1. Introduction

MarshMind respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service. By using the Service you consent to the practices described herein. If you do not agree, do not use the Service.

2. Definitions

• "Personal Information" means any information that identifies or can reasonably be used to identify you.
• "User Data" means catch logs, waypoints, trip plans, and other content you submit.
• "Service" has the meaning given in the Terms of Service.
• "Third-Party Service Providers" means the processors listed in Section 6.

3. Information We Collect

We collect only the following categories of information:

• (a) Account Information: Email address (via Supabase Auth).
• (b) Usage and Device Data: Anonymous device ID stored in browser localStorage; anonymized session and page-view data via Google Analytics (property ID G-THL6F2ZVZR); and anonymous feature-interaction events (e.g. which features are used, which fishing species are selected, which zones are viewed) stored in our own database to improve the app. These events contain no PII and auto-delete after 90 days.
• (c) User-Submitted Content: Catch logs, waypoint coordinates, trip plans, and contact form messages.
• (d) Subscription and Payment Data: Subscription status and billing identifiers from Stripe. We never receive or store full payment card numbers.
• (e) AI Inputs (Master Angler tier only): Text prompts and User Data voluntarily submitted for AI-generated fishing summaries, transiently processed by our AI language engine.

We do not collect: full legal name, phone number, physical address, government-issued ID, payment card numbers, or GPS location except when you voluntarily trigger the Read My Spot feature.

4. How We Use Your Information

We use your information solely to:

• Provide, maintain, and improve the Service including AI scoring, recommendations, and summaries
• Process subscriptions and payments via Stripe
• Send transactional emails via Resend from noreply@marshmind.com
• Analyze anonymized usage trends via Google Analytics and our internal feature analytics to improve the Service
• Respond to contact form inquiries
• Comply with legal obligations and enforce our Terms

5. Sharing and Disclosure

We share information only as follows:

• With Third-Party Service Providers contractually bound to protect data and use it only as we specify
• To comply with law, court order, or government request
• In connection with a merger, acquisition, or sale of assets with notice where required

We never sell your Personal Information. We do not serve or permit third-party targeted advertising.

6. Third-Party Service Providers

• Supabase — Authentication and database (SOC 2 Type II)
• Stripe — Payment processing (PCI-DSS Level 1)
• Resend — Transactional email delivery
• Google Analytics — Anonymized usage analytics
• AI language engine — AI fishing summaries for Master Angler tier only. User prompts sent transiently for inference; we do not permit our AI provider to train on your data or retain it beyond the processing window.
• NOAA / National Weather Service / CO-OPS — Public federal APIs; no personal data transmitted
• Vercel — Hosting and edge delivery

7. Cookies and Tracking Technologies

We use essential localStorage for authentication and functionality. Google Analytics sets cookies for anonymized analytics. You may opt out via the Google Analytics Opt-Out Browser Add-on or browser settings. See https://policies.google.com/privacy for details.

8. Your Rights and Choices

You may:

• Access, correct, or delete your Personal Information and User Data
• Request a CSV export of all catch logs and waypoints
• Opt out of non-essential emails (transactional account emails cannot be opted out of)
• Request deletion of your account and all associated data

To exercise any right, email marshmind@outlook.com. We will respond within 30 days.

9. Data Retention

We retain Personal Information and User Data for as long as your account is active. Upon verified deletion request, we will delete or anonymize your data within 30 days, except for backup copies overwritten in the ordinary course and data legally required to be retained.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect Personal Information from children under 13. If we become aware of such collection, we will delete it immediately.

11. Security

We implement reasonable administrative, technical, and physical safeguards including Supabase SOC 2 controls and Stripe PCI compliance. No method of transmission or storage is 100% secure.

12. International Users

The Service is hosted in the United States. By using the Service, you consent to the transfer of your information to the United States.

13. Changes to This Privacy Policy

We may update this Privacy Policy. Material changes will be notified via email or in-app notice. Continued use after the effective date constitutes acceptance.

14. Contact Information

MarshMind
Charleston, South Carolina, USA
Email: marshmind@outlook.com