Fisho Privacy Policy
Version of Oct 30, 2026 · v1-2026-10-30
Fisho is a fishing app: it builds a plan with artificial intelligence (AI) for the place you choose, shows weather and the Fisho Score, and keeps your catch log, your trips and your gear. This page explains which data we use, what for, who it is shared with and what your rights are. It follows the Brazilian General Data Protection Law (LGPD, Law 13,709/2018). This is a courtesy translation: if the two versions differ, the Portuguese version prevails.
1. Who is responsible
André Diehl Berquó, the developer of Fisho, in Brazil (an individual until a company is registered; this page will be updated with the company tax ID). Contact and data requests: fishoapp@gmail.com.
2. What data we collect
| Data | When |
|---|---|
| Account: name, e-mail and password (stored only in protected form that even we cannot read). If you sign in with Google: the name and e-mail of your Google account. | At sign-up |
| Profile: fishing level, preferred species, default and favorite cities, "how you found Fisho" (optional), referral code, profile photo (optional). | When you fill them in |
| Location: device position (GPS) when you allow it, to suggest the city and fishing spots; places you pick on the map or in the search. | While using the app, with your permission |
| Photos and images: images of places for the Radar, photos of catches, gear, trips and your profile. From gallery photos we read date, time, coordinates (GPS) and camera direction, when present in the photo; the photo's coordinates are stored with the catch. | When you upload or choose the photo |
| Your fishing records: Radar analyses and spots, trips, catches (species, measurements, lure, place, conditions of the day, Fisho Score), notes, checklists, gear (brand, model, specifications). | When you use the app |
| AI usage and cost: how many AI analyses and readings you request, the model used, the request size and the cost, linked to your account. They do not include the content of your photos or notes. | On each AI request |
| Ratings: the thumbs up/down you give to analyses. | When you tap |
On your phone, the app also keeps a copy of your data and images on the device so it can work offline. Good-fishing-day alerts are generated on the device.
3. What we use it for (and the legal basis)
- Providing the service you asked for (performance of a contract): creating your account, building the Radar plan, calculating weather and Score, keeping your log, trips and gear, and syncing between devices;
- Security and usage limits (legitimate interest): preventing abuse and controlling daily AI use;
- Improving Fisho (legitimate interest): measuring whether Radar suggestions are right by comparing the forecast with what was caught, and planning costs. Aggregated results used in presentations or with partners are general numbers that do not identify you;
- Location and photos: only with your permission, which you can withdraw in your phone settings;
- Legal obligations, when they apply.
We do not sell your data and we do not run personalized advertising with it.
4. Who the data goes to
We use third-party services to make the app work. They receive only what is necessary:
| Service | What for | What it receives |
|---|---|---|
| Supabase | Account, database and photo storage | All your account data |
| Google (Gemini) | Radar AI and gear reading from photos | The image of the place (or the map drawing), the place, the date, the weather, your level, the target fish and, if you leave it on, your gear; or the gear photo. We do not send your name or e-mail. |
| Google (sign-in) | "Sign in with Google" | Data from your Google account, only if you choose that sign-in |
| Open-Meteo | Weather, forecast and tides | Coordinates of the place you look up |
| Esri | Satellite imagery on the map | The map area you see (and the device IP address, as in any map access) |
| OpenStreetMap / OpenFreeMap / Photon | Water outlines, maps and place search | The map area and the text you search for |
| Cloudflare | Hosting of the fisho.com.br website | Technical website access data |
These services may store data outside Brazil (for example, in the United States). We ask them to follow protection rules compatible with the LGPD. Images sent to the AI are used to generate the answer; we use the service with billing enabled and we do not authorize the use of your content for purposes other than serving you.
We may also disclose data when the law or a court order requires it.
5. How long we keep it
As long as your account exists. When you delete your account (in the app or on the page), we erase your profile, trips, analyses, catches, photos and gear. Only AI cost records with no link to you and the provider's backups remain; the provider erases the backups within 30 days.
6. Your rights
Under the LGPD you can ask for: confirmation that we process your data; access; correction; anonymization, blocking or deletion of unnecessary data; portability; information about who we share it with; and withdrawal of consent. You can do much of this in the app (Profile). For the rest, write to fishoapp@gmail.com: we answer within 15 days. You may also complain to the Brazilian data protection authority (ANPD). If you live in another country, local law may give you additional rights; write to us and we will do our best to honor them.
7. Security
Each user can access only their own data (database access rules), connections are encrypted and service keys stay on the server, never in the app. No system is 100% secure: if an incident that may cause significant harm occurs, we will notify you and the ANPD, as the law requires.
8. Children and teenagers
Fisho is intended for people aged 18 or older and is not aimed at children or teenagers. We do not knowingly collect data from minors. If we learn that an account belongs to someone under 18, it may be deleted; to request deletion, write to fishoapp@gmail.com.
9. Changes to this policy
If something important changes, we publish the new version here, with the date, and notify you in the app. The version you accepted is recorded on your account.