Privacy Policy

Anonymous Usage Analytics

To improve Get Hooked! and understand which features are valuable, we collect anonymous usage data via Google Firebase Analytics.

Information Stored Locally

All of the following stays on YOUR device:

• Waypoint Data: GPS coordinates, names, descriptions for your fishing spots
• GPX Files: Imported files and their waypoints
• Catch Records: Species, conditions, timestamps
• River Favorites: USGS stations and flow alert thresholds
• Pattern Analysis: Correlations and insights from your history
• Angler DNA: Your fishing archetype and personality profile

This data never leaves your device unless you explicitly back it up to iCloud/Google Drive or share it with others.

Opt-In Sharing (Buddy Share & Captain Mode)

Two features in Get Hooked! transmit data through our infrastructure. Both are explicitly opt-in — nothing happens unless you turn them on.

Buddy Share — End-to-End Encrypted

When you pair with a fishing buddy via PIN, your shared content (live position, waypoints, trip data, boat info) is encrypted on your device before it is uploaded to our infrastructure. Only the recipient's device can decrypt it.

• Cryptography: Apple CryptoKit — Curve25519 ECIES key agreement, ChaCha20-Poly1305 authenticated encryption, HKDF-SHA256 key derivation. No custom or non-standard cryptography.
• Private keys: Generated on your device and stored in the iOS Keychain (`kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly`). They never leave your device. We do not have access to them and cannot recover them.
• Server role: Our AWS Lambda + S3 setup acts as a dead drop — it stores and forwards encrypted blobs but cannot decrypt them. Server-side logs capture only metadata (request ID, IP, HTTP status, timestamp) for operational diagnostics. They never contain decrypted content.
• PIN format: Auto-generated, opaque, 8 characters (XXXX-XXXX). Not derived from any personal information.
• Disconnecting: Removing a buddy or deleting your share deletes the encrypted blob from our infrastructure.
• Build compatibility: Buddies on app builds older than 26.4.29 receive a transitional payload that older clients can decode. Once they update, the share is end-to-end encrypted in both directions.

Captain Mode — Reviewed Public Listing

If you opt in to Captain Mode and Publish your captain profile, the business information you provide (name, dock location, services, contact methods, photos you upload) is reviewed by our team and, if approved, displayed on the public charter map inside the app. Trip postcards you generate are published to a shareable web URL — they include the day's hero photo, catch stats, weather conditions, and a narrative recap, but never the actual catch coordinates or waypoints. Removing your captain listing or deleting a postcard removes it from our infrastructure.

Neither feature collects, transmits, or shares any data unless you explicitly enable it.

Encryption export compliance: Get Hooked! uses only Apple-provided system-framework cryptography (CryptoKit). Under U.S. Export Administration Regulations, this places the app in mass-market category 5D992.c. Distribution is U.S.-only on the App Store, and no annual self-classification report is filed.

What We Don't Do

Outside of the opt-in sharing features described above, Get Hooked! does not:

• Collect, store, or transmit your fishing spot locations
• Track which bodies of water you fish
• Monitor your fishing patterns or success rates
• Sell or share any data about you
• Use advertising networks or behavioral advertising
• Require account creation or personal information
• Read the contents of Buddy Share transmissions — they are end-to-end encrypted and we do not hold the keys

Your Rights & Controls

• Access: All your data is stored locally and accessible within the app
• Deletion: Delete waypoints, GPX files, catch records, or all app data at any time
• Export: Export your waypoints as GPX files whenever you wish
• App Removal: Deleting the app removes all locally stored data