil 12 måneder og slettes med kontoen; lovgrunnlaget er berettiget interesse i feilretting og forbedring, uavhengig av statistikkvalget. Appen kan be Apple vise vurderingsdialogen etter et høydepunkt på resultatskjermen (tidligst nivå 5, 25 dykk og tre spilledager, høyst én gang per versjon og hver 120. dag, aldri etter feil, kjøp, butikk, video eller tilbakemelding). Apple bestemmer om den vises og gir ikke appen karakter, tekst eller beskjed om innsending. Telefonen lagrer bare lokalt når appen sist spurte. Med statistikk på teller vi at appen spurte. Publiserte App Store-omtaler kan være offentlige.

Sletting: Bruk Innstillinger → Konto eller kontakt oss uten appen. Sletting krever nett og serverbekreftelse. Spillkonto, spilldata, feedback og våre kjøpsrader slettes; Apples egne transaksjonsdata beholdes etter deres regler. RevenueCat-profilen slettes ikke automatisk, men vi kan håndtere en verifisert forespørsel. Sikkerhetskopier: inntil 7 dager (daglige kopier lagres i 7 dager og overskrives deretter). Support-e-post/verifisering: slettes senest 12 måneder etter at saken er lukket. Tekniske besøkslogger: Expo oppgir ingen fast lagringstid for forespørselslogger i EAS Hosting; etter Expos personvernerklæring lagres de bare så lenge det er rimelig nødvendig. Vi kopierer eller eksporterer dem ikke. Databaseleverandørens API- og databaselogger (med IP-adresse og tidspunkt) lagres i 7 dager.

Mottakere og rettigheter: Supabase, RevenueCat, Google AdMob, Apple og Expo/EAS Hosting behandler opplysninger som beskrevet over. Google Gmail mottar support-e-post under egne vilkår, ikke som avtalt databehandler for denne private postkassen. Overføringsgrunnlag utenfor EØS: Supabase og RevenueCat: EUs standardpersonvernbestemmelser (SCC) i databehandleravtalene; Google AdMob: Google Ireland Limited, videre til USA etter EU–US Data Privacy Framework eller SCC; Apple: Apple Distribution International (Irland), SCC; Expo/EAS Hosting: Data Privacy Framework og SCC; Gmail: Googles egne vilkår. Kopi: indiedevrah@gmail.com. Nettsidebesøk innebærer tekniske forespørselsdata; en delt lenke kan inneholde vennekode og en kort kode for hva som ble delt (invitasjon, fangst eller akvarium), mens App Store-kampanjelenken bruker utvikler-/kampanjetoken uten vennekoden. Du kan be om innsyn, retting, eksport, sletting eller begrensning, trekke samtykke eller protestere. Vi svarer innen én måned og varsler lovlig forlengelse innen samme frist. Du kan klage til Datatilsynet.