Privacy Policy

1. Information We Collect

We may collect and process the following categories of information:

• Account information: email address, user ID, authentication tokens
• Tank and livestock data: tank configurations, livestock species, stocking records
• Water test results: parameter logs, maintenance history, test dates
• AI interaction data: chat history, diagnostic outputs, submitted queries
• Uploaded images: photos submitted for AI-based analysis
• Subscription and billing metadata: plan status, credit balance, transaction identifiers (not raw payment card data)
• Flow Builder data: equipment layouts and system configurations
• Technical and usage data: device type, operating system, app version, error logs, and aggregate usage patterns for performance and security purposes

We do not collect payment card numbers, bank account details, or other sensitive financial data directly. All payment processing is handled by Apple App Store or Google Play Store.

2. How We Use Information

• Provide, maintain, and improve core app functionality
• Deliver AI-powered insights, diagnostics, and personalized recommendations
• Process and verify subscriptions and manage account credit balances
• Respond to support requests and communicate service updates
• Detect, investigate, and prevent abuse, fraud, or misuse of the platform
• Monitor system performance, stability, and security
• Comply with applicable legal and regulatory obligations
• Enforce our Terms of Service and other policies

We do not use your personal data for advertising, behavioral profiling, or sale to third parties.

3. Local Device Storage & AI Preferences

Certain data and privacy preferences are stored locally on your device using secure local storage mechanisms.

This may include:

• AI chat history stored locally per tank
• AI insight logs associated with a specific tank
• AI photo consent preferences
• Dismissed or suppressed AI advice
• Locally cached ICP (Inductively Coupled Plasma) water test data

Users may clear locally stored AI conversations or reset AI insights using in-app privacy controls. Clearing locally stored data affects only the device on which the action is performed and does not automatically delete data stored on secure cloud infrastructure unless account deletion is requested.

AI Conversations

Users may delete AI conversation history at any time through the in-app Privacy & Data settings. Deleting AI conversations removes chat history for the selected tank on the current device only.

AI Insights

Users may reset previously dismissed AI insights for a specific tank. This restores suppressed advice but does not affect other tanks or devices.

AquaAtlas does not use local AI data for advertising, sale, or resale purposes.

4. Data Storage & Security

Cloud-based data is stored using secure third-party infrastructure, including Firebase Authentication, Cloud Firestore (Google Cloud), and Google Cloud Run.

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal data from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS), server-side access controls, and authentication-gated API endpoints.

However, no system can guarantee absolute security. In the event of a data breach that is reasonably likely to result in risk to your rights or freedoms, we will notify affected users in accordance with applicable law.

5. Data Sharing & Third-Party Processors

We do not sell personal data.

We may share limited information with service providers acting as data processors on our behalf, strictly to operate and improve the Service:

• Firebase / Google Cloud — authentication, cloud database, and hosting
• RevenueCat — subscription management and billing event processing
• Apple App Store / Google Play Store — in-app purchase processing
• AI model providers — processing user-submitted queries and images for AI analysis

These providers process data under contractual obligations consistent with applicable privacy law and their own published privacy policies. We do not permit third-party service providers to use your data for their own marketing purposes.

We may disclose information if required by law, court order, regulatory authority, or to protect the rights, safety, or property of Breachora LLC, our users, or the public.

6. Data Retention

User data is retained only as long as necessary to provide services, enforce agreements, comply with legal obligations, and maintain system integrity. Account data is deleted upon confirmed account deletion, subject to legal retention requirements.

For additional details, please review our Data Retention Policy.

7. Your Rights & Account Deletion

You may request deletion of your account and all associated cloud-stored data using the in-app deletion feature located in Settings > Account. Account deletion permanently removes your profile, tanks, logs, AI history, and authentication credentials, subject to legally required retention.

Depending on your jurisdiction, you may also have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Request restriction or objection to certain processing activities
• Withdraw consent where processing is consent-based

To exercise these rights, contact us at support@aquaatlas.app.

8. California Residents — CCPA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To submit a CCPA request, contact us at support@aquaatlas.app with “CCPA Request” in the subject line. We will respond within the timeframes required by applicable law.

9. Children's Privacy

AquaAtlas is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information without parental consent, please contact us at support@aquaatlas.app so appropriate action can be taken, including deletion of the child's information.

10. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be reflected by updating the “Last Updated” date at the top of this page. For significant changes, we may also provide in-app notification. Continued use of AquaAtlas after updates constitutes acceptance of the revised policy.