FishDex is operated by Park Taejun (email: puze8681@gmail.com). When we say "FishDex", "we", "us", or "our", we mean Park Taejun acting as data controller.
2. Information We Collect
Account information: email address and nickname when you register
Profile photo: optional, collected only if you upload one
Catch photos: photos you upload for your catch records. Photos are stored in our secure storage after upload and can be deleted at any time. EXIF GPS metadata is stripped from photos before upload — we never collect location data embedded in your photos.
Catch location: optional location name (text) and/or GPS coordinates you enter manually
Advertising identifiers: iOS IDFA (collected only after you consent via the iOS App Tracking Transparency prompt) and Android Advertising ID — used for Google AdMob advertising
Usage data: crash reports and app usage analytics via Google Firebase Analytics and Firebase Crashlytics
3. How We Use Your Information
To provide and operate the FishDex service
To display personalised and non-personalised advertisements
To monitor app stability and fix bugs
To enforce our Terms of Service
4. Legal Basis for Processing (GDPR Article 6)
Account data and catch photos (email, nickname, catch photos): Article 6(1)(b) — performance of a contract
Usage analytics: Article 6(1)(f) — legitimate interests (improving service quality)
Advertising identifiers: Article 6(1)(a) — consent (via iOS ATT prompt or Android consent flow)
5. Sub-Processors
Service
Provider
Country
Purpose
Database, Auth, Storage
Supabase, Inc.
USA (data hosted in Seoul region, ap-northeast-2)
User accounts, catch records, species data
Web Hosting
Vercel, Inc.
USA
Website delivery
Advertising & Analytics
Google LLC
USA
Google AdMob (ads), Firebase Analytics, Firebase Crashlytics
While we use Supabase's Seoul (ap-northeast-2) region to store data, Supabase is a US company and your data may be accessed from or transferred to the United States.
6. Data Retention
Account information: retained until you delete your account
Catch photos: retained until you delete them or delete your account
Advertising identifiers: managed by your device's operating system
7. Your Rights (GDPR / UK GDPR)
If you are in the European Economic Area (EEA) or the United Kingdom, you have the right to:
Access the personal data we hold about you
Correct inaccurate personal data
Delete your personal data (account deletion is available in the app under Profile settings)
Receive your personal data in a portable format
Restrict or object to processing
Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at puze8681@gmail.com.
8. International Data Transfers
We transfer personal data to the United States (Supabase, Vercel, Google). These transfers are necessary for the operation of FishDex. For EEA residents, transfers are conducted under appropriate safeguards, including Standard Contractual Clauses (SCCs) where applicable.
[For users in Japan — disclosure under APPI Article 24 regarding provision to third parties in foreign countries] Personal data is transferred to the United States. The personal information protection framework of the United States differs from Japan. Please refer to the privacy policies of each sub-processor listed above for details of their data protection practices.
9. Children
FishDex is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us at puze8681@gmail.com.
10. Changes to This Policy
We will notify users of material changes to this policy by posting an updated version on this page with a new effective date.
11. Contact
puze8681@gmail.com
FishDex uses only essential session cookies on this website. Analytics and advertising cookies are used exclusively in the mobile app.