Privacy Policy

The Short Version

• Your tackle box lives on your phone. Gear, photos, kits, locations, receipts — stored locally on your device. No account, no login, no cloud database.
• Photos leave your device only when you ask for AI identification — sent securely to our relay and to Anthropic for analysis, used to generate the suggestion, and not stored by us.
• Your photos are not used to train AI models.
• No tracking. No analytics SDKs, no advertising, no profiling.
• Delete the app and your data is gone.

Data Controller

Fishy — Gear & Tackle Box ("Fishy") is operated by Maivor AB, Swedish corporate identity number 559539-4726, Sparrgrensgatan 10, 416 54 Göteborg, Sweden. Maivor AB is the data controller for the limited processing described in this policy.

Contact: daniel@maivor.ai

Data Stored on Your Device

Everything you put into Fishy is stored locally on your iPhone: gear items and their details, photos, receipt photos, kits, storage locations, stock levels, maintenance logs and settings. This data never reaches Maivor's servers, and we have no way to see it.

Your device may include this data in your own device or iCloud backup, controlled by you and Apple under Apple's terms — like any other app's local data.

AI Identification — When Data Leaves Your Device

When you actively choose to identify gear from a photo, the app sends the photo(s) over an encrypted connection (HTTPS) to a server function operated by Maivor AB and hosted by Vercel, which relays them to Anthropic's Claude API for analysis. The response — suggested name, type and specifications — is returned to your device, where you review and edit it before saving.

• Nothing is stored server-side — the relay is stateless and keeps no copy of your photos.
• Under Anthropic's commercial API terms, data sent via the API is not used to train AI models. Anthropic may retain inputs briefly for abuse prevention before deletion, per its API data policies.
• Standard, short-lived technical logs (such as IP address and timestamp) may be processed by our hosting provider for security, rate limiting and abuse prevention.
• Adding gear manually sends nothing anywhere.

Processors and Services

• Anthropic PBC (USA) — AI analysis of photos you submit for identification (Claude API).
• Vercel Inc. (USA) — hosting of our stateless relay function and of this policy page.
• Apple — App Store / TestFlight distribution under Apple's own terms.

Anthropic and Vercel process data on our behalf under data-processing agreements incorporating the European Commission's Standard Contractual Clauses, which safeguard the transfer of data to the USA as required by the GDPR.

Legal Bases

• Performance of contract (GDPR Art. 6(1)(b)) — when you request an AI identification, processing the photo is necessary to deliver the feature you asked for.
• Legitimate interest (GDPR Art. 6(1)(f)) — transient technical logging for security, rate limiting and abuse prevention of our relay.

Tracking

Fishy does not track you across apps or websites, contains no analytics or advertising SDKs, and we do not sell personal data.

Retention and Deletion

• On your device: until you delete the item or the app. Deleting the app removes all app data from the device.
• On our servers: nothing is retained — the relay is stateless.
• At Anthropic: transient retention for abuse prevention per Anthropic's API data policies, then deletion; not used for training.

Your Rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection. Because your data lives on your device and we keep none of it, you exercise most of these directly: view and edit everything in the app, export your inventory (PDF/CSV), and delete items or the app itself at any time.

Questions or requests: daniel@maivor.ai. You also have the right to lodge a complaint with the Swedish supervisory authority, IMY (Integritetsskyddsmyndigheten), or your local EU data-protection authority.

Device Permissions

• Camera — to photograph gear. Used only when you open the camera in the app.
• Photo library — to pick existing photos. The app only receives the photos you select.

AI Transparency

Identification results are generated by an AI system (Anthropic's Claude) and can be wrong. The app clearly labels AI-generated suggestions, shows a confidence level, and always lets you review, correct or discard them before saving. This disclosure is provided in line with Article 50 of the EU AI Act.

Children

Fishy is not directed at children under 13 and has no accounts, social features or advertising.

Beta Versions (TestFlight)

If you use Fishy through Apple's TestFlight, Apple collects and shares with us the feedback you choose to send and basic crash/usage diagnostics, as described in Apple's privacy terms and the TestFlight terms you accept with Apple.

Changes

If the app's data practices change — for example new features that process data differently — we will update this policy and the "last updated" date before the change takes effect.