🎣 Piscaria
PL EN

Piscaria Privacy Policy

Version: 1.5
Effective date: October 6, 2026
Last updated: October 6, 2026

In case of any discrepancy between the Polish and English versions, the Polish version prevails.

1. Data controller

The controller of your personal data is:

Serhii Litvinov
Email: fishdex.kontakt@gmail.com

For any matters concerning personal data protection, please contact us at the email address above.

We have not appointed a Data Protection Officer, as this is not required in our case.

2. About Piscaria

Piscaria is a mobile fishing journal. It lets you record information about fish you have caught (species, weight, length, photo, location and time of the catch, weather conditions) and browse them on a map and in a gallery. The app also displays information about legal size limits and closed seasons, as well as a directory of Polish Angling Association (PZW) districts β€” all provided for reference only.

3. What data we collect and why

3.1. Account data

Data Purpose Legal basis Retention
Email address, name and profile picture from your Google account Creating and operating your account, authentication Art. 6(1)(b) GDPR β€” performance of a contract Until account deletion
User identifier (UID) issued by Firebase Linking your data to your account Art. 6(1)(b) GDPR Until account deletion

Google account data (email, name, profile picture) is stored solely within Firebase Authentication. The app does not copy it into its own database and does not display it to other users.

3.2. Catch and place data

Data Purpose Legal basis Retention
GPS coordinates of the catch location Displaying catches on the map Art. 6(1)(b) GDPR Until the catch or account is deleted
Photo of the fish Documenting the catch in your journal Art. 6(1)(b) GDPR Until the catch or account is deleted
Species, weight, length, date and time, bait, groundbait, fishing method Keeping the fishing journal Art. 6(1)(b) GDPR Until the catch or account is deleted
Weather conditions at the time of the catch Completing the journal entry Art. 6(1)(b) GDPR Until the catch or account is deleted
My waters β€” name of the fishing water, optionally its location (the centre of the water body and the OpenStreetMap object identifier, if it was added from the map search, or the catch coordinates, if it was created from a catch card), a note, and the catches assigned to it Keeping your own list of fishing waters and catch statistics for them Art. 6(1)(b) GDPR Until the fishing water or account is deleted
Points β€” GPS coordinates of a place you marked on the map, its name, a note, and optionally the fishing water it belongs to Remembering your own places on the map (e.g. water access, a fishing spot) Art. 6(1)(b) GDPR Until the point, the fishing water it belongs to, or the account is deleted

Catch, fishing water and point data is private. It is not shared with or displayed to other users of the app and is not published anywhere.

Notes. You can add your own note (up to 2,000 characters) to fishing waters and points; it is stored together with the other data of the fishing water or point. Do not enter other people's personal data in notes (for example names, phone numbers or vehicle registration numbers) β€” the app reminds you of this below the note field.

3.3. Technical data

Data Purpose Legal basis Retention
Selected interface language Remembering your preference Art. 6(1)(f) GDPR β€” legitimate interest Until the app is uninstalled
Confirmation that the legal disclaimer was accepted, with date and version Demonstrating that the user has read the disclaimer Art. 6(1)(f) GDPR β€” legitimate interest Until account deletion
Map place search history β€” names and coordinates of up to 10 most recently selected places Quickly returning to previously selected places, including without an internet connection Art. 6(1)(f) GDPR β€” legitimate interest Until you sign out, delete your account or uninstall the app
Outlines of fishing waters downloaded from OpenStreetMap (public geographic data) Showing outlines without downloading them again, including without an internet connection Art. 6(1)(f) GDPR β€” legitimate interest Up to 30 days, until you sign out, delete your account or uninstall the app

The interface language, the place search history and the outlines of fishing waters are stored locally on your device only and are never transmitted to us. The search history and the outlines are excluded from Android backups and are cleared when you sign out or delete your account.

4. Data recipients

We use the following third-party services:

4.1. Google Ireland Limited / Google LLC (Firebase, Google Sign-In)

Data transferred: account data, catch data, saved fishing waters and points with their notes, photos.

Purpose: user authentication, storing app data, storing photos.

Storage location:

Google Privacy Policy: https://policies.google.com/privacy

4.2. Open-Meteo

Data transferred: geographic coordinates rounded to two decimal places (accuracy ~1 km), plus date and time.

Purpose:

For which place: your current location β€” only if you have already granted the app location access (the app does not ask for it for this purpose); otherwise the centre of the visible map area or the location of your most recent catch.

The bite index on the forecast screen is calculated on your device from the same forecast data and involves no additional data transfer.

What we do not transfer: no user identifiers, email address or account data. The request is anonymous.

Service website: https://open-meteo.com

4.3. OpenStreetMap Foundation β€” map

Data transferred: coordinates of the visible map area (tile numbers) and the device's IP address.

What we do not transfer: no account data or user identifiers.

Purpose: rendering the standard map background.

Note: if you use the "my location" button to centre the map, the visible map area may coincide with the area where you are. Your coordinates themselves are never transmitted β€” only the visible map area is.

Privacy policy: https://osmfoundation.org/wiki/Privacy_Policy

4.4. Esri β€” satellite map layer

Data transferred: coordinates of the visible map area and the device's IP address β€” the same as for OpenStreetMap tiles.

What we do not transfer: no account data or user identifiers.

Purpose: displaying the satellite view, available as an optional map layer (street/satellite toggle β€” the app shows a "Powered by Esri" attribution while this layer is active).

4.5. Nominatim / OpenStreetMap Foundation β€” place search and water outlines

Data transferred: the search text you enter, the interface language, the approximate visible map area (rounded, accuracy ~11 km), the device's IP address, and a User-Agent header with the app name and version and the developer's contact email address (required by the Nominatim usage policy).

What we do not transfer: account identifiers, your email address, or any other data that could identify you.

Purpose: finding a town or body of water you specify in the map search field, and showing the outlines of fishing waters (see below).

When: searching happens only when you take action β€” pressing Enter or the search button. The app does not suggest results as you type.

Water outlines: to draw a lake shore or river channel on the map, the app retrieves the outline of an OpenStreetMap object from Nominatim. Only the identifier of that object (e.g. the lake’s OpenStreetMap number), the device’s IP address and the same User-Agent header are sent β€” not the name you gave the fishing water, your notes or account data. This happens when you select a water body from the search results, when you tap β€œShow on map” on a fishing water card, and automatically when the map is shown with the β€œMy places” layer on and the outline of a saved fishing water is not yet stored on the device (no more than 20 such automatic requests per app launch).

Transfer outside the European Economic Area: this data is processed by the OpenStreetMap Foundation, based in the United Kingdom. The European Commission has recognised the United Kingdom as providing an adequate level of data protection (adequacy decision), which forms the legal basis for this transfer.

Privacy policy: https://osmfoundation.org/wiki/Privacy_Policy

4.6. Firebase technical data

Firebase libraries automatically send basic technical data about the app's operation to Google (for example, library version and the fact that the app was launched). This is an inherent part of using Firebase services.

5. What we do NOT do

We think this is worth stating plainly:

6. What happens only on your device

The following operations run locally and involve no transmission of data to any server:

Your photo leaves the device only when you deliberately save a catch entry.

The directory of Polish Angling Association (PZW) districts is stored entirely within the app, with no network connection when it loads. Tapping a link to a district's website opens it in your system browser β€” the app does not transmit any additional data about you (further data, such as your IP address, is then received directly by the district's own website, the same as visiting any website normally would). Piscaria does not sell fishing permits and is not affiliated with PZW β€” the links lead only to the official websites of individual districts. One link (the Tarnobrzeg district) leads to a site without encryption (http) β€” once opened, that site's own rules apply, independent of Piscaria.

7. App permissions

Permission Why it is needed
Location access (precise and approximate) Recording the location of a catch and β€” optionally β€” showing your position on the map and tailoring the weather forecast and the current weather tile to it. You may be asked for consent both when creating an entry and while using the map β€” the weather tile does not ask for it
Internet access Saving data, retrieving weather, map tiles, and place search results
Network state Responding to loss of connectivity

The app does not request camera or file access. You select a photo from your gallery through the Android system picker, which passes only the photo you chose. The "Take a photo" option opens the system camera app, which passes only the photo you took β€” the app does not need the CAMERA permission for this.

Android may also show permissions related to biometrics (fingerprint / face recognition) β€” these come from Google's sign-in mechanism (Android Credential Manager), which we use for secure Google sign-in. Piscaria itself does not request or read biometric data β€” this is a system-level phone feature tied to sign-in, unrelated to any other function of the app.

You may decline location access β€” the app will still work, but catches will not be saved with a location and will not appear on the map, your position will not be shown, and the weather forecast and tile will be based on the centre of the visible map area or the location of your most recent catch instead of your location.

8. Your rights

Under the GDPR you have the right to:

How to delete your account

In the app: account menu β†’ "Delete account". This removes all catches, photos, fishing waters, points and notes, and the account itself. The action is irreversible.

Without installing the app: https://fishdex-27cbf.web.app/delete-account β€” send an email requesting account deletion, as described on that page.

Deletion in the app takes effect immediately. Requests sent by email are completed within 30 days of receipt. Google infrastructure backups may retain data for up to 30 days, after which it is removed automatically.

9. Data security

10. Children

The app is not directed at children under 16 and we do not knowingly collect their data. If you are a parent or guardian and believe a child has provided us with their data, please contact us at the address in section 1 and the data will be deleted.

11. Changes to this policy

This policy may be updated, in particular as the app develops and new features are added.

We will notify you in the app of any material changes before they take effect. The date of the most recent update appears at the top of this document.

Version history:

Version Date Changes
1.0 September 17, 2026 Initial version
1.1 September 19, 2026 Added: map place search (Nominatim/OpenStreetMap), satellite map layer (Esri), Open-Meteo weather forecast for the current location, PZW district directory. Clarified how location is read on the map, and explained biometric permissions originating from Google's sign-in mechanism
1.2 October 3, 2026 Changed: coordinates sent to Open-Meteo are rounded to two decimal places (~1 km). Clarified: local map place search history, the data sent to Nominatim, removal of EXIF metadata (including GPS) from photos, taking photos with the system camera app, access to photos via a keyed address, and the deadline for account deletion requests sent by email
1.3 October 4, 2026 Added: your own fishing waters and map points with notes β€” the data involved, legal basis and retention period (section 3.2), the transfer of this data to Google/Firebase (section 4.1), a reminder not to enter other people's personal data in notes, and deletion of fishing waters, points and notes when the account is deleted (section 8)
1.4 October 4, 2026 Added: a current weather tile on the main screen β€” retrieved automatically when you open the app (no more often than every 30 minutes) for your location if access was granted earlier, otherwise for the map centre or the location of your most recent catch; a bite index calculated on the device (sections 4.2, 5, 6 and 7)
1.5 October 6, 2026 Added: outlines of fishing waters on the map β€” retrieved from Nominatim by OpenStreetMap object identifier, including automatically when the β€œMy places” layer is shown (section 4.5), and storage of downloaded outlines on the device (sections 3.3 and 6)

12. Contact

For matters concerning personal data protection:
fishdex.kontakt@gmail.com

We respond within 30 days.