Catchdex

Privacy Policy for Catchdex

Last updated: February 26, 2026

Introduction

Catchdex (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application (“Catchdex”).

Information We Collect

Information You Provide

Account Information: When you sign in with Google or create an account with email, we collect your name, email address, username, and profile picture.
User Content: Photos you take or upload for fish identification, catch records, comments, and notes you add.

Information Collected Automatically

Location Data: With your permission, we collect your device’s location when you log a catch to record where the fish was caught. You can disable location sharing in Settings > Privacy Settings.
Camera Access: We access your camera to allow you to photograph fish for identification. Photos are only captured when you actively take them.
Device Information: We collect device model, operating system version, and app version for crash reporting and diagnostics.
Usage Data: We collect information about how you interact with the app, including features used, catches logged, and app performance data.

How We Use Your Information

We use the information we collect to:

Identify fish species from your photos using image recognition
Save your catch history and build your personal collection
Display your catches on the social feed (if set to public)
Track achievements and display leaderboard rankings
Send you relevant push notifications (if enabled)
Detect and prevent misuse (anti-cheat and duplicate detection)
Monitor app stability and fix crashes
Improve our fish identification accuracy

Third-Party Services

Our app uses the following third-party services, each of which may collect and process data according to their own privacy policies:

Google Firebase

Firebase Authentication: Manages sign-in and account security. Collects email, name, and authentication tokens.
Cloud Firestore: Stores your catches, profile, friends, and app data. Data is stored in the australia-southeast1 (Sydney) region.
Firebase Storage: Stores catch photos associated with your account. Data is stored in the australia-southeast1 (Sydney) region.
Firebase Crashlytics: Collects crash reports including device model, OS version, app state, and stack traces to help us fix bugs. Crash data may be linked to your user ID for debugging.
Firebase Analytics: Collects anonymous usage data including app events, session duration, and device properties to help us understand how the app is used.
Firebase Cloud Messaging (FCM): Delivers push notifications to your device. Collects a device token for notification delivery.
Firebase App Check: Verifies that requests come from a genuine app installation using Google Play Integrity. Collects device attestation data.

Google Cloud Vision API

Processes your fish photos for species identification. Photos are sent to Google Cloud servers for image analysis and are not retained by Google after processing.

Fishial.ai

Provides additional fish species identification. Photos are sent to Fishial.ai servers for analysis. Used as a secondary identification service for premium users.

Google AdMob

Displays rewarded advertisements to free users in exchange for additional fish identifications. AdMob may collect device identifiers, IP address, and ad interaction data. For EU users, personalised ads require consent via the Google User Messaging Platform (UMP).

Google Play Billing

Processes subscription payments for Catchdex Pro. Payment information is handled entirely by Google Play and is not accessible to us.

Google Maps SDK

Displays maps showing catch locations. When you view the catch map, your device communicates with Google Maps servers. Google may collect location-related data and device identifiers.

Legal Basis for Processing (EU/EEA Users)

We process your personal data on the following legal bases:

Contract: To provide the app’s core functionality (account management, fish identification, catch storage).
Consent: For location data collection, personalised advertising, and push notifications. You can withdraw consent at any time through app settings or device permissions.
Legitimate Interest: For crash reporting, security (anti-cheat), and app improvement analytics.

Data Storage and Security

Your data is stored securely using Google Firebase services in the australia-southeast1 (Sydney) region. We implement appropriate security measures including:

Firebase App Check to verify genuine app installations
Firestore security rules restricting data access to authorised users
Firebase Storage rules enforcing file size and type restrictions
Encrypted data transmission via HTTPS

As Firebase is a Google service, your data may be processed in countries outside your region in accordance with Google’s data processing terms.

Data Retention

Account data: Retained until you delete your account.
Catch data and photos: Retained until you delete individual catches or your account.
Crash reports: Retained for 90 days by Firebase Crashlytics.
Analytics data: Retained for 14 months by Firebase Analytics (Google default).
Ad interaction data: Retained by Google AdMob per their retention policy.

We do not sell your personal information. Your data may be shared in the following circumstances:

Public Catches: Catches you mark as public are visible to other users on the social feed.
Leaderboards: Your display name and catch statistics appear on public leaderboards.
Service Providers: With third-party services necessary to operate the app (as listed above).
Legal Requirements: If required by law or to protect our rights.

Your Rights and Choices

You can:

Access: View your data within the app at any time.
Delete Account: Permanently delete your account and all associated data via Settings > Delete Account. This triggers automatic deletion of your data from Firebase services.
Delete Catches: Remove individual catches and their photos from your collection.
Location: Disable location collection in Settings > Privacy Settings, or revoke device location permission.
Notifications: Disable push notifications in Settings, or revoke notification permission on your device.
Ad Consent (EU): Manage personalised ad preferences in Settings > Privacy Settings.
Data Access/Portability: To request a copy of your data, contact us at the email below.

Children’s Privacy

Catchdex is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: w477zy@gmail.com

This privacy policy is effective as of February 26, 2026.