Privacy Policy

Version 1.1 · Effective 27 September 2026

This policy explains what Reel Lucky (ABN 18 614 133 179) collects, why, and what happens to it. The short version: we collect the minimum needed to plan your fishing, we never sell your data, and you can delete everything yourself in Settings.

1. What we collect

Things you give us

Account: your email address, and your first name if you share it.
Plan inputs: the days, times, suburb or area, fishing style and target species you choose.
Catch log: catches you log: species, counts, sizes and any photos you upload.
Rankings profile: a display name and area, only if you opt in to the leaderboard.
Safety acknowledgement: a record that you acknowledged the safety terms, and when.

Things collected automatically

Usage analytics: page views and product events (like “plan built”) via Vercel Analytics. Aggregated, and not linked to your account.
Advertising measurement: the Meta pixel, so we can tell whether our Instagram and Facebook ads bring people who find Reel Lucky useful. It records page views, when someone asks for a sign-in link and when an account is created, and it sets cookies Meta can read. When you sign up, your browser scrambles your email address, and your first name if you gave one, and sends only the scrambled version to Meta, which uses it to work out whether you arrived from one of our ads. If you have a Facebook or Instagram account, Meta can match it to you that way. Meta never receives your plans, your catches, your saved spots or the areas you fish. You can limit this in your Meta ad settings, or block it with any tracker blocker, and the site works exactly the same either way.
Error reports: if something breaks, the error message and the page it happened on.
Technical basics: IP address (used for rate-limiting and abuse protection) and the cookies needed to keep you signed in, plus one small cookie that remembers you've visited before.

Payments

Card and wallet details go directly to Stripe, our payment processor. They never touch our servers. We store only your purchase history, subscription status and subscription status.

2. How we use it

To run the service: build plans, save them, track your subscription and points, show rankings you've joined.
To generate plans, your plan inputs (never your email) are sent to our AI provider, Anthropic. Anthropic does not use our API requests to train its models.
To fetch conditions, the coordinates of your chosen fishing area (never your identity) are sent to weather and tide providers.
To keep the service safe: rate-limiting, abuse prevention and error monitoring.
To contact you about your account: sign-in links, and notices about material changes. Marketing email only ever with your consent, with unsubscribe.

3. Where it lives

Your data is stored with our infrastructure providers: Supabase (database and authentication), Vercel (hosting and analytics) and Stripe (payments). Meta receives advertising measurement data only, as described above. These providers may store or process data on servers outside Australia, including in the United States. We choose providers with strong security practices, and access inside Reel Lucky is limited by row-level security. Your rows are readable only by you.

4. Who sees it

Nobody buys it. We never sell or rent personal information.
Service providers listed above, only to run the service.
Other users see only what you opt into: your display name, area and points on the rankings.
Authorities, only if the law genuinely requires it.

5. How long we keep it, and how you delete it

Your data stays while your account is active.
Settings → Delete account permanently erases your account, plans, catches, photos, points and rankings entries. If you have an active subscription, cancel it first in Manage billing. Deleting the account doesn't stop Stripe billing.
Payment records are kept as long as tax and accounting law requires, even after deletion.
Aggregated analytics that can't identify you may be retained.

6. Access and correction

You can see and edit your details in Settings. For anything else (a copy of your data, a correction, a question) email reellucky.hq@gmail.com and we'll respond within a reasonable time.

7. Security

Traffic is encrypted in transit, data is protected by row-level security, payment data is handled solely by Stripe, and we operate a least-access setup. No system is perfectly secure, but we take this seriously and monitor for failures.

8. Complaints

If you think we've mishandled your information, email us first and we'll try to put it right. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

9. Changes

We'll update this policy as the product evolves; material changes get notice in the app or by email. The current version always lives at reellucky.io/privacy.