Privacy Policy

Who we are

ReefPin is operated by BITS Blackrock IT Solutions LLC, the controller responsible for your personal data. Contact us at support@reefpin.com.

What we collect

• Account: your name, email and avatar, handled by Clerk.
• Profile and activity: information you choose to add, plus catches, trips, spots, gear and messages you create.
• Location: the Android app checks permission when it opens or returns to the foreground and may ask for permission if it is not granted. Location is optional for nearby spots and catch locations. Page navigation does not repeat the prompt, and we do not track you in the background.
• Payments: card or wallet details go directly to Kashier. We do not see or store full card numbers; we keep plan, billing dates and transaction references.
• Last access: for signed-in accounts, we keep the latest observed app or browser category and its timestamp to support account administration. This is one current record, not a browsing history; it is removed by daily cleanup after 120 days without an observed visit and is included in account data export and deletion.
• Aggregate usage analytics: we record daily counts for sessions, pages, visit sources, campaigns, device categories, performance and technical errors. We do not store an IP address, stable visitor identifier, form content or session replay for this purpose. Collection is disabled when Global Privacy Control or Do Not Track is enabled, and the website does not use analytics cookies.
• Website advertising: Once Google AdSense is enabled, Free accounts may see ads on content pages only after choosing to allow them. Google may process IP addresses, browser identifiers, ad interactions, and diagnostics for advertising and fraud prevention. Pro accounts do not see website ads. You can reject or change your choice on this page.
• Android advertising: Free accounts may see Google AdMob ads after required ad-consent handling. Google may process IP address, device identifiers, ad interactions, and diagnostic data for advertising, analytics, and fraud prevention. Pro accounts do not request ads. Where required, you can reopen ad privacy options inside the app.
• Signup source: if you arrive through a campaign link or external site, the source stays only in the current browser session. After account creation we attach the first source to the account once, then remove the browser value.
• Women's spot-safety details: if you voluntarily confirm that you are sharing your experience as a woman, we store the spot, visit period and exact date, your recommendation, structured observations about lighting, security, public activity, mobile signal, access, restrooms and comfort, plus any optional private moderation note.

How we use data

To operate the app, show your logbook and spots, connect fishing buddies, run Fish ID and gear scanning, process subscriptions and personalise content by region. We do not sell personal data.

We use grouped usage metrics to understand how people reach ReefPin, improve conversion, features and performance, and diagnose errors. They are not used to build an individual browsing profile.

We use spot-safety observations to produce recent grouped signals and review reported concerns. Contributing is optional and you can delete your contribution in the app.

Privacy of safety details

Spot reports and safety concerns are linked to the submitting account. Administrators can see the account and name to review the report and contact its author. This identity is not shown publicly.

We never publicly show a reviewer's name, account id, exact visit date, individual answers or private note. Users only see recent report counts, broad recency buckets and features confirmed by grouped reports.

A women-recommended badge requires at least three recent reports, at least 75% recommendations and no open or confirmed concern. This is community guidance, not a safety guarantee.

Location analytics disabled

Collection for the user-location heatmap is disabled. Opening the app and using Pin me do not send your position to these analytics. Previously collected data remains subject to the retention and deletion policy.

Service providers

Some providers may process data outside Egypt. We use reputable providers and appropriate safeguards, and share only what is needed to deliver the service.

• Clerk: sign-in and account management.
• Supabase: database and content storage.
• Anthropic (Claude): images submitted for Fish ID or gear scanning.
• Kashier: payments.
• Telegram: private operational alerts, including safety concerns needing review.
• Resend: welcome emails and essential account or service notices. Optional product news requires your opt-in through profile email settings and can be stopped at any time, including after your app subscription expires. We share your email, message content, and the details needed for delivery. Email preferences and recipient delivery records are retained until account deletion.
• Open-Meteo: weather and marine forecasts.
• Vercel: hosting and privacy-minded aggregate usage analytics.
• Google: the preferred-source link contacts Google only after you deliberately click it and leave ReefPin.
• Google AdMob: serves ads to Free Android accounts and provides ad-consent controls where required.
• Google AdSense: serves website ads to Free accounts after the service is enabled and the user allows them.

Sharing and visibility

Catches and trips stay private unless you choose to share them. Community items appear without your name and buddy connections are visible only to the people involved. Spots saved on the community map are public, as stated in the save flow.

Retention

We keep account data while your account is active. Anonymous website analytics aggregates are kept for up to 120 days. Spot-safety reports count toward public summaries for no more than 180 days after the visit, while the account-linked record remains until you edit or delete it or request account deletion. Limited payment records may be retained where law or accounting rules require it.

Delete your ReefPin account and your rights

Under Egypt's Personal Data Protection Law No. 151 of 2020, you can request access, correction, updating, deletion, withdrawal of consent and objection where applicable. In Profile under “Your data,” you can export a full copy or delete your account and data. You can also edit or delete individual contributions.

To start deletion in a browser, open Profile, Your data, choose Delete account, and confirm. If you cannot sign in, request deletion at support@reefpin.com from your account email address. Do not send your password. Account data and associated content are deleted; limited payment records may be retained for the legal and accounting requirements described above.

Security

Access is restricted and data is served over encrypted connections. No system is perfectly secure, but we take reasonable measures to protect information.

Children

ReefPin is for users aged 18 and over only. Anyone under 18 may not use the app, including with a parent or guardian's consent.

Changes and contact

We may update this policy and will revise the date above. For privacy or security questions, contact support@reefpin.com. See also our Terms of Use.