ReefPilot Privacy Policy

Last updated: April 15, 2026

ReefPilot ("we", "us", "our") is a reef aquarium management app. This policy explains what data the iOS app and web service collect, why, and your rights.

1. Data We Collect

Category	Examples	Purpose
Account	Email, display name, password (hashed)	Authentication, communication
Tank profile	Tank size, type, livestock, equipment	Core app functionality
Parameter logs	Water chemistry readings	Core app functionality
Device info	iPhone model, iOS version, screen size, RAM, locale	Performance optimization, crash debugging
Diagnostics	Crash reports, API error codes	Bug fixing
Usage analytics	Screen views, feature usage events	Product improvement
Email engagement	Open and click tracking on transactional emails	Email deliverability monitoring
Identifiers	Vendor ID, session ID	Analytics session linkage
Coarse location	Country (derived from IP address via Cloudflare)	Regional defaults (units, language)

2. Data We Do NOT Collect

Precise GPS location
Contacts, photos (except tank photos you explicitly upload), or health data
Financial account numbers (cost entries are user-typed, not linked to bank accounts)
Browsing or search history
Advertising identifiers (IDFA) — we do not serve ads
Data from other apps on your device

3. How We Use Your Data

Core functionality: Tank profile, parameters, tasks, and costs power the app's recommendations and AI assistant.
Performance: Device info and crash reports help us fix bugs on specific models and OS versions.
Product improvement: Aggregated usage events (e.g., which features are popular) guide what we build next. We never sell this data.
Email delivery: Open/click pixels on transactional emails (verification, password reset) let us know if emails are reaching your inbox.

4. Third-Party Services

Service	What It Receives	Purpose
Railway	Encrypted API traffic	Backend hosting
Resend	Email address + email content	Transactional email delivery
Sentry	Crash stack traces, device model, OS version	Crash reporting (when enabled)
Cloudflare	IP address (for CDN/proxy)	CDN, DDoS protection, country detection
Anthropic (Claude AI)	Chat messages + tank context	AI assistant responses

We do not share data with advertisers, data brokers, or social networks. No data is sold, ever.

5. Data Retention

Account data: Retained while your account is active. Delete your account in-app to remove all associated data.
Analytics events: Retained for 12 months, then automatically purged.
Crash reports: Retained by Sentry per their retention policy (typically 90 days).
Session cookies: Expire after 30 days of inactivity.

6. Your Rights

Access: View all data we hold about you via the "More" tab in the app.
Delete: Delete your account and all associated data from Settings in the app. This is permanent and irreversible.
Opt out of analytics: Contact us at the email below. We will disable event collection for your account.
Portability: Contact us to request a machine-readable export of your data.

7. Security

Passwords are hashed with bcrypt. All traffic is encrypted via HTTPS/TLS. Session cookies are HttpOnly, Secure, and SameSite=Lax. Crash reports never include passwords or session tokens.

8. Children

ReefPilot is not directed at children under 13. We do not knowingly collect data from anyone under 13.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via in-app notification or email. The "Last updated" date at the top reflects the most recent revision.

10. Contact

Questions or requests? Email support@reefpilotapp.com