FishFly Privacy Policy

The short version: FishFly has no accounts and no passwords. We don't ask for your name or email to use the app. We don't sell your data, we don't run ads, and we don't use third-party advertising or tracking SDKs. The information we do collect exists to answer one question well (what should you tie on) and to keep your subscription working.

Information we collect

Location. If you allow it, FishFly uses your device's location to work out which water you're on, so it can match your spot to the right hatch and flow data. The app asks iOS for accuracy of about 100 metres (enough to tell one river from another, which is all it needs), though iOS may return a more precise fix than that. It asks only while you're actively using the app, never in the background. Your coordinates are sent to our servers to perform that lookup and are not stored: what we keep is the water the lookup returned, not the spot you were standing on. Location is requested only when you use a feature that needs it, and you can decline. If you decline, FishFly still works. You can search for or type in the water you're fishing instead. You can change this permission at any time in iOS Settings → Privacy & Security → Location Services → FishFly.

A device identifier. When you first open FishFly, the app generates a random identifier for your device. We use it to count how many trip packs you've created (so the free trip pack works), to link your subscription to your device, and to find your records if you contact us. It is generated by the app itself, is not your Apple ID, and is not Apple's advertising identifier. It is a random value that contains nothing about you personally. You can see it on the app's Settings screen.

This identifier is stored in your device's keychain, which means it survives deleting and reinstalling the app. That is deliberate: it stops a reinstall from handing out a second free trip pack, and it means your subscription and saved packs come back when you reinstall. If you want the identifier and everything attached to it erased, email us and we'll delete it. See "Your choices and rights" below.

Your fishing questions and trip packs. When you ask FishFly for recommendations, we receive what you typed and, if you used location, your coordinates. We use them to work out which water you mean, and then we store the result (the water, the date, and the trip pack we built for it) so your packs stay available and so we can improve pattern recommendations. We do not store the text you typed or the coordinates you sent; what persists is the water your question resolved to. All of it is associated with the device identifier described above, not with your name.

Subscription status. Purchases are handled entirely by Apple. We never see or store your credit card, billing address, or Apple ID. We receive a receipt from Apple that we verify to confirm whether a subscription is active, and we store the resulting status and expiration date.

Feedback and correspondence. If you use the "Send feedback" option in the app, send a message from our website, or email us at support@mckenna.holdings, we receive your message and anything you choose to include in it, including your email address, if you give one.

Diagnostics. Our servers keep short technical logs of the requests they handle (a request identifier, the time, and which endpoint was called) so we can find and fix problems. The FishFly app contains no crash-reporting or analytics SDK. It does not send us your app version, your iOS version, your device model, crash reports, or performance data, and no third-party diagnostics service receives anything from it.

Website. If you join the waitlist or send a message from fishfly.app, we store what you submit (your email address if you give one, and your message if you send one) together with the exact consent wording that was shown to you, the IP address the submission came from, and your browser's user-agent string. We keep the IP address and user-agent to block automated spam and to be able to show when and how you opted in. We use your email address to tell you about FishFly and nothing else, and you can ask us to remove it at any time.

What we do not collect

We do not collect your name, your contacts, your photos, your health data, your browsing activity outside FishFly, or your payment information. We do not use advertising identifiers, ad networks, or third-party analytics SDKs. We do not build advertising profiles, and we do not sell or rent your information to anyone.

Who we share it with

We share information only with the service providers that make FishFly work, and only to the extent they need it:

• Apple processes all purchases and subscriptions and provides us with receipts and subscription status. Apple's handling of your payment information is governed by Apple's own privacy policy.
• Render hosts our servers and database in the United States.
• Cloudflare provides DNS and hosting for fishfly.app.
• United States Geological Survey provides public streamflow data. We request gauge readings from USGS; we do not send them anything about you.

No AI or machine-learning provider receives your questions. FishFly's recommendations are produced by our own software, running on our own servers, from curated hatch calendars, public streamflow readings and our own fly library. Your queries are not sent to any third-party model provider for any purpose.

We may also disclose information if required by law, subpoena, or legal process, or if necessary to investigate fraud or protect someone's safety. If McKenna Holdings LLC is ever sold or merges with another company, information could transfer as part of that transaction, and we would tell you before it became subject to a different policy.

How long we keep it

These are the retention limits we hold ourselves to. Deletion is carried out by hand today rather than by an automated schedule, so if you want your data gone sooner, the fastest route is to ask us.

• Trip packs and pack history: kept while you are using FishFly and for up to 24 months after your last use, then deleted or anonymized.
• Server logs: kept only for as long as our hosting provider retains them, a short rolling window measured in days.
• Feedback, contact messages and correspondence: up to 3 years, so we have a record of past issues.
• Waitlist email addresses: until you unsubscribe or ask us to remove you.
• Subscription status: as long as needed for Apple's and our accounting and tax obligations.

Your choices and rights

You can turn location access off at any time in iOS Settings without losing the ability to use FishFly. You can delete individual trip packs from inside the app. You can delete the app itself, but note that this does not erase what is on our servers, and does not reset your device identifier, which is stored in the keychain and survives reinstalling. You can manage or cancel your subscription in iOS Settings → your name → Subscriptions; we cannot cancel it for you.

You can also email us at support@mckenna.holdings to ask what data we hold about you, to get a copy of it, to correct it, or to delete it. To do this, include the device identifier from the app's Settings screen. Without it we have no way to find your records, because we don't know your name. We will respond within 45 days.

Depending on where you live, you may have specific legal rights over your personal information, including under the Colorado Privacy Act, the California Consumer Privacy Act, or the GDPR. We honor access, correction, deletion, and portability requests from anyone who asks, regardless of where they live, and we do not discriminate against you for making a request. We do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of on that front.

Children

FishFly is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, email support@mckenna.holdings and we will delete it.

Security

We use encrypted connections (HTTPS/TLS) between the app and our servers, and our database is access-controlled and hosted by Render in the United States. No system is perfectly secure, but we limit what we collect specifically so that a breach would expose as little about you as possible: we hold no names, no email addresses tied to app usage, and no payment data.

International users

FishFly is operated from the United States and our servers are located in the United States. If you use FishFly from outside the U.S., your information is transferred to and processed in the U.S., where privacy laws may differ from those in your country.

Changes to this policy

If we change this policy we will update the date at the top and post the new version at fishfly.app/privacy. If the change is significant, we'll tell you in the app before it takes effect. Continuing to use FishFly after a change means you accept the updated policy.

See also the FishFly Terms of Use. For help with the app, visit fishfly.app/support.