Privacy Policy

Last updated: August 8, 2026

Overview

Hookd ("we", "our", "the app") is a fishing collection game for iOS. We respect your privacy and are committed to protecting your personal data.

Data We Collect

• Account info: Apple ID or Google account identifier, display name, email (if provided during sign-in).
• Catch data: Species, length, weight, bait, notes, photos, and where you fish — at the precision described in the next section.
• Usage data: App interactions for improving the experience (no personal identifiers).

Location, Precisely

Location is the most sensitive thing this app touches, so here is exactly what happens to it. Different parts of Hookd store it at different precision, on purpose.

• Catches — approximate. Before a catch is uploaded, the app shifts its coordinates 100–150 metres in a random direction and sends only the shifted point. The exact spot never leaves your device. The shift is freshly random each time and we keep no record of it, so it cannot be undone — not by another angler, and not by us.
• Voyage tracks — precise, and only yours. A voyage records where you set out from at full precision, because that is the point of a trip log. It is readable by your account alone (enforced by row-level security in the database, not just in the app), it is never shown to your crew, and you can delete any voyage from the Log at any time.
• Live crew location — precise, while you're sharing. During a crew Trip you can share your live position, which updates about once a minute so crew members can find each other. It is deleted when the trip ends, and purged automatically within 24 hours of the trip's scheduled end even if the app never reports back.
• Territory board — district only. Standings show the city, district, or county a catch belongs to. Coordinates are never published there or on public region pages.
• Photos. Catch photos are re-encoded before upload, which strips the GPS tags cameras embed in image files.

How We Use Your Data

• Authenticate your account
• Store and display your catch history and Dex progress
• Generate leaderboards and social features
• Improve app functionality

Data Storage

Catch data is stored locally on your device using SwiftData. Server-side data is stored on Supabase (hosted in Seoul, South Korea) with row-level security.

Analytics

We use TelemetryDeck for privacy-friendly analytics. TelemetryDeck does not collect personal identifiers, IP addresses, or device fingerprints. All signals are anonymized and aggregated.

We use the Meta (Facebook) SDK for install attribution and ad measurement — it tells us which ads bring real anglers so we can turn off the ones that don't. Only if you grant permission through Apple's App Tracking Transparency prompt, the SDK may access your device's advertising identifier (IDFA) and receive purchase events for measuring ad performance. If you decline, tracking stays off and the app works exactly the same. We do not sell your data to third parties, and catch locations never reach advertisers.

Public region pages. If you compete on the territory board, your display name and region standings (never your catch coordinates) may appear on public web pages for that region — anyone with the link can view them. Pick a display name you're comfortable showing publicly; you can change it anytime in Settings.

Third-Party Services

• Supabase: Authentication and database (Seoul, South Korea)
• OpenAI: Fish species identification (photos are processed and not retained)
• RevenueCat: Subscription management (no personal data shared beyond transaction IDs)
• TelemetryDeck: Privacy-first analytics (no personal identifiers collected)
• Apple/Google: Sign-in authentication

Legal Basis (GDPR)

If you are in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract: Account creation, catch logging, subscription management — necessary to provide the service you signed up for.
• Legitimate interest: Analytics (TelemetryDeck) — to improve the app. You can opt out by contacting us.
• Consent: Location data and camera access — requested at point of use, revocable in iOS Settings at any time.

Data Retention

• Account data: Retained until you delete your account.
• Catch data: Retained until you delete individual catches or your account.
• Voyages: Retained until you delete the voyage from the Log or delete your account.
• Live crew location: Deleted when the trip ends, and purged automatically within 24 hours of the trip's scheduled end.
• Analytics: Aggregated, anonymized, retained for 12 months.
• Photos: Stored locally on your device. Server-side photo processing (AI identification) is ephemeral — images are not stored after processing.

Your Rights

Under GDPR, CCPA, and applicable privacy laws, you have the right to:

• Access: View all your data in the app.
• Export: Export your data as JSON from Settings.
• Delete: Permanently delete your account and all associated data from Settings. You can also delete an individual voyage from the Log — its route and start location are erased while your catches stay.
• Rectify: Update your profile information in the app.
• Object: Contact us to opt out of analytics processing.

Children

Hookd is rated 4+ and does not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it.

Changes

We may update this policy. Material changes will be communicated through the app. Continued use after changes constitutes acceptance.

Contact

Questions? Email rexrex1105@gmail.com