This Privacy Policy explains how Fish Factor, a service of Robert Jacobo III doing business as IndigeFish Fishing Co. (“Fish Factor,” “we,” “us”), collects, uses, and shares information when you use our website and app at fishfactor.app (the “Service”). By using the Service you agree to this policy.
Information we collect
We collect the following so the Service can work:
- Account information — your name, email address, and a password (stored securely, never in plain text), or, if you sign in with Google, your Google account email and basic profile.
- Fishing activity — the spots you save, and the catches you log, including species, size, notes, date, photos you choose to add, and the location of a catch (captured from your device’s GPS or from a photo’s embedded location data, with your permission).
- Tournament registration — if you enter a tournament, the electronic signature record for the Tournament Participation Agreement: the full legal name you type, the version of the agreement you accepted, the date and time of acceptance, whether you are under 18, your media-consent choice, and, for entrants under 18, the name and relationship of the consenting parent or legal guardian.
- Tournament entries — the catches you submit to an event, including species, length, photo, time, and catch coordinates, which we check against the event’s time window and boundary to verify the entry.
- Billing information — if you subscribe to a paid plan, your payment is processed by Stripe. We do not store your card number; we store your Stripe customer and subscription identifiers and your plan tier.
- Technical information — a sign-in session cookie (required to keep you logged in), and standard server logs such as IP address, browser type, and pages requested.
How we use your information
We use your information to provide and operate the Service: to create and secure your account, generate and personalize your bite forecasts and saved spots, store and display your catch log, run tournaments (verifying, scoring, and displaying entries), process subscription payments, send you account and alert emails you’ve requested, and to maintain, debug, and improve the Service.
Public information — the community map and leaderboards
Catches you log are shown publicly on our community catch map at their recorded location, to help the broader angler community. This is described in the app when you log a catch. Catch locations and basic details (species, date) may be visible to anyone. If you do not want a catch shown publicly, do not log it with location enabled, and you can remove catches you have logged.
If you enter a tournament, your display name, your entries (species, length, photo, and time), and your placement appear on that event’s leaderboard and results, which may be publicly visible. Tournament results may also be used as described in the media release in the Tournament Participation Agreement.
Service providers we share data with
We share information only with the providers that help us run the Service:
- Supabase — authentication, database, and photo storage.
- Stripe — subscription billing and payment processing.
- Resend — sending account and bite-alert emails.
- Google — optional Google sign-in; we also log new sign-ups (name, email, sign-up method) to an internal Google Sheet for product analytics.
- Vercel — application hosting.
- Esri — satellite map imagery.
Our forecasts use public environmental data from NOAA, the National Data Buoy Center, and the National Weather Service. We do not send your personal information to those data sources. We do not sell your personal information, and we do not allow advertisers to pay to target you. If an event is run by an independent tournament director, the director sees the event’s roster and entries so they can administer it.
Cookies
We use two first-party cookies: an essential sign-in cookie that keeps you logged in, and, if you open an invite or promo link, a short-lived cookie that remembers the invite code (for up to 30 days) so the offer can be applied when you sign up. We do not use advertising or cross-site tracking cookies. Because we don’t track you across other sites, we do not respond to browser “Do Not Track” signals — there is nothing to turn off.
Data retention
We keep your information for as long as your account is active. If you delete your account, your profile, saved spots, catches, and alerts are removed; some records may persist briefly in backups or where required by law (for example, billing records). Signed tournament agreements — the name you typed, the agreement version, the acceptance timestamp, and any guardian consent — are legal records, and we retain them even after account deletion for as long as needed to comply with the law and to establish or defend legal claims.
Your choices and rights
You can view and update much of your information from your account page, remove catches you’ve logged, and manage or cancel a subscription through the Stripe customer portal. To request access to, correction of, or deletion of your personal information, contact us at the email below — we complete verified deletion requests within 30 days, except for the records described under Data retention. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the GDPR.
Location data
Location is only captured when you log a catch and grant permission (via your device or a photo’s metadata). You can decline location access in your browser or device settings; catches logged without location simply won’t appear on the map. Tournament entries require catch location so we can verify the entry against the event boundary — an entry without location can’t be scored.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it. Tournament entrants aged 16 or 17 may register only with the consent of a parent or legal guardian, whose name and relationship we collect as part of the signed Tournament Participation Agreement.
Security
We protect your data with encryption in transit, hashed passwords, and database access controls that restrict your data to you. No system is perfectly secure, but we work to safeguard your information.
Changes to this policy
We may update this policy from time to time. We’ll revise the “last updated” date above and, for material changes, provide additional notice.
Contact
Questions about this policy or your data? Email indigefish@gmail.com.
See also our Terms of Service and the Tournament Participation Agreement.