Privacy Policy

Carpdex ("Carpdex", "we", "us") provides an app and website for tracking named carp, exploring UK lakes, logging catches, and following the leaderboard. This policy explains what information we collect, how we use it, and the choices you have.

Account information. When you create a Carpdex account, we collect your email address and password (stored securely, never in plain text) so you can sign in and access your data across devices.

Content you submit. When you log a catch or interact with the app, we collect the information you choose to provide — species, weight, notes, photos, and the lake associated with the catch. If you set up a public profile, your username and catch history may be visible to other users and used to calculate leaderboard rankings.

Usage and device information. Like most apps and websites, our infrastructure providers automatically log basic technical information (such as IP address, device/browser type, and request timestamps) to operate and secure the service. We do not currently use analytics, advertising, or crash-reporting SDKs, but this policy will be updated if that changes in the future.

We use the information we collect to:

• Provide, operate, and maintain the Carpdex app and website
• Create and secure your account, and let you log in across devices
• Display your catches, public profile, and leaderboard position where applicable
• Review and verify submitted weight records for named fish
• Respond to support requests and communicate important updates
• Detect, prevent, and address technical issues, fraud, or abuse

We do not sell your personal information.

We use trusted third-party service providers to run Carpdex, primarily Supabase, which hosts our database, authentication, and file storage. These providers process data on our behalf under their own security and confidentiality obligations, and do not use your information for their own purposes.

Content you mark as public (such as a public profile, catch photos, or leaderboard entries) is visible to other Carpdex users and website visitors by design.

We may disclose information if required by law, or to protect the rights, property, or safety of Carpdex, our users, or others.

We retain your account and catch data for as long as your account is active. If you delete your account or request deletion, we will remove your personal information within a reasonable time, except where we're required to retain it for legal or legitimate business purposes.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most account information directly in the app, or contact us using the details below to make a request.

Carpdex is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Carpdex is built primarily for UK anglers, and our service providers may process and store information in the UK, EU, or other countries. Wherever your information is processed, we require appropriate safeguards to protect it.

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

We may update this policy from time to time as Carpdex evolves — for example, if we add analytics or new features. We'll update the "Last updated" date above, and where changes are significant, we'll provide additional notice.

If you have any questions about this policy or your information, contact us at hello@carpdex.com.