Baitlore Privacy Policy

Effective date: 23 September 2026

Baitlore is a fishing planner app for iOS and Android. This page explains what data the app handles, why, and what you can do about it. It is written to match what the app actually does; if the app changes, this page changes with it.

The data controller is José Miguel Murça Soares, based in Portugal. Contact: support@baitlore.com.

Summary

• You need an account. We store your email, a username and, if you sign in with Google or Apple, the identifier they give us.
• Your location is optional and is read on your phone to centre the map. Coordinates are sent to our server when you use the planner (the spot you picked or, if you haven't picked one, where your phone is) and when you add a spot to the community map.
• Your tackle box, saved spots list and recent plans stay on your phone. We never see them. The planner sends only what it needs to build a plan (species, water temperature, date, conditions, temperature unit and location), and we don't store those requests with your account.
• We don't run analytics or ads, don't use tracking SDKs, and don't sell or share data with anyone for their own purposes.
• You can delete your account from inside the app. It takes effect immediately.

What we collect

Account

When you register we store your email address and a hash of your password (we cannot read the password itself). We give you a username when you register, and you can change it in Profile. If you sign in with Google or Apple we store the account identifier they provide and your email; we don't receive your password from them.

We keep sign-in tokens so you stay logged in. They stop working when you log out or after 30 days of inactivity, and we delete them when you delete your account.

Legal basis: performing our contract with you (running your account).

Location and spots

The app asks for location permission "while in use". Location is optional: if you say no, you can move the map yourself and choose a spot or enter the conditions by hand. Your position is read on the phone to centre the map, to show nearby community spots and to fetch the weather for where you are. It is not stored on our server as a location history.

Coordinates do reach our server in these cases:

• Species, conditions and plans. When you open the planner or ask for conditions or a plan, the app sends coordinates so the server can work out weather, light and water temperature: those of the spot you picked (a map pin or a saved spot) or, if you haven't picked one, your phone's position. The request also carries your planner choices (species, water temperature, date, conditions and temperature unit). We don't store these requests with your account.
• Community spots. If you add a spot to the community map or suggest an edit, the spot's name, coordinates and species are stored together with your account, and your username is shown as the contributor. Spots are reviewed before they appear publicly.

Like most web servers, ours keeps short-lived request logs: which endpoint was called, when, whether it worked, and the address the request came from. They don't include the coordinates you send. They are overwritten automatically as newer entries arrive and are used only for security and debugging. Legal basis: our legitimate interest in keeping the service secure and working.

Legal basis: performing our contract with you; for community spots, your consent when you submit them.

Feedback

If you send feedback from the app we store the message, the app version and platform, linked to your account so we can reply.

Legal basis: our legitimate interest in improving the app.

On your phone only

Your tackle box, the list of spots you saved and your recent plans stay on your device and are never sent to us. Your temperature unit and the choices you last made in the planner are also remembered on the device; they reach us only as part of a planner request, as described above.

Third parties

• Map tiles are served by OpenFreeMap (openfreemap.org). When the map loads, your device requests tiles for the area you are viewing, so OpenFreeMap sees your IP address and which map areas you look at. We don't send them anything else.
• Google and Apple process your sign-in if you choose "Sign in with Google" or "Sign in with Apple", under their own privacy policies.
• Email. We send confirmation and password reset codes through Resend (Plus Five Five, Inc., United States). Resend receives your email address and the code. Transfers to the United States rely on the EU standard contractual clauses and on Resend's certification under the EU-US Data Privacy Framework.
• Weather data comes from NOAA's public GFS model. Our server downloads it in bulk; no data about you is sent to NOAA.
• Hosting. Our server and database run on DigitalOcean, in Frankfurt, Germany. They process data on our behalf and under our instructions.

We don't use analytics, crash reporting, advertising or any other tracking SDK. We don't sell data and don't share it with anyone for their own purposes.

Retention

Account data is kept for as long as your account exists. Sign-in tokens expire after 30 days. Server request logs are overwritten automatically as newer entries arrive. Backups of the database are kept for 7 days and then overwritten.

Deleting your account

Open the app, go to Profile and tap Delete account. This immediately and permanently removes your account, sign-in tokens, feedback, spot suggestions and any spots you submitted that were not yet published. Spots that were already published on the community map remain, with your username removed.

If you no longer have the app installed, email support@baitlore.com from the address on your account and we will delete it within 30 days. See Delete your account for the full steps.

Your rights

Under the GDPR you can ask us to access, correct, export or delete your data, to restrict or object to how we use it, and to withdraw consent where we rely on it. Email support@baitlore.com. You can also complain to your local data protection authority; in Portugal that is the CNPD (cnpd.pt). We reply to requests within 30 days.

Children

Baitlore is not directed at children under 16 and we don't knowingly collect data from them. If you think a child has created an account, contact us and we will remove it.

Changes

If we change this policy in a way that matters, we will note it in the app and update the date at the top. Older versions are available on request.