Privacy

The controller of personal data processed under this policy is Petterik Oy, Business ID FI31027281, registered in Finland. You can contact us at [email protected]. Data Protection Officer: not applicable unless later appointed. This policy covers the website only. The mobile app and backend service are covered by the app privacy policy below.

Because this is a simple landing page, we collect only limited categories of data:

• Support form and correspondence data: your name, email address or other contact detail, message, and any files or information you choose to include;
• Technical website data: IP address, browser type, device information, language setting, date/time and basic request logs generated when you access the site;
• Strictly necessary cookie data: small technical identifiers required to make the website work, keep it secure, or remember basic settings such as a language choice, if used.

We do not sell your personal data. We do not use third-party advertising or third-party analytics on the website described in this policy. We share website support-form data only where necessary with service providers acting on our behalf, authorities where legally required, and professional advisers where needed for legal or compliance reasons.

Support-form emails are processed by Resend (Plus Five Five, Inc.) as our processor. Resend is used to transmit, route and process support emails sent through the website. That means Resend may process your email address, message content, email headers/metadata and any attachments included in the support request, to the extent required to deliver and manage that email traffic.

Because Resend may store or process customer data in the United States, support emails may be processed outside the EEA. Where personal data is transferred outside the EEA, we rely on a valid transfer mechanism such as an adequacy decision, Standard Contractual Clauses or another valid safeguard. If you ask, we will explain the safeguard relied on for your data.

We keep personal data only for as long as necessary for the purpose for which it was collected, unless longer retention is required by law or needed for legal claims. Current website retention periods are:

• support emails and support-form submissions: normally 12 months after the request is closed;
• technical security logs: normally 30-90 days;
• data needed for legal claims or compliance: for as long as required by the relevant limitation period or legal obligation.

We apply technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. If a personal data breach is likely to create a risk to individuals, the controller may need to notify the supervisory authority within 72 hours and, in high-risk cases, also notify affected individuals.

Subject to applicable law, you have the right to request access to your data, rectification, erasure, restriction of processing, objection to processing based on legitimate interests, and portability where GDPR applies. If we rely on consent for any processing, you may withdraw that consent at any time without affecting earlier lawful processing. We normally respond without undue delay and within one month.

This website uses only strictly necessary cookies or similar technical storage, if any, to make the site work, keep it secure, and support basic functionality such as language selection or form/session integrity. We do not use analytics, advertising or social-media tracking cookies on the facts described in this policy. If that changes, we will update this policy and, where required, request consent before activating non-essential cookies.

If you think we have handled your personal data unlawfully, we ask that you contact us first at [email protected] so we can try to fix it. You also have the right to lodge a complaint with a supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman, Lintulahdenkuja 4, 00530 Helsinki; P.O. Box 800, 00531 Helsinki, Finland; email tietosuoja(at)om.fi; switchboard +358 (0)29 566 6700.

We may update this policy from time to time. The version number and "last updated" date above show the current version.

The controller of personal data processed through the app and backend is Petterik Oy, Business ID FI31027281, registered in Finland. You can contact us at [email protected]. Data Protection Officer: not applicable unless later appointed.

Depending on the features you use, we process the following categories of personal data:

• Account data: email address, login credentials or password hash, account ID, and basic account settings;
• Profile data: any display name, avatar or profile information you choose to add;
• Catch and fishing data: entries you create, including location, date/time, species, photos, notes and any other catch-related fields used in the product;
• AI-assisted feature data: catch photos and limited context you choose to submit for fish detection or diary description suggestions, together with the resulting species suggestion, confidence and generated text;
• Shared content and community data: content you choose to share with other users, together with reports, blocks, moderation actions and related correspondence where relevant;
• Device and service-operation data: IP address, app version, operating system, device information, timestamps, and technical logs required for service operation, security and troubleshooting;
• Support data: messages you send to us and any support correspondence.

If the app asks for access to device location, photos or camera, that access is used only for the feature you choose to use, such as logging a catch location, uploading a catch photo, detecting a fish from a photo or creating a diary entry. Device permissions are separate from GDPR legal basis; this policy explains the underlying purpose and lawful basis.

If you choose to share a catch entry, photo, note or location, that content becomes visible to the audience selected in the app. Shared content may reveal your behaviour, routines or whereabouts. For that reason, final production settings should be privacy-conscious and easy to understand.

We do not sell personal data. On the facts supplied, we do not use third-party advertising or third-party analytics in the app. We disclose personal data only:

• to other users where you choose to share content with them;
• to processors acting on our behalf;
• to AI service providers acting on our behalf where you choose to use AI-assisted fish detection or diary description features;
• to authorities, courts or regulators where required by law;
• to advisers where reasonably necessary for legal or compliance purposes.

Support emails are processed for us by Resend (Plus Five Five, Inc.). Resend is used for support-form and support-email handling and may process your support contact details, message content, email headers/metadata and attachments to the extent required to deliver and manage that email traffic.

When you choose to use AI-assisted fish detection or diary description suggestions, the app may send your selected catch photo and limited context to an AI service provider acting on our behalf. The feature is optional, and the app should give clear context before sending a photo for online AI analysis.

If personal data is processed outside the EEA, we will ensure there is a lawful transfer mechanism under GDPR Chapter V, such as an adequacy decision, Standard Contractual Clauses, or another valid safeguard. This may apply to support processing through Resend and to optional AI-assisted features, depending on the providers configured for the live service.

We keep data only for as long as necessary for the purposes described above. Current app retention periods are:

We use technical and organisational measures designed to protect personal data, taking into account the risk of the processing. This may include access controls, secure transmission, role-based access, logging, backup controls and incident-response procedures, to the extent actually implemented.

Subject to applicable law, you may request access, rectification, erasure, restriction, portability, and objection to certain processing. If we rely on consent for an optional feature, you may withdraw that consent at any time. We will normally respond within one month.

If you create an account, you should be able to initiate deletion from within the app and, until a dedicated web deletion page is published, by contacting [email protected]. When feasible, deletion should remove the account and associated personal data that we are not legally required to retain. If some data must be kept for security, fraud-prevention, abuse handling, legal obligations or legal claims, we will explain that in this policy.

The service is not directed to children under 13. If we discover that an account has been created in breach of this rule, we may suspend or delete the account.

On the facts supplied, we do not carry out automated decision-making that produces legal or similarly significant effects for users. If that changes, we will update this policy before deploying it.

You may contact us first at [email protected]. You also have the right to lodge a complaint with a supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman, Lintulahdenkuja 4, 00530 Helsinki; P.O. Box 800, 00531 Helsinki, Finland; email tietosuoja(at)om.fi; switchboard +358 (0)29 566 6700.

We may update this policy from time to time. We will change the version number and date above and, where required, notify users of material changes.