Privacy Notice

1. Controller

BiteWave app operator. Contact: juhohietanen84@gmail.com

2. What data is collected

In the browser (localStorage):

• Selected lake, species, technique, target fish size
• Catches you log (date, length, species, location)
• Notifications, sun mode preferences
• AI Coach conversation history and daily usage count
• Your PRO licence key and access tier, if you bought PRO

This data stays on your device. Clearing browser data deletes it.

3. Data sent to the server

Using the features below sends data to Cloudflare's servers for processing. Content is processed during the request and is not stored permanently on our server.

• AI Coach: your message + conversation history (max 6 messages) + selected species and lake.
• Photo species ID: the photo you take is sent to a vision model. Don't submit photos containing identifiable people or anything sensitive.
• Voice catch logging: the text produced by speech recognition.
• Personal insights: up to your 50 most recent logged catches (species, size, lure, place name, time).
• Share caption and catch reaction: details of the catch you logged.
• Trip planner, daily tip and lake suggestion: selected lake, species and weather context.
• Nearest-lake suggestion: a coarse location derived from your IP address by Cloudflare on first visit. Your precise GPS position is never sent to the server — it is used only on your device.
• PRO licence check: your licence key and a device identifier are relayed to Lemon Squeezy for validation.

Text responses are generated by Cloudflare Workers AI (Llama 3.3) and image analysis by a LLaVA model. Your IP address is held briefly in an abuse-prevention rate limiter. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) — keeping the service running and its costs contained.

Your browser also fetches map tiles (CartoDB, Esri, MML, SYKE) and forecasts (Open-Meteo) directly from those services. Your IP may appear in their logs under their own policies.

4. Analytics (Plausible)

We use Plausible Analytics to see how often the app is used and which features people reach. Plausible is EU-hosted (Germany) and privacy-focused:

• No cookies and no identifiers stored on your device.
• No personal data, no profiling, no cross-site tracking.
• Your IP is not stored — a daily rotating hash is used to estimate visitor counts.
• Events recorded include page views, lake changes, catch logging, AI Coach use, and opening the PRO page or checkout.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)). You can opt out via “Essential only” in the cookie banner.

5. What is NOT collected

• No user accounts or login — we never ask for your name, email or phone number.
• No ad tracking, no Google Analytics, no Facebook Pixel.
• No precise GPS location sent to the server.
• We do not sell or share your data.

If you buy PRO, payment is handled by Lemon Squeezy (merchant of record). Your name, email and payment details go directly to them — we never see or store payment details. See Lemon Squeezy's own privacy policy.

6. Data retention

localStorage: until you clear browser data or uninstall the app.

Service worker cache: map data + research data offline-available for ~7 days, weather data 30 minutes.

7. GDPR rights

You have these rights:

• Access: all data is in your own browser → open DevTools and view localStorage
• Erasure: clear browser data → app data removed
• Rectification / objection / data portability: data is on your device

Since BiteWave doesn't collect personally identifiable information on its server, GDPR rights are effectively in your own hands.

8. Service Worker

The app uses a Service Worker for offline use. It caches map tiles, depth contours, and weather data so the app works even without an internet connection on the lake. This data is in your browser, not on our servers.

9. Changes

We reserve the right to update this notice. Major changes will be notified in the app.