Privacy policy · effective October 23, 2026

Privacy Policy

This policy describes what HuntFish.AI (“HuntFish”, “we”) collects, why, who processes it on our behalf, how long we keep it, and the controls you have. It is written to match how the product actually works; where a feature is not yet live, we say so.

1. What we collect

Account. Your email address and a sign-in code we send to it. We do not ask for a password, a phone number, precise GPS, contacts or a property boundary at signup.

Field data you choose to save. Places (approximate by default, precise only when you mark a place precise), observations, trips and Trip Cards, Scouts and their results, conversations with HuntFish, and photos you upload. Photo originals are stored unchanged; every derived or shared copy has its metadata removed.

Preferences and consents. Units, home area, spending caps, and a dated record of each permission you grant or withdraw (for example, outside AI processing).

Credits and payments. A ledger of credit grants, reservations, charges and refunds. When purchases are enabled, payment card details are handled by the payment provider (Stripe on the web; Apple or Google in their apps) and never touch our servers. We receive a payment reference and the amount.

Connector grants. When you connect an assistant such as Claude, ChatGPT or Grok, we record the client, the permissions you granted, any spending allowance, and an audit log of the tools it called.

Technical logs. Request metadata needed to operate and secure the service (timestamps, status codes, error classes). Our logging is configured never to record prompts, precise coordinates, access tokens, signed photo URLs or payment data.

Product analytics. We use PostHog for product analytics and session replay so we can find broken or confusing UI (for example rage clicks and dead clicks). Inputs, emails, auth screens, lease-letter content, and landowner names or addresses are masked before anything leaves your browser. Turning on Do Not Track or Global Privacy Control in your browser opts you out of both PostHog and our anonymous page-view counts.

2. How we use it

To answer your questions and run the Scouts you approve; to quote, reserve and settle credits accurately; to keep your saved places, photos and plans available to you across devices; to enforce the permissions you set for connected assistants; to detect abuse and keep the service reliable; and to email you sign-in codes. We do not sell personal data and we do not show ads.

3. AI processing

Answering a question or identifying a photo may require sending the necessary content to an outside AI provider. We ask for your permission before the first time and name the provider (Anthropic at launch). We send the minimum needed, through our own servers: your question, a metadata-free copy of any photo you attach (never the original), and for a Scout only the data you allow it, with places at about 5 km. Your content is not used to train our models or, under our provider agreements, theirs. If no provider is connected, the app says so and nothing is sent or charged.

4. Who processes data for us

  • Supabase (database, authentication, file storage and server functions), hosted in the United States (AWS us-east-1).
  • Anthropic (AI model processing) when you have allowed outside AI processing.
  • Stripe (web payments), Apple and Google (in-app purchases), once purchases are enabled.
  • Email delivery for sign-in codes.
  • PostHog (product analytics and session replay), when your browser has not opted out via Do Not Track or Global Privacy Control.

Each processes data only to provide its service to us and under a written agreement.

Affiliated companies. We may share account and usage information with our affiliated companies under common ownership (WildFeed, TrailCamera.ai, and HuntFish.ai) to provide and improve our services and to tell you about our other outdoor apps. We never sell your personal information.

5. Connected assistants

When you connect an assistant, it can read only what the grant allows — by default your balance, your Scouts and results, trip plans, and places at approximate precision. Original photos are never shared through a connector, and exact coordinates only if you turn on exact spots for that assistant (off by default). What the assistant does with information after it receives it is governed by that assistant’s own privacy policy. Grants expire after 30 days unless you renew them, and you can revoke any grant instantly in Settings → Connections.

6. Community

Your private observations and camera data are never aggregated into a public or community map. If you choose to share something with the community in a future release, it is labeled as a community report and you can withdraw it.

7. Retention

Your data is kept while your account is open. Exports you request are available for 7 days and then removed. Deleting your account removes your account data immediately (see section 8). Operational logs without personal content are kept for up to 30 days.

8. Your controls

  • Export everything you own as a JSON archive from Settings → Privacy, free.
  • Delete your account from Settings → Account. Deletion is immediate and complete: places, photos, plans, Scouts, conversations, consents, connector grants and ledger records tied to you are removed, and connected assistants lose access at once.
  • Change any permission at any time in Settings → Privacy; the change takes effect on the next action.
  • Pause all paid work with one switch in Settings → Spending.

Depending on where you live you may also have legal rights to access, correct, delete, restrict or port your data and to object to certain processing. You can exercise them in the app or by emailing privacy@huntfish.ai.

9. Children

HuntFish is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact privacy@huntfish.ai and we will delete it.

10. Security

Data is encrypted in transit and at rest. Access to your data is enforced by row-level security in the database — every table that holds user data has a policy, and the policies are tested. Server-side secrets are held in a managed vault. No system is perfectly secure; if we learn of a breach affecting you we will tell you as the law requires.

11. Changes

We will post changes here with a new effective date and, for material changes, tell you in the app before they take effect.

12. Contact

Privacy questions: privacy@huntfish.ai. Everything else: support@huntfish.ai or the support page.