Contents
This policy explains what information Capturia (the fishing app available for Android/iOS) collects, how we use it and what rights you have over it. It has been drafted in accordance with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
This policy is available in several languages. In the event of any discrepancy between versions, the Spanish version shall prevail.
The purchase and subscription terms (plans, renewal and price changes) are on this page.
1. Data controller
Rubén Álvarez Felgueroso, developer of Capturia, decides what data is processed and for what purpose.
Contact: capturiaSpain@gmail.com
As this is an app by an individual developer, there is no Data Protection Officer (one is not required for this type of processing).
2. What data we process
Account and profile
- Registration: email address and password, or your Google or Apple account if you choose "Sign in with Google" or "Sign in with Apple". If you choose to hide your email when signing in with Apple, we only receive the anonymous relay address Apple assigns you, not your real email. We never see your password: it is managed in encrypted form by our authentication provider, Supabase.
- Public profile: username, avatar photo, a short description and the links you choose to add yourself in "My links".
- My area: if you fill it in under "My Profile", the country and city you are from. It lets other anglers find you with "Search by area" in My companions, and it is only shown if you have "Visible to other users" turned on in Settings. It is optional and you can delete it at any time.
- Subscription plan (Free/Plus/Premium/Pro) and the platform you use the app on (Android/iOS/web), so we can provide support and for internal usage statistics.
Content you create in the app
- Fishing spots: name, type, photo and GPS coordinates of the place (only if you enable location when creating a spot).
- Catches: species, spot, photos of the fish, a video if you decide to add one, and environmental data of the moment (tide, moon phase, wind, sea state, etc.) that you enter yourself. You can also fill in the weather and sea data automatically with the weather buttons, based on the spot (or your current location, if you choose that option and grant permission), the date and the time; you can always edit them.
- Blank days and big bites: records of your fishing sessions (with or without a catch), including the description you write.
- Your own species: if you add a species that is not in the official catalogue, including its photo.
All this content can be marked as private or public. Catches have four visibility levels: "Private" (only you), "Buddies" (seen by the companions you have added in "My companions", with the details you choose), "Public (map)" (only added anonymously to the community map, without photos or video; your companions don't see it) and "Buddies and public" (both at once). Your companions see its photos, the species and the weight, plus whatever you choose to show, but never the spot if it is private, nor the video. All other public content is visible to other Capturia users. So that your companions can see it, a catch set to "Buddies" or "Buddies and public" (with its photos, its video and the linked spot, species and gear) is stored in the cloud even if you have not enabled cloud backup; if you mark it as private again, it is no longer visible to them.
Community public catches map. When you set a catch's visibility to "Public (map)" or "Buddies and public" (it needs a spot with a location, date, time and weight or quantity), Capturia keeps its own copy, without photos or video, with its species, weight or quantity, spot location, date and time. That copy is kept even if you later delete the catch (on your phone or in the cloud) or change its visibility. It is only used in aggregate on the "Public catches" map in the Community section (Premium plan): by areas of about 10 km, showing the number of catches, the species and the average weight, and only when the area has at least 3 catches from 2 different people. Who caught them and the exact spot are never shown. Alongside the copy we store your account's internal identifier, which nobody else sees, only to count your contributions (needed to access the map) and to check that minimum of different people. The app tells you this every time you choose that visibility.
Communication with other users
- Group chat: the messages you write in the groups you belong to and the catches you share in them. They are seen by the group members.
- Private notes: one-off messages you send to another user (a companion or a member of a group you share). Depending on the type, they may contain a phone number and, if you wish, an email address (contact card), a short text, or a meeting spot with its location. Your phone number is not stored in your profile: it is only included in the note you choose to send.
- Companions and requests: the list of users you add as companions and of those who have added you, with the status of each request (pending, accepted or declined). The person you add receives a notice and sees your username and avatar until they accept or decline the request.
- Meetups: date and time, place (and its location, if you add it), an optional comment, the list of invited people and each person's answer (I'm in / can't make it).
This data is only seen by you and the person or people you send it to. Sending it is always your own, optional action.
Internal notes by the Capturia team
- Administration notes: the Capturia team may keep a short internal note linked to your account (for example, the shop or company a professional user belongs to, or how they contacted us) to manage the account, provide support and maintain the relationship with professional users. It only contains objective, professional information, it is not visible to other users and it is deleted when you delete your account.
Technical data
- Chosen language and theme (light/dark), and the visual customisation preferences available from certain plans.
- Internal identifier of your account, used to link it with the payment provider (RevenueCat) and the database.
- Notifications: only if you turn them on in Settings, a phone identifier generated by Firebase Cloud Messaging (a Google service), linked to your account and used solely to send you alerts. It is deleted when you turn them off, log out on that phone or delete your account.
- Verified photos: a yes/no flag indicating whether each catch photo was taken with the camera from within the app, used to show the verification badge.
- Species identification (“What fish is it?”): if you use this feature, the photo you choose is sent, resized and without metadata (EXIF), to our artificial intelligence provider so it can suggest the species, together with your country, your region and the type of water you set in your profile, to refine the result. To give you the approximate minimum size for your area, an approximate location is also sent if available (that of the catch spot or, only if you have already given the app location permission, that of your phone at that moment), rounded to about 1 km. Neither the photo nor that location is stored on our servers or the provider's once analysed, and they are not used to train models. For each use we only store the date and the suggested species, to keep track of the number of identifications in your plan.
- Fishing forecast: to calculate the forecast for a spot, our server looks up the weather, tides and sea state by sending only the coordinates of that spot to the weather service Open-Meteo, without your name, your email or any identifier of yours. With the Premium plan, the forecast also takes into account the times of your catches at that spot; this calculation is done on your own phone and your catches are not sent to anyone for it. The last spot you checked is remembered only on your device.
- Free Plus trial: if you activate it, we store its start and end dates and an encrypted device identifier (an irreversible digest of the identifier the system assigns to the app on your phone; never the identifier itself), only to prevent the trial from being repeated on the same phone with other accounts. Legal basis: legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). It is kept while the trial is offered and, at most, until you ask for your account to be deleted.
Capturia does not use tracking cookies or third-party advertising or analytics SDKs. We do not access your contacts, messages or other apps on your device.
3. What we use it for and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account and giving you access to the app | Performance of a contract (Art. 6(1)(b)) |
| Storing and displaying your spots, catches and blank days | Performance of a contract (Art. 6(1)(b)) |
| Cloud backup of your data (from the Plus plan) | Consent, when you enable it (Art. 6(1)(a)) |
| Managing your subscription and plan | Performance of a contract (Art. 6(1)(b)) |
| Displaying public content from other users and your own | Consent, when you choose the visibility (Art. 6(1)(a)) |
| Technical support and internal usage statistics | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations (e.g. requests from an authority) | Legal obligation (Art. 6(1)(c)) |
| Internal administration and support notes (e.g. identifying professional users) | Legitimate interest (Art. 6(1)(f)) |
| Adding species you mark as public to the official catalogue, with their name and photo | Consent, when you mark the species as public (Art. 6(1)(a)) |
| Delivering to other users the messages, private notes and meetup invitations you choose to send | Performance of a contract (Art. 6(1)(b)) |
| Sending you notifications on your phone (items, notes, meetups, invitations and new companions), if you turn them on | Consent, when you turn them on (Art. 6(1)(a)) |
| Identifying the species in a photo with artificial intelligence (“What fish is it?”), when you ask for it | Performance of the contract (Art. 6(1)(b)) |
| Calculating the fishing forecast and automatically filling in the weather and sea state of a record, when you ask for it | Performance of the contract (Art. 6(1)(b)) |
| Managing your companions and companion requests | Performance of the contract (Art. 6(1)(b)) |
| Showing your area (country and city) in other users' searches | Consent, by filling it in and having "Visible to other users" turned on (Art. 6(1)(a)) |
| Keeping a copy without photos of catches set to "Public (map)" or "Buddies and public" (species, weight or quantity, location, date and time) and showing anonymous statistics by area on the Public catches map | Legitimate interest in offering the community aggregated, anonymous fishing statistics (art. 6.1.f); you can object by writing to us |
4. Where your data is stored
By default, on the Free plan, your species, spots, catches and blank days are stored only on your device (local database) and never reach our servers.
From the Plus plan, if you enable cloud backup, that data (in addition to your profile and account, which exist from registration) is stored on Supabase servers located in the United Kingdom (London). Catches set to "Buddies" or "Buddies and public" are stored in the cloud in any case, so that your companions can see them; for catches set to "Public (map)" only their data is sent, without photos or video.
In addition, for every catch set to "Public (map)" or "Buddies and public", Capturia keeps a copy without photos or video, with its species, weight or quantity, location, date and time, on those same servers for the Public catches map (see section 2).
5. Who we share it with
We do not sell your data to anyone. We only share it with the providers strictly necessary for the app to work, who act as data processors:
- Supabase (database, authentication and storage of photos and videos).
- RevenueCat (management of subscriptions and in-app purchases; a company based in the United States).
- Google or Apple, only if you choose to sign in with your Google or Apple account.
- Apple / Google (App Store / Google Play), as distribution platforms and for managing subscription payments.
- Google (Firebase Cloud Messaging), only if you turn on notifications: it receives the phone identifier and the alert text (for example, “Pepe sent you a catch”), never the content of what was sent. Company based in the United States.
- Anthropic (Claude artificial intelligence), only when you use “What fish is it?”: it receives the photo you want to identify, without metadata, the fishing area of your profile (country, region and type of water) and, if available, an approximate location (rounded to about 1 km) for the approximate minimum size; never your name or email. It does not keep the photo or the location or use them to train its models. Company based in the United States.
We also use Open-Meteo (a weather and marine data service) for the fishing forecast and for automatically filling in the weather and sea data: from our server it only receives the coordinates being checked (those of the spot or, if you choose it when filling in the weather, your current location) and the dates, never data that identifies you.
In addition, group messages, private notes (including any phone number or email you add) and meetups are shown to the users you choose to send them to. You make that choice; Capturia does not share this data with anyone else.
When these providers are outside the European Economic Area, the transfer is carried out under the safeguards provided for in the GDPR. Specifically, our database (Supabase) is hosted in the United Kingdom, a country that has an adequacy decision from the European Commission: this means it is considered to offer a level of protection equivalent to that of the EU, so data can be transferred there without additional safeguards. For the other providers outside the EU/EEA (such as RevenueCat, in the United States), the transfer is based on the European Commission's standard contractual clauses.
6. How long we keep it
We keep your data for as long as your account is active. If you delete your account, we delete your profile and the content associated with it from our servers, unless the law requires us to keep something (for example, for accounting reasons or dispute resolution) for the legally required period.
Private notes are deleted automatically 7 days after being read, or after 30 days if they are never read. Meetups, together with their guest list and answers, are deleted automatically 3 days after their date (or earlier if the organiser cancels them). Recipients can also delete a note they have received at any time.
You can delete your account from within the app (My profile → Delete my account) or by email. How to delete your account.
The copy of public catches for the community map (section 2) is kept even if you delete the catch or make it private. If you delete your account, it is no longer linked to you and becomes fully anonymous. If you would rather we delete your contributions sooner, write to capturiaSpain@gmail.com and we will remove them.
7. Your rights
As a Capturia user, you can exercise the following rights at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate data (much of it, such as your display name or photo, you can change yourself in "My profile" and "Settings").
- Erasure: ask us to delete your data.
- Portability: receive your data in a reusable format.
- Objection and restriction: object to a specific processing or ask us to restrict it.
Internal notes: the right of access includes any internal notes the Capturia team may have kept about your account. You can ask us at any time for a copy, or for them to be corrected or deleted, by writing to capturiaSpain@gmail.com from your account's email address with the subject “Internal notes”.
To exercise any of these rights, write to us at capturiaSpain@gmail.com. We will reply within one month at most.
If you believe we have not handled your request properly, you can lodge a complaint with the data protection authority of the EU or EEA country where you live, work or where the alleged infringement took place. For example: in Ireland, the Data Protection Commission (DPC); in the United Kingdom, the Information Commissioner’s Office (ICO); in Spain, where Capturia’s controller is established, the Spanish Data Protection Agency (AEPD). You can find the authorities of every country on the European Data Protection Board website.
8. Photos and public content: terms of use
Public species and the official catalogue. If you mark a species you created as public, you authorise us, free of charge and on a non-exclusive basis, to add its name, details and photo to Capturia's official catalogue, visible to all users, and to show it in the app for as long as the catalogue exists. Only publish photos you took yourself or that you hold the rights to. You can withdraw this authorisation by writing to us: we will remove your photo from the official catalogue (copies that other people have already added to their personal list may be kept).
The Capturia team may choose a different photo for the official version of a species. This never changes the photo of your own species or of other users' copies: if a new official photo appears, each person decides whether to use it.
Photo metadata (EXIF). Phone photos may contain hidden data such as the GPS coordinates where they were taken, the exact date and time, or the phone model. Capturia removes it as soon as you add a photo to the app (with the camera or from the gallery), before saving it on your device or uploading it to the cloud, and also when you share a photo from the app with other apps or social networks. The location of a catch or a spot is only stored in its own fields, if you add it, and other people only see it if you make that content public.
Photos added before 2 October 2026 may still contain this metadata on your device or in your cloud copy; it is also removed when you share them from the app.
Species photos from external sources (GBIF, iNaturalist, Wikimedia Commons) are used under their licence, with their author credited in About Capturia > Credits.
9. Minors
Capturia is not intended for children under 14. If you are a parent or guardian and believe that a minor in your care has provided us with personal data without your authorisation, contact us so we can delete it.
10. Security
We apply reasonable technical and organisational measures to protect your data: authentication and cloud storage are handled through Supabase, with encrypted connections (HTTPS) and row-level access control (each user can only read and modify their own data, except content that others mark as public; catches set to "Buddies" or "Buddies and public" only for the companions their author has added; the community map only shows anonymous totals by area).
11. Changes to this policy
We may update this policy if our practices or the applicable regulations change. If the change is significant, we will notify you within the app itself. The date of the last update appears at the top of this page.
12. Contact
For any questions about this policy or your data, write to us at capturiaSpain@gmail.com.