Privacy Policy

Who we are

ReefPin is operated by BITS Blackrock IT Solutions LLC, the controller responsible for your personal data. Contact us at support@reefpin.com.

What we collect

• Account: your name, email and avatar, handled by Clerk.
• Profile and activity: information you choose to add, plus catches, trips, spots, gear and messages you create.
• Location: opening pages and navigating do not request your device location. Permission is requested when you deliberately use a location button, such as Pin me or a nearby search. We do not track you in the background.
• Payments: card or wallet details go directly to Kashier. We do not see or store full card numbers; we keep plan, billing dates and transaction references.
• Aggregate usage analytics: we record daily counts for sessions, pages, visit sources, campaigns, device categories, performance and technical errors. We do not store an IP address, stable visitor identifier, form content or session replay for this purpose. Collection is disabled when Global Privacy Control or Do Not Track is enabled, and we do not use advertising or analytics cookies.
• Signup source: if you arrive through a campaign link or external site, the source stays only in the current browser session. After account creation we attach the first source to the account once, then remove the browser value.
• Women's spot-safety details: if you voluntarily confirm that you are sharing your experience as a woman, we store the spot, visit period and exact date, your recommendation, structured observations about lighting, security, public activity, mobile signal, access, restrooms and comfort, plus any optional private moderation note.

How we use data

To operate the app, show your logbook and spots, connect fishing buddies, run Fish ID and gear scanning, process subscriptions and personalise content by region. We do not sell personal data.

We use grouped usage metrics to understand how people reach ReefPin, improve conversion, features and performance, and diagnose errors. They are not used to build an individual browsing profile.

We use spot-safety observations to produce recent grouped signals and review reported concerns. Contributing is optional and you can delete your contribution in the app.

Privacy of safety details

Spot reports and safety concerns are linked to the submitting account. Administrators can see the account and name to review the report and contact its author. This identity is not shown publicly.

We never publicly show a reviewer's name, account id, exact visit date, individual answers or private note. Users only see recent report counts, broad recency buckets and features confirmed by grouped reports.

A women-recommended badge requires at least three recent reports, at least 75% recommendations and no open or confirmed concern. This is community guidance, not a safety guarantee.

Location analytics disabled

Collection for the user-location heatmap is disabled. Opening the app and using Pin me do not send your position to these analytics. Previously collected data remains subject to the retention and deletion policy.

Service providers

Some providers may process data outside Egypt. We use reputable providers and appropriate safeguards, and share only what is needed to deliver the service.

• Clerk: sign-in and account management.
• Supabase: database and content storage.
• Anthropic (Claude): images submitted for Fish ID or gear scanning.
• Kashier: payments.
• Telegram: private operational alerts, including safety concerns needing review.
• Resend: one transactional welcome email after account creation. We share only your email address, first name and selected language, and do not use this message for marketing.
• Open-Meteo: weather and marine forecasts.
• Vercel: hosting and privacy-minded aggregate usage analytics.
• Google: the preferred-source link contacts Google only after you deliberately click it and leave ReefPin.

Sharing and visibility

Catches and trips stay private unless you choose to share them. Community items appear without your name and buddy connections are visible only to the people involved. Spots saved on the community map are public, as stated in the save flow.

Retention

We keep account data while your account is active. Anonymous website analytics aggregates are kept for up to 120 days. Spot-safety reports count toward public summaries for no more than 180 days after the visit, while the account-linked record remains until you edit or delete it or request account deletion. Limited payment records may be retained where law or accounting rules require it.

Delete your ReefPin account and your rights

Under Egypt's Personal Data Protection Law No. 151 of 2020, you can request access, correction, updating, deletion, withdrawal of consent and objection where applicable. In Profile under “Your data,” you can export a full copy or delete your account and data. You can also edit or delete individual contributions.

To start deletion in a browser, open Profile, Your data, choose Delete account, and confirm. If you cannot sign in, request deletion at support@reefpin.com from your account email address. Do not send your password. Account data and associated content are deleted; limited payment records may be retained for the legal and accounting requirements described above.

Security

Access is restricted and data is served over encrypted connections. No system is perfectly secure, but we take reasonable measures to protect information.

Children

ReefPin is for users aged 18 and over only. Anyone under 18 may not use the app, including with a parent or guardian's consent.

Changes and contact

We may update this policy and will revise the date above. For privacy or security questions, contact support@reefpin.com. See also our Terms of Use.