You stay in control of your data.

Short summary

• Location is processed while you use the app, for local forecasts and nearby spots. We never request background location.
• Your catch log starts on your device and is private by default. If you sign in and use sync, selected catch details go to the server; photo files never do.
• Coach messages and the context shown before you send are processed on Cloudflare infrastructure to produce a reply, not for advertising.
• If subscriptions start later, Apple processes payment. We never see your card or bank details.
• We do not sell personal data, build advertising profiles or track you across apps.

Who we are

Fisher King is an independent app. The operator and data controller is Ali Doğan Set (individual developer), Kocaeli, Türkiye. For any privacy question or request, write to support@fisherking.app.

Data we process

Location and search

With your permission, the app uses device location while it is open to provide weather and marine conditions, nearby spots, water type and map results. Forecast and spot requests are generally rounded on the device to about 1 km. Some water-type or structure checks need a more precise coordinate: when you add a spot, its coordinate is rounded to about 11 metres, sent to our server and cached there for up to 24 hours. General weather and marine requests are rounded server-side to roughly a 0.01° (~1 km) grid and cached for 30 minutes. We do not keep raw coordinates from these requests as a persistent profile. You can refuse location and pick a place manually where supported.

Place-name search uses Apple Maps, so the text you type is sent to Apple. Panning and zooming requests map tiles from Mapbox for the visible region. Fisher King switches off Mapbox's optional product telemetry before the map loads.

Catch log and photos

Species, date, measurements, method, notes, location, saved spots and photos you add are stored on your device first. Photo files are never uploaded to our server, and new catches are private by default.

If you sign in with Apple and use sync, catch metadata such as species, date, measurements, notes and visibility may be stored in a Cloudflare D1 database linked to your account. For each catch you choose to send no location, an approximate location (about 1 km) or the exact location. With the default private setting, location never leaves your device.

Account and nickname

Sign in with Apple is optional. We convert Apple's opaque account identifier into our own user ID; we never receive your Apple password or verification code. A nickname you choose may be kept with the account. We receive an Apple email address only if Apple supplies it and the flow actually needs it.

Fisher King coach

Your message, the necessary part of the conversation and the information shown in the context preview are sent to our backend to generate a reply. That context may include approximate location, target species or method, hourly conditions, nearby spot names, water type and — only if you allow it separately — a summary of a recent catch. Exact catch spots, photos, Apple passwords and payment data are never sent to the coach. The coach runs on Cloudflare Workers AI. We do not keep message content as a chat archive after the reply; limited content-free counters and technical logs remain for security and fair use.

Purchases

If subscriptions are enabled in a later release, purchases run through Apple's In-App Purchase system. Apple handles the payment method. To unlock access, restore purchases, prevent fraud and give support, the app and, where needed, our backend may process the product ID, subscription status, purchase, renewal and expiry dates and Apple-signed transaction identifiers. Your eligibility for continued free access is determined from the Apple-signed record of the app version you first downloaded, plus a first-launch marker stored in your device keychain when Apple's record is not available.

Preferences and technical records

Language, appearance, fishing method, notification choices and similar settings stay on your device. The backend keeps short-lived request time, response status and content-free technical records for service security, debugging, quotas and abuse prevention. We use no advertising SDK and no third-party behavioural analytics.

Services your data passes through

These providers process data under their own agreements and privacy terms. We expect them to protect transferred data to at least the level described here. Nothing is shared for advertising.

Legal framework and international transfers

This policy follows the core principles of Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR). Depending on where you live, we process data to perform the service you asked for, to meet legal obligations, and on the basis of our legitimate interest in keeping the service secure and functional; optional features such as sync and the coach rely on your choice to use them.

Cloudflare and Apple also run servers based in the United States, so part of the data we process may be transferred outside Türkiye and the European Economic Area. For those transfers we rely on the safeguards contemplated by KVKK Art. 9 and GDPR Chapter V, such as standard contractual clauses and provider certifications.

Retention and deletion

• Local records and photos: stay on the device until you delete them or the app, subject to your iOS and iCloud backup settings.
• Synced catches and account: kept while the account exists or until you delete the record or the account.
• Coach messages: processed transiently to produce a reply; not kept as a chat archive.
• Caches and technical logs: minutes up to 30 days. Records needed for a security incident or a legal obligation may be kept longer.
• Purchase verification: kept as long as needed for access, accounting, disputes and fraud prevention. Payment-card data is never stored.

Delete the cloud account in Settings → Account → Delete Account. That removes the account, nickname, synced catch metadata and account-linked fair-use state from the active database. Backup and security copies age out within 30 days, except narrowly required legal records. Deleting the account does not delete the local records on your device.

Your choices and rights

• Turn location off at any time in iOS Settings.
• Use local features without Sign in with Apple, or sign out.
• Choose no, approximate or exact location sync for every single catch.
• Simply do not send a coach message if you do not want AI processing.
• Delete local records one by one, and delete the cloud account from inside the app.
• Ask for access, correction, a copy, deletion, restriction or objection at support@fisherking.app.

We may ask you to authenticate in the app before acting on a request, and we will never ask for your Apple password or verification code. You can also complain to your local data protection authority. Mandatory rights under KVKK, GDPR or your consumer law remain unaffected.

Security, children and changes

We use encryption in transit, Apple authentication, access control and data minimisation. Even so, no internet transmission or storage method is completely secure.

Fisher King is not directed to children and we do not knowingly collect personal data from children under 13. If you believe a child gave us data, write to us and we will delete it after appropriate verification.

We may update this policy as the product, our providers or the law change. Material changes are announced in the app or on this site and the effective date above changes. A new data flow — such as subscription verification — is added here before the release that introduces it.

Version 2.2 (6 September 2026): the free launch is described as an open-ended period with permanent free access for people who download before subscriptions begin; the eligibility record used for that is disclosed; the legal bases for processing were made explicit.

Contact

Privacy questions and requests: support@fisherking.app
Operator and data controller: Ali Doğan Set, Kocaeli, Türkiye
Quick deletion and permission steps: Data Controls