Legal

Privacy Policy

In plain language

This policy explains exactly what we collect, why we collect it, and how to delete it.

Who we are

Capt’ns Log (“the app”, “we”, “our”) is an iOS application developed by Joe Benscoter. For questions about this policy or your data, contact:

What data we collect

We collect only what the app needs to function, plus a limited set of product-analytics events to understand which features get used. We do not collect data for advertising or profiling, and our analytics never includes the contents of your catches, your locations, or your photos.

Account data

When you create an account, we store:

When you sign in with Apple, Apple may give you the option to hide your real email. If you do, we receive a relay address. That works fine for us; we never need your real email.

Catch data (the journal)

Every time you log a catch, the app stores:

All of this is private to your account. No other user can see your catches. We do not share it with researchers, partners, or third parties.

Saved fishing locations

When you save a fishing spot, we store:

Saved locations are private to your account.

Photos

If you attach a photo to a catch, the photo is stored locally on your device and uploaded to our backend (Supabase Storage) so it is available across your devices. Photos are private to your account and protected by row-level access controls.

When you delete a catch or delete your account, the associated photo file is deleted from our backend.

Device permissions we request

If you deny any of these permissions, the relevant feature is disabled but the rest of the app still works.

Subscription and purchase data

If you start a free trial, subscribe to Capt’ns Log Pro, or buy the lifetime unlock, our subscription provider (RevenueCat) processes the purchase on our behalf. See “RevenueCat (subscription management)” below for the specific fields involved. Apple separately processes the payment itself; we never see your full payment-card or Apple ID password.

Crash and performance data

When the app is built for the App Store, it includes a crash and performance reporting SDK (Sentry). It collects unhandled exceptions, stack traces, and sampled performance traces so we can find and fix bugs. Personally identifying fields (email, user ID, IP address) are scrubbed before any event leaves your device. Sentry runs in release builds only. See “Sentry (crash and performance monitoring)” below.

Product analytics data

When the app is built for the App Store, it includes a product-analytics SDK (PostHog) so we can see how people move through the app and where they get stuck. It records a small, fixed set of interaction events:

Alongside those events, the SDK records standard device and app metadata (app version, OS version, device model, language, time zone) and a generated analytics identifier that we link to your account ID so we can measure the funnel per user. It does not receive your species, weights, lure notes, photos, coordinates, saved-location names, or any other catch or location content; the app strips everything except the event name and the few non-identifying properties listed above before anything is sent. PostHog runs in release builds only; development and TestFlight internal builds do not send analytics events. We do not collect an advertising identifier (no IDFA) and we do not use this data to track you across other apps or websites. See “PostHog (product analytics)” below.

What we do NOT collect

To be specific about what is not in the app:

How we use your data

We use your data only to operate the app for you. Specifically:

We do not use your data to train AI models, profile users, or generate marketing audiences.

Third parties we share data with

We use a small number of essential service providers to run the app. Each one receives only the minimum information needed for its specific purpose.

Supabase (data storage and authentication)

We use Supabase (operated by Supabase, Inc.) to:

Supabase processes this data under their privacy practices, available at https://supabase.com/privacy. Your data is stored in Supabase’s US-based infrastructure under our project. We apply row-level security policies so each user can only read and write their own data.

Apple (Sign in with Apple)

If you use Sign in with Apple, Apple processes the authentication request and sends us a token plus an optional email relay address. Apple’s privacy practices apply: https://www.apple.com/legal/privacy/.

Google (Sign in with Google)

If you use Sign in with Google, Google processes the authentication request and sends us a token plus your email address. Google’s privacy practices apply: https://policies.google.com/privacy.

RevenueCat (subscription management)

We use RevenueCat (operated by RevenueCat, Inc.) to manage subscriptions and the lifetime in-app purchase on iOS. When you start a free trial, subscribe, restore purchases, or buy the lifetime unlock, RevenueCat receives:

RevenueCat acts as a service provider on our behalf and does not share or sell this data to third parties. Their privacy notice is available at https://www.revenuecat.com/privacy. The full payment itself (your card number, full billing address, Apple ID password) is handled by Apple directly under Apple’s privacy practices; we never see it.

Sentry (crash and performance monitoring)

We use Sentry (operated by Functional Software, Inc. dba Sentry) to receive crash reports and sampled performance traces from the App Store build of the app. Sentry receives:

Before any event leaves your device, we strip personally identifying fields: no email, no user ID, no IP address, no body content from network responses, no fragment from any URL. Sentry runs in release builds only; development builds and TestFlight internal builds do not send events. Sentry’s privacy notice is available at https://sentry.io/privacy/.

PostHog (product analytics)

We use PostHog (operated by PostHog, Inc.) to understand how people use the app so we can improve it. From the App Store build, PostHog receives:

PostHog never receives the contents of your catches, your coordinates, your saved-location names, your photos, or any free-text you enter; the app sends only the event name and the listed properties. Your analytics data is stored in PostHog’s US cloud. PostHog acts as a service provider on our behalf and does not sell this data. Their privacy notice is available at https://posthog.com/privacy. PostHog runs in release builds only.

Weather, tide, and river data providers

To compute fishing conditions, the app sends the latitude and longitude of your saved fishing locations to the following free public services. These requests do not include your account, email, name, or any other identifier. Your IP address is visible to these services as part of any standard HTTPS request.

We do not pay these services, send them your account information, or receive marketing data from them.

Hosting and distribution

We use Apple’s standard TestFlight and App Store infrastructure for distribution. Apple may collect crash logs and basic diagnostic data per its own privacy practices. Crash and performance data we receive ourselves goes through Sentry (see the section above).

How we store and secure your data

Your rights and choices

Regardless of where you live, you have the following rights with respect to your data in Capt’ns Log:

If you are a resident of the European Economic Area, the United Kingdom, or Switzerland, you also have the right under GDPR to lodge a complaint with your local data protection authority.

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to request disclosure of categories of personal information collected, deletion of that information, and to opt out of any sale of personal information. We do not sell personal information.

Data retention

Children’s privacy

Capt’ns Log is rated 4+ in the App Store and is suitable for general audiences. The app is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact privacy@captns-log.com and we will delete it.

International users

The app is operated from the United States. By using the app, you understand that your data will be processed in the United States, where data protection laws may differ from those in your country.

Changes to this policy

When we make material changes to this policy, we will:

Change history:

Contact us

For any privacy question, data export request, or account deletion help, email privacy@captns-log.com.

← Back to captns-log.com