Privacy Policy

Last updated: 6 August 2026

1. Data controller

The controller of the personal data collected through the CarpRun app and the carprun.app website is the Reel Squad team, which develops and administers the CarpRun mobile app and the carprun.app website.

Data protection contact details:

• Email: [email protected]
• Team: Reel Squad
• Website: carprun.app

2. GDPR definitions

To help you understand this policy, here are a few essential definitions:

"Personal data"

Any information that allows you to be identified directly or indirectly (name, email, location, IP address, etc.).

"Processing"

Any operation performed on data: collection, recording, storage, modification, consultation, transmission, deletion.

"Controller"

The Reel Squad team, which decides the purposes and means of processing your data.

"Processor" (sub-processor)

Third-party providers that process data on our behalf (e.g. Google Firebase for cloud storage, OpenWeather for weather data, Google Workspace for the newsletter).

"Data subject"

You — the app user or newsletter subscriber whose data is being processed.

3. What data we collect

Depending on how you interact with the app or the website, we may collect the following categories of data:

3.1 Account data (app)

You can create an account using Google Login, Apple Login or email and password. In this process we collect:

• Email address and password (encrypted) — for authentication;
• The name and unique identifier provided by the identity provider (Google or Apple) — needed to secure your account and sync your data across devices;
• Display name (optional);
• Fishing country (selectable in settings);
• Preferred language and unit system (metric or imperial).

3.2 Data generated through use (app)

• Fishing sessions (lake, swim, duration, rods used);
• Catches (species, weight, bait, rod, photo);
• Baiting sessions (bait type, quantity, method);
• Notes from the session journal;
• Weather data associated with catches (temperature, pressure, wind);
• Badges and progress in the career system.

3.3 Technical data (app)

• GPS location — collected only with your explicit permission and used exclusively to automatically download weather data when you log a catch (journal and smart analysis); it is not stored as a location history;
• Device model and operating system version;
• IP address (anonymized after collection);
• Technical logs and crash reports, collected through Firebase Crashlytics, to improve app stability;
• Anonymous advertising identifiers — only in the free version, through Google AdMob (see sections 8 and 11).

3.4 Data collected through the newsletter (website)

If you subscribe to our newsletter on carprun.app, we collect:

• Your email address — to send you news about the app, new features and fishing content;
• Your country — detected automatically from your IP address and used exclusively for aggregated internal statistics (it helps us understand which regions our subscribers come from). The IP address is not stored, only the resulting country name;
• The date and time of your subscription — for internal records and GDPR compliance.

4. What we use your data for

The data we collect is used exclusively for the following purposes:

• Running the app: authentication, saving sessions, cloud sync, accessing your fishing journal from any device;
• Personalized statistics and analysis: generating your reports and Smart Insights recommendations;
• Functional notifications: re-baiting alerts, security notifications, important updates and answers to your questions;
• Improving the service: identifying bugs, optimizing performance, developing new features;
• Newsletter: periodically sending emails with news, new features, fishing tips and content relevant to the community (only if you subscribed explicitly);
• Displaying ads in the free version of the app (the PRO version is ad-free);
• Anonymized global statistics: generating aggregated reports that help every angler (see section 7);
• Legal compliance: meeting legal, financial and tax obligations.

5. Legal basis for processing

We only process your data when we have a valid legal basis:

• Performance of a contract: to provide you with the app's features;
• Your consent: for location access, for subscribing to the newsletter (by explicitly ticking the "I agree to the processing of my personal data" box on the site) and for marketing communications (see section 11);
• Legitimate interest: to improve the app and keep it secure;
• Legal obligation: for tax reporting related to PRO payments.

6. Cloud data storage

Newsletter data is stored in a Google Sheets file hosted on Google Workspace, accessible exclusively to the Reel Squad team. Google acts as a data processor under GDPR, and the transfer of data is governed by the European Commission's Standard Contractual Clauses.

7. Anonymized statistics

We collect data about fishing trips (bait type, time of year, temperatures, catch rates) in a strictly anonymous way. This data is aggregated in the cloud and can never be linked to your identity or your account.

It is used exclusively to generate global statistics that help the angling community make better decisions on the bank (for example: "fish bite best in low pressure in autumn").

8. Sharing data with third parties

We do not sell, rent or hand over our database to any third party or company. Your data is safe with us.

The only service providers (sub-processors) we work with are:

• Google Firebase — for the database (Firestore), photo storage (Storage), authentication and crash reports (Crashlytics);
• OpenWeather — for providing weather data; coordinates are sent anonymously, without being linked to your account;
• Google AdMob — for displaying ads in the free version of the app; anonymous advertising IDs may be collected. The PRO version is ad-free;
• Apple StoreKit / Google Play Billing — for the secure processing of PRO payments (we have no access to your card details);
• Google Workspace (Sheets / Apps Script) — for storing newsletter email addresses;
• ipapi.co (operated by Kloudend, Inc.) — a geolocation service used strictly to detect the country of visitors who subscribe to the newsletter; we do not store the IP address, only the resulting country name;
• Transactional email services — for sending security notifications, account recovery emails and the newsletter.

All of these providers have been vetted and have signed data processing agreements (DPAs) in accordance with GDPR.

9. Your rights under GDPR

As a user of the CarpRun app or a newsletter subscriber, you have the following rights:

• Right of access: you can see all your data directly in the app and request a copy of the personal data we hold about you;
• Right to rectification: you can edit any journal entry at any time, directly in the app, or by sending us a request;
• Right to erasure (the "right to be forgotten"): you can permanently delete your account from the "Settings" menu, request the deletion of all associated data, or unsubscribe from the newsletter;
• Right to data portability: PRO users can export their entire history in CSV format directly from the app;
• Right to restriction: you can ask us to limit the processing of your data in certain situations;
• Right to object: you can object at any time to your data being processed for marketing purposes;
• Withdrawal of consent: you can turn off location access or marketing notifications at any time from your phone or app settings;
• Right to lodge a complaint: you have the right to contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

10. Deleting your account

You can delete your account in the following ways:

• Directly in the app: "Settings" menu → "Delete account";
• If you have uninstalled the app: fill in this secure form.

Deletion requests are taken up within 3-5 business days, and your data (including photos) is completely removed from our servers within a maximum of 30 days.

11. Commercial communications and newsletter

Newsletter

If you subscribe to our newsletter on carprun.app, you will periodically receive emails with news about the CarpRun app, new features, fishing tips and content relevant to the community. You can only subscribe by filling in the form on the site and explicitly ticking the consent box.

You can unsubscribe at any time using the unsubscribe link included in every email, or by writing to [email protected] with the subject "NEWSLETTER UNSUBSCRIBE". Your request will be processed within a maximum of 5 business days.

Ads in the free version

The free version of the app displays ads through Google AdMob. Anonymous advertising IDs may be collected in the process; they are not linked to your fishing journal or your account. You can limit ad personalization in your phone's privacy settings, and the PRO version removes ads entirely.

In-app marketing communications

In the future, we would like to partner with fishing shops, specialist brands and event organizers. In that context, we may send you special offers, discounts or commercial news via push notifications or email.

This will happen only if you have given us your explicit consent (for example, by ticking the corresponding box when you create your account). Consent is entirely optional and in no way affects your use of the app's core features.

You can change your mind at any time: turn off marketing messages in the "Settings" menu and we will stop sending them immediately, without affecting your account or your saved data.

12. Data security

We apply technical and organizational measures to protect your data against unauthorized access and loss:

• Encryption in transit (HTTPS/TLS 1.3);
• Password encryption using industry-standard algorithms (bcrypt);
• Secure authentication with Google Sign-In or Apple Sign-In;
• Restricted access to our infrastructure (principle of least privilege);
• Regular security and access audits.

That said, no system is 100% secure. Please use a strong, unique password and let us know immediately if you suspect your account has been compromised.

13. Data retention period

App data: kept for as long as your account is active. If you choose to delete your account, all associated data — including photos — is permanently removed from our servers within 30 days. If you do not sign in to your account for 24 consecutive months, we will contact you before starting the automatic deletion process.

Newsletter email addresses: kept for as long as you remain subscribed. If you unsubscribe, your address is deleted from our database within a maximum of 30 days. If you do not interact with any email for 24 months, we will treat the subscription as inactive and delete it automatically.

Anonymized data used for global statistics may be kept indefinitely, since it cannot be linked to an identifiable person.

Data required for legal obligations (invoices, accounting records) is kept for the periods laid down by Romanian legislation (usually 10 years for financial records).

14. International data transfers

Certain data may be transferred to Google servers (Firebase, Workspace, AdMob) located in the European Union or the United States, to OpenWeather, and to ipapi.co servers (Kloudend, Inc.) located in the United States. These transfers are covered by:

• Standard Contractual Clauses approved by the European Commission;
• The EU-U.S. Data Privacy Framework, under which Google is certified;
• Additional technical measures (end-to-end encryption for sensitive data).

15. Minors

16. Changes to this policy

We will update this Privacy Policy whenever there are legislative, functional or organizational changes. The updated version will always be published on this page, with the date of the last update visible at the top.

For significant changes, we will let you know through an in-app notification, the newsletter or an email.

17. Contact

For any question about data protection, or to exercise your GDPR rights, you can reach us at:

• Email: [email protected]
• Team: Reel Squad
• Account deletion form: open it here
• Newsletter unsubscribe: send an email with the subject "NEWSLETTER UNSUBSCRIBE" to the address above

Your privacy is our priority. If anything is unclear, write to us at [email protected].