HookBook Privacy Policy

You give us: account info (email, name, an optional birthday — month and year only, never the day — and an optional profile photo); catch & trip logs (species, size, lures, conditions, dates, notes, who you fished with); photos; and your Gilly conversation transcripts (text and speech-to-text) when you log by chatting. If you subscribe, our payment processor collects your payment details — we do not store your full card number.

Collected automatically (with your permission): precise location— from a photo’s embedded GPS or your device’s location — to map a catch, find the body of water, and fetch its weather; in the mobile app, access to your camera and photo library so you can add catch photos (a photo you take in the app may be tagged with your current location); and device/usage analytics to improve and secure the App. If you turn on heads-ups in the HookBook app, we also collect a push token for that phone (an address Apple or Google gives the app so it can show a notification). You can grant or revoke camera and location permission anytime in your device settings. HookBook shows heads-ups only if you allow notifications for it on your phone. Precise location is sensitive information; we use it only to provide the features you ask for (mapping your catch, finding the body of water, fetching weather) and never for advertising, profiling, or sale.

To run the Service (store your logbook; build your maps, stats, cards, books, and Wrapped); identify a fish from a photo and pre-fill species/size (an AI suggestion you can always change); auto-fill the body of water and weather; power Gilly and the AI features you use; process subscriptions and support; improve and secure the App; if you share your optional birthday, send you birthday greetings and offers; and send you service messages (and, if you opt in, occasional product updates). We also use your information to send heads-ups you asked for. You can unsubscribe from non-essential email anytime. We do not sell your personal information or use your private catch locations for advertising. Like any service, authorized HookBook personnel can access account information — including catches, photos, and Gilly conversations — when needed to provide support, troubleshoot problems, review reports of misuse, and improve the Service. That access is limited to what the task requires, and our internal review tools mask your precise catch coordinates.

Only as needed to run the Service, with trusted providers acting on our behalf. Our current providers include Supabase (database, file storage, authentication), Vercel (hosting), OpenAI (AI features — identifying fish from photos, powering Gilly, generating narration, and answering stats questions), Replicate (processes a catch photo to remove its background when you use Pro Cutout), OpenWeatherMap (weather lookups for a catch’s place and time), Mapbox (maps), the U.S. Geological Survey and OpenStreetMap (naming the body of water at a catch’s coordinates, and the lake’s outline for a Memory Book’s chart — looked up by the water’s name, never your exact spot), Stripe (payment processing), Resend (email), Sentry (error monitoring), Cloudflare (bot protection on sign-in pages, and secure off-site backup storage), and, for heads-ups, Firebase Cloud Messaging (Google, for Android phones) and Apple Push Notification service (Apple, for iPhones). They receive the phone’s token, the heads-up’s words (a first name and what they caught, or that they shared something with you) and the HookBook link it opens; never your location, water, bait, or photos themselves. The photos and prompts you submit for AI features are processed by the named AI provider to return a result. Under OpenAI’s API terms, content submitted through the API is not used to train OpenAI’s models, though OpenAI may retain submissions briefly for abuse monitoring. We also share when you choose to — content you publish via a share link, card, book, or Wrapped is visible to anyone with the link (your precise GPS is not included), and people you invite to your Cheering Section in the app can see the catches you choose to share with them (never your GPS, your spot notes, or your town, and your lures and bait only if you switch that on for that person). And we share when required by law or to protect rights and safety, or in a business transfer with notice.

Where you fish is sacred. Your GPS coordinates are stored privately to your account, are never shown publicly, and are never sold. Photos live in private storage, served only through expiring signed links, and database access is restricted per-user. When you share a card or link, your precise coordinates are not included.

We keep your catches, photos, and content while your account is active, and encrypted backups for a limited period for disaster recovery. We may set a storage limit on free accounts and may archive or delete content from accounts that stay inactive for an extended period (with notice where required). When you delete your account, we delete or de-identify your personal information — including your Gilly conversation transcripts — within a reasonable period, except limited records we must keep for legal, accounting, or fraud-prevention reasons.

The Cheering Section. When someone reports a problem in the Cheering Section, we keep the report — the reason chosen, who filed it, who it is about, and when — so authorized HookBook personnel can review it. It is kept until it is closed and two years old; if the person who filed it deletes their account, the report stays with their id removed. If someone opts out of an angler’s email notes and the angler then removes them, we remember that address for that angler, until the angler deletes their account, so it is never invited again without asking. To limit invite emails, we keep a one-way key of each address an invite went to (never the address itself) for 30 days. And we keep daily totals of Cheering Section activity (counts only, never who or what) for about 400 days, to keep it running safely.

Heads-ups. A phone’s token is removed when you sign out in the app or delete your account, as soon as Apple or Google tell us the phone is gone, and in any case after 270 days unseen. A heads-up’s record is kept 90 days.

View and edit your catches, profile, and content anytime in the App; export a copy of your data and delete your account, both from within the App; deny or revoke location permission in your device settings (some auto-fill won’t work without it); and unsubscribe from non-essential email. Turn heads-ups off for one person on their page, or for all of HookBook in your phone’s settings. Depending on where you live (e.g., California, EU/UK), you may have additional rights to access, delete, correct, or port your data and to opt out of certain processing — contact us to exercise them, and we won’t discriminate against you for doing so.

HookBook is not directed to children under 13, and we don’t knowingly collect their information. If you believe a child gave us information, contact us and we’ll delete it. Users under 18 should use HookBook only with a parent or guardian’s permission.

We use encrypted transport, private storage with signed URLs, per-user access controls, and restricted access. No system is perfectly secure, so we cannot guarantee absolute security.

We may update this Policy and will post the new effective date and, for material changes, notify you. Questions or requests: privacy@hookbook.ai or the in-app Support & Feedback screen (RPM Experience Labs LLC).