Baitlore Privacy Policy

Effective date: 10 October 2026

Baitlore is a fishing planner app for iOS and Android. This page explains what data the app handles, why, and what you can do about it. It is written to match what the app actually does; if the app changes, this page changes with it.

The data controller is Miguel Soares, based in Portugal (full address under Contact, at the end). Contact: support@baitlore.com. The rules for using the app are in the Terms of Use.

Summary

• You can use the planner, the map and the guide without an account. You need one to add or suggest spots, report or block, and send feedback. For an account we store your email, a username and, if you sign in with Google or Apple, the identifier they give us.
• Your location is optional, and your precise position stays on your phone, where it centres the map. The planner sends our server a position rounded to about 11 km (of the spot you picked or, if you haven't picked one, of your phone), and adding a spot sends the exact point where you placed it.
• Your tackle box, saved spots list and recent plans stay on your phone. We never see them. The planner sends only what it needs to build a plan (species, water temperature, date, conditions, temperature unit and location), and we don't store those requests with your account.
• Only if you allow it when you first open the app, we keep our own usage statistics: a random ID the app creates, which days the app was used, and how many times each day you asked for a plan, turned down the free plan, saw the Baitlore Pro screen, and got a plan. On Android, also the campaign tag of the Google Play link you installed from. They stay on our server, are never shared, and you can change your choice in Profile. We don't show ads in the app, don't use third-party analytics or tracking SDKs, and don't sell or share data with anyone for their own purposes.
• If you buy Baitlore Pro, Apple or Google take the payment and we never see your payment details. We use RevenueCat to check what you've bought: it receives a random ID (or your account ID if you're signed in) and your purchase history.
• You can delete your account from inside the app. It takes effect immediately.

What we collect

Account

An account is optional. Without one you can use the planner, the map and the guide; you need one to add a spot or suggest a change, report a spot, block a user and send feedback.

When you register we store your email address and a hash of your password (we cannot read the password itself). We give you a username when you register, and you can change it in Profile. If you sign in with Google or Apple we store the account identifier they provide and your email; we don't receive your password from them. With Apple we also keep a token Apple gives us, used only to remove Baitlore from your Apple ID when you delete your account.

We keep sign-in tokens so you stay logged in. They stop working when you log out or after 30 days of inactivity, and we delete them when you delete your account.

Legal basis: performing our contract with you (running your account).

Location and spots

The app asks for location permission "while in use". Location is optional: if you say no, you can move the map yourself and choose a spot or enter the conditions by hand. If you allow it, the phone's precise position is used on the phone only: to centre the map, show where you are and list nearby community spots. It never leaves your phone at full precision, and it is not stored on our server as a location history.

Coordinates do reach our server in these cases:

• Species, conditions and plans. When you open the planner or ask for conditions or a plan, the app sends coordinates so the server can work out weather, light and water temperature: those of the spot you picked (a map pin or a saved spot) or, if you haven't picked one, your phone's position. Before they leave your phone, the app rounds them to one decimal place (about 11 km), which is as fine as the weather data goes. The request also carries your planner choices (species, water temperature, date, conditions and temperature unit), your time zone and the app's language. We don't store these requests or their coordinates. We only count them, as described under Usage statistics.
• Community spots. If you add a spot to the community map or suggest an edit, the spot's name, exact coordinates (the point where you placed the pin, not your phone's position) and species (and the note you add to a suggestion) are stored together with your account, and your username is shown as the contributor. Spots are reviewed before they appear publicly.

Legal basis: performing our contract with you (building your plans and showing the spots you submit).

Like most web servers, ours keeps short-lived request logs: which endpoint was called, when, whether it worked, and the address the request came from. They don't include the coordinates you send. They are deleted after 14 days and are used only for security and debugging. To stop abuse, the server also counts attempts per address and per email (for example sign-in attempts) in memory for up to an hour. Legal basis: our legitimate interest in keeping the service secure and working.

Reports and blocks

If you report a spot we store the reason you chose, the details you wrote and your account, so we can deal with it; the person who added the spot doesn't see who reported it. If you block a contributor we store that you blocked them, so their spots stay hidden from you. Legal basis: performing our contract with you and our legitimate interest in keeping the map free of abuse.

Feedback

If you send feedback from the app we store the message, the app version and platform, linked to your account so we can reply.

Legal basis: our legitimate interest in improving the app.

Purchases

Baitlore Pro is bought through the App Store or Google Play. Apple or Google take the payment; we never see your card or payment details. To know whether you have Pro, the app uses RevenueCat. It sends RevenueCat an app user ID, which is a random ID RevenueCat creates for the installation or, while you're signed in, your Baitlore account ID, together with the store's record of your purchases. RevenueCat keeps your purchase history (which product, when it was bought, renewed or cancelled, the store and the country) and tells the app whether Pro is active. When you sign in, a purchase made before signing in moves to your account, so it follows you to other phones; when you log out or delete your account, the app starts again with a new random ID.

Purchase records are kept as long as they are needed to provide Pro and for our accounting and tax obligations. Deleting your Baitlore account doesn't delete them; email support@baitlore.com to ask for that.

Legal basis: performing our contract with you (providing what you bought) and our legal obligations.

Usage statistics

If you allow usage statistics, the app creates a random ID for that installation. It is not taken from your phone's hardware or advertising ID, and it isn't shared with anyone. On iPhone it is kept in the secure storage that survives deleting and reinstalling the app, so a reinstall counts as the same installation. The app sends it with its requests, together with the platform (iOS or Android) and the app version. For each day the app is used, we store that ID, the platform, the app version and four counts: how many times you tapped "Show my plan", turned down the free plan, saw the Baitlore Pro screen, and got a plan. On Android, once you allow usage statistics, it also sends, once, the campaign tag of the Google Play link it was installed from (for example "tiktok" and the name of an ad, or "google-play" when you found it in the store), so we can tell which of our ads bring people who use the app. We store it with the random ID only; while your daily records are linked to your account, it can be matched to them through that ID. If you are signed in, that record is linked to your account; if you delete your account, the link is removed and the record is no longer linked to your account.

Separately, we keep daily totals of plans per species and per broad region (for example "Iberia" or "North America"), worked out from the coordinates of the plan request. These totals contain no ID and no coordinates and can't be traced to you or your phone.

We use these statistics to know how many people use the app, whether they come back, and which species and regions matter most. The first time you open the app, it asks whether you allow this, and nothing is counted until you answer yes. Legal basis: your consent. You can withdraw it at any time, without giving a reason, by turning off the Usage statistics switch in Profile: the app then stops sending the ID, and nothing more is counted for your phone, including the species and region totals. If you have an account, you can also ask us to delete the records linked to it by emailing support@baitlore.com.

On your phone only

Your tackle box, the list of spots you saved, your recent plans and which plan you used as your free plan stay on your device and are never sent to us. Your temperature unit and the choices you last made in the planner are also remembered on the device; they reach us only as part of a planner request, as described above.

Website

baitlore.com sets no cookies, runs no analytics and loads nothing from other companies: fonts and images are served from our own server. It keeps no visitor logs.

Third parties

• Map tiles are served by OpenFreeMap (openfreemap.org). When the map loads, your device requests tiles for the area you are viewing, so OpenFreeMap sees your IP address and which map areas you look at. We don't send them anything else.
• Google and Apple process your sign-in if you choose "Sign in with Google" or "Sign in with Apple", under their own privacy policies.
• Email. We send confirmation and password reset codes through Resend (Plus Five Five, Inc., United States). Resend receives your email address and the code. Transfers to the United States rely on the EU standard contractual clauses and on Resend's certification under the EU-US Data Privacy Framework.
• Purchases. Apple and Google process payments for Baitlore Pro under their own terms and privacy policies. RevenueCat (RevenueCat, Inc., United States) processes your app user ID and purchase history on our behalf, to check which purchases are active. Transfers to the United States rely on the EU standard contractual clauses in RevenueCat's data processing agreement.
• Weather data comes from NOAA's public GFS model. Our server downloads it in bulk; no data about you is sent to NOAA.
• Hosting. Our server and database run on DigitalOcean, in Frankfurt, Germany. They process data on our behalf and under our instructions.

Our server, database and backups are in the EU; Resend and RevenueCat are in the United States, as described above. We don't use third-party analytics, crash reporting, advertising or any other tracking SDK, and we don't track you across other companies' apps or websites. Our usage statistics are kept on our own server only. We don't sell data and don't share it with anyone for their own purposes.

Security

The app talks to our server only over encrypted connections (HTTPS). Passwords are stored as hashes, sign-in tokens on your phone are kept in the phone's secure storage, and backups are encrypted. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the authorities as the law requires.

Retention

Account data, feedback, reports and blocks are kept for as long as your account exists. Sign-ups never confirmed by email are deleted after 7 days. If your account has been suspended, email us to delete it. Sign-in tokens expire after 30 days. Confirmation and reset codes expire after 15 minutes. Server request logs are deleted after 14 days. Daily usage records and daily plan totals are deleted after 25 months. Purchase records are kept as described under Purchases. Backups of the database are made every night, encrypted, and kept for 30 days on a storage device we own in Portugal, then deleted.

Deleting your account

Open the app, go to Profile and tap Delete account. This immediately and permanently removes your account, sign-in tokens, feedback, spot suggestions, reports, blocks and any spots you submitted that were not yet published, and unlinks your usage statistics from you. If you signed in with Apple, we also remove Baitlore from your Apple ID. Spots that were already published on the community map remain, with your username removed. Copies in database backups are deleted within 30 days.

If you no longer have the app installed, email support@baitlore.com from the address on your account and we will delete it within 30 days. See Delete your account for the full steps.

Your rights

Under the GDPR you can ask us to access, correct, export or delete your data, to restrict or object to how we use it, and to withdraw consent where we rely on it. We offer the same rights wherever you live. Email support@baitlore.com, in English or Portuguese. You can also complain to your local data protection authority; in Portugal that is the CNPD (cnpd.pt). We reply to requests within 30 days.

We don't make decisions about you by automated means that have legal or similarly significant effects. Plans are the same for everyone with the same conditions.

Children

Baitlore is not directed at children under 16 and we don't knowingly collect data from them, with or without an account. If you think a child has created an account, contact us and we will remove it.

Changes

If we change this policy in a way that matters, we will note it in the app and update the date at the top.

Contact

Miguel Soares, Av. D. Abril Peres n5, 5155-802 Touca, Portugal. NIF: 240289765. Phone: +351 924 382 468. Email: support@baitlore.com.