Privacy notice
Updated on 10 October 2026
This notice describes how data is processed when you use the Pesca in Mare app and its associated website.
Controller and contact details
The data controller is Alessandro Pala. For questions about personal data or to exercise your rights, email ale.pala25@gmail.com.
Data processed and purposes
- Account. If you sign up, Supabase Auth manages your email, credentials and account identifier for sign-in, security and password recovery. If you choose Google, sign-in may provide your name, email and basic Google profile information. The legal basis is performance of the requested service and, for security measures, the legitimate interest in protecting the service.
- Profile. Display name, username, biography, harbour, fishing area, boat, favourite species and techniques, experience, website and photo are optional. They are stored on Supabase and visible in the app only to your account. They personalise your profile; the legal basis is performance of the features you choose to use.
- Logbook and location. Trips, GPS tracks, spots, gear and preferences are kept on the device or browser you use, with separate storage for guest and account data. You can choose to save a private copy of your logbook and attachments on Supabase and download it on another device using the same account. Enable automatic synchronization from Profile on each device: it exchanges the logbook and attachments while the app is open and connected, keeps offline changes available and asks you to review conflicts. You can pause it from Profile. Theme, language and preferences remain specific to each device. GPS is read after device/browser permission to show your location and record trips. In Android/iOS apps, screen-off GPS can be enabled from Profile by also granting background location permission. Revoke permission in your device/browser settings. The legal basis is performance of the requested features.
- Online requests. Weather and marine forecasts may receive the requested point's coordinates. Online maps and imagery make requests to their providers and may reveal your IP address and the area being viewed. AI features available in the Professional plan send selected entry notes, audio and images to the backend with their context (technique, location and environmental conditions). Video analysis sends up to six JPEG frames with their source file and timestamp; it does not send the complete video or transcribe its audio track. CSV, GPX and NMEA are parsed on the device while preserving the original. If you use AI in Ask your logbook, your question and relevant logbook excerpts with computed counts are sent to the backend/OpenAI; local search works without sending these excerpts. Results remain proposals for you to confirm. The legal basis is performance of the requested feature.
- Web payments. When activation is available and you choose a subscription, Stripe manages payment, invoices and the customer portal. The backend stores the association between your account, Stripe customer and active plan; the app does not receive complete card details. The purpose is to provide and manage the requested subscription.
Providers and transfers
We use Supabase for accounts and profiles, Google for Google sign-in and GitHub Pages for the static website. Online features may contact Open-Meteo, EMODnet, Esri, OpenFreeMap/OpenStreetMap and other mapping services named in the app. AI processing uses OpenAI through server functions; web payments, when enabled, use Stripe. These providers process the data necessary to deliver the requested service under their own privacy notices and may also process it outside the European Economic Area, with the provider's applicable safeguards.
Retention and control of data
Account and profile data is retained while the account is active or as necessary to handle a request or legal obligation. To request deletion of your account and photo, contact the controller at the address above. Providers' backups and technical logs follow their respective retention periods. Your local logbook and preferences stay on your device/browser until you delete them or clear app data; export a ZIP backup including attachments from Profile. AI processing results are stored on the server to reuse results for repeated attempts; results older than 30 days are removed during new processing. Usage counters and technical logs follow the service's procedures. The cloud copy remains until replaced or until you ask the controller to delete it. Deleting a cloud account does not automatically delete local data.
Your rights
You may request access, rectification, erasure, restriction, portability and objection to processing where provided by the GDPR, by emailing ale.pala25@gmail.com. You may also lodge a complaint with the Italian Data Protection Authority.
Required and optional data
Email and password are required if you choose email registration; Google sign-in uses the necessary sign-in data supplied by that provider. All other profile fields are optional. You can use local app features without creating an account.