Privacy

Last Updated: 15/03/2026

1. Introduction

Welcome to findex. We are committed to protecting your privacy. This policy explains how we handle your data, specifically regarding Google Sign-In, Google Drive integration, and our public sharing features.

2. Data We Collect and How We Use It

Identity Data: When you sign in with Google, we access your email address, first name, and last name.

Storage vs. Processing: We store your email address on secure UK servers for account management purposes, while your first and last name are only stored if you choose to display them when interacting with the community, such as through comments or likes. You maintain full control over your identity via your account settings, where you can choose to display your full name, your first name with a surname initial, or remain entirely anonymous; should you choose anonymity, we do not store your name for display purposes. Your name may also be shared as part of a public "Catch" post if you explicitly include it when publishing.

Google Drive Data (drive.file): Our app requests access to your Google Drive via the drive.file scope. This allows the app to only read, create, and update files that were opened or created by this app. We use this to back up your fishing data to your private Drive. We cannot access any other files in your Google Drive.

Local Data: Your fishing data is stored locally on your device. While the App accesses this information to allow you to see and manage your fishing data, this data remains on your device and is not transmitted to our servers. Your data only leaves your device when it's backed up to your personal Google Drive or if you explicitly choose to "Share" specific data points publicly.

3. Google API Disclosure

findex's use and transfer to any other app of information received from Google APIs will adhere to the Google API Service User Data Policy, including the Limited Use requirements.

Specifically, we only use access to your Google Drive (drive.file scope) to provide a backup and restore service for your personal fishing data. We do not use this data for advertising, and we do not share this data with third parties unless it is strictly necessary to provide the backup functionality.

4. Public Sharing & User Consent

You have full control over what information is shared with the community. Public sharing is strictly optional and disabled by default.

Granular Control: For every catch you log, you can choose to share as much or as little as you like. Our sharing interface allows you to toggle individual data points on or off before publishing.

Data Points: Information you may choose to share includes, but is not limited to:

  • Identity: Your First and/or Last Name.
  • Catch Details: Venue name/location, species, weight, and bait used.
  • Media: Primary images of your catch.

Storage & Visibility: Any data point you explicitly choose to "Share" is transmitted to our secure UK-based servers and Google Cloud Storage (UK). Once shared, this specific information becomes publicly visible to other users within the app and may be indexed by external search engines.

Revocation: You can "un-share" or delete any public post at any time, which will remove that data from our production servers.

5. GDPR Compliance, Data Residency & Regional Availability

As a UK-based entity, we comply with the UK GDPR and aim to align with the core principles of the EU GDPR where applicable.

Regional Availability & GeoIP: Our service is operated from the United Kingdom and may be accessible globally. However, we do not make the service available to residents of certain jurisdictions with complex regulatory or sanctions regimes (currently: China, Russia, Belarus, Iran, North Korea, Syria, and Cuba). To support this, we apply IP-based GeoIP checks to selected public and authentication endpoints and will block access where your IP appears to originate from one of these countries. These checks are not a guarantee (for example, users may use VPNs), but they are intended as a reasonable technical measure to enforce our regional availability policy.

Legal Basis: We process your data based on Consent (for public sharing) and Contractual Necessity (for providing the backup and core service).

Your Rights: You have the right to access, rectify, or delete your data. You can withdraw your consent for public sharing at any time by deleting the shared post within the app.

6. Data Retention & Deletion

Private Backups: These remain in your Google Drive until you delete them.

Public Data: We retain shared catch data as long as your account is active. If you request account deletion, all public data and server backups will be purged within 30 days.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at: email@findex.fish.