Privacy Policy

Last updated November 2, 2026

The short version

CastPlan helps you plan fishing trips in Florida. We collect what the app needs to work: your email address, what you choose to save (catches, spots, trips) and some basic usage. We don't sell your data, we don't show ads, and we use other companies only to run the features you use. They are named below.

What we collect

  • Your account. Your email address and a password or sign-in link. If you add them, the name you go by, a short bio, a photo and your home area. Your membership level.
  • What you save. Catches, including any photo, species, size, bait, rig, notes and the spot. Spots you mark yourself, with their map position. Trips you plan or join: the spot, time, meeting point, crew and gear notes. Recaps you write. Circles you create or join, and the posts, comments and reactions you share there.
  • How you use the app. Events such as "opened a trip" or "finished a prep card", linked to your account, with an anonymous id for each visit and a short list of fixed details (never your location, notes or photos). We use them to see what works and fix what doesn't.
  • The launch list. If you join it, your email address and which link brought you to CastPlan, such as a Facebook post or a QR code. We use the email only to invite you.
  • Payments. If you subscribe, Stripe handles your card. We keep your Stripe customer id and membership status, never your card number.
  • Errors. If the app breaks, an error report with the error and the page (no query string) can be sent so we can fix it. We remove locations, names, emails, photos and notes from it first.

Photos

We re-save every photo you add in the app before it is stored or sent anywhere. That removes the hidden details a phone camera adds, including the GPS location where the photo was taken.

Your location

  • "Near me" uses your phone's position on your device to find the nearest spots. It isn't stored or sent to us. Weather and tide services see only the spot it picks.
  • "Mark My Spot" saves your current position, and how accurate it is, as one of your spots when you choose to save it.
  • A trip's meeting point, including one you set with your current position, is saved with the trip and shown to its crew.
  • Maps load their images from a map service, which sees the area on your screen. When a map is centered on you, that area is around your position.
  • Weather and tides: the app asks weather services for the conditions at the spot you're looking at. That includes spots you saved yourself, so those services see the position of the spot.
  • Private spots stay private. When you share a trip, we keep a private spot's name out of what your crew sees.

AI features

Three features send information to Anthropic, which runs the AI model that answers. Each sends it only when you use the feature:

  • Fish ID sends the photo you choose. It doesn't send your name, account or location.
  • Ask the Guide sends your question with what the Guide needs to answer well: your first name, home area, skill level and goal, the trip you're planning (spot, time, target, rig and bait), the conditions, and your last five catches (species, spot and date).
  • Trip notes and recaps, when you turn support on, send the trip's details, its catches and your recap draft, without account ids.

Anthropic uses this to answer your request. Under its commercial terms it doesn't train its models on it. It deletes it within 30 days, unless it must keep it longer to enforce its usage policy or to comply with the law.

Who else receives data, and why

  • Supabase

    Stores your account and data, and runs sign-in.

    Receives: Everything you save in the app.

  • Cloudflare

    Hosts the app.

    Receives: Your requests, including your IP address.

  • Anthropic

    The AI behind Fish ID, the Guide and trip notes.

    Receives: Only what's listed under AI features.

  • Resend

    Sends sign-in, confirmation and password emails.

    Receives: Your email address and that email.

  • Sentry

    Error reports.

    Receives: The scrubbed error report, and your IP address as part of the request.

  • Stripe

    Payments.

    Receives: Your email, your account id and your subscription.

  • Open-Meteo

    Weather, wind, waves, sun and moon.

    Receives: The position of the spot you're viewing.

  • NOAA

    Tide predictions.

    Receives: The tide station near the spot.

  • National Weather Service

    Freshwater conditions and alerts.

    Receives: The position of the water you're viewing.

  • USGS

    River and lake levels.

    Receives: The gauge for a listed water.

  • OpenFreeMap

    Map images.

    Receives: The area on your screen and your IP address.

  • unpkg

    Map pin images and styles.

    Receives: Your IP address.

  • OpenStreetMap (Nominatim)

    Finding a meeting-point address.

    Receives: The place or address you type.

  • Google Fonts

    The app's fonts.

    Receives: Your IP address.

  • YouTube (no-cookie player)

    How-to videos on rig and knot pages.

    Receives: Your visit to that page, when the video loads.

  • Your browser's push service

    Notifications, if you turn them on.

    Receives: A notification address for your device.

Gear links and Amazon

Gear links open Amazon. As an Amazon Associate, CastPlan earns from qualifying purchases. CastPlan sends Amazon nothing about you.

Once you follow a link, you're on Amazon's site. Amazon and other third parties may serve content and advertisements there, collect information directly from you, and place or recognize cookies on your browser. Amazon's privacy notice applies.

What your crew and circles see

People you invite to a trip see the trip, its meeting point, the crew's first names and what each person is bringing. Members of a circle see what you post to it. Posts you make public can be seen by anyone signed in to CastPlan.

On your device

The app keeps a copy of your setup, catches (with photos), spots and trips in your browser's storage, so it works with a weak signal. Signing out keeps that copy for next time. "Sign out and clear this device" in Privacy & account removes it. We use your browser's storage for your sign-in session. CastPlan itself sets no advertising or tracking cookies.

How long we keep it

  • Your data stays until you delete it or delete your account.
  • Usage events are deleted after 90 days.
  • Error reports are kept by Sentry under its retention settings.
  • When you delete your account we delete your data as described below. Payment records stay with Stripe, which keeps its own payment records.

Your choices

  • Download my data: Profile → Privacy & account gives you one file with your catches, trips, spots, posts, comments, recaps, circles and settings.
  • Delete account: Profile → Privacy & account deletes your account and your catches, spots, posts, comments, prep and usage records. If you own an upcoming trip that has crew, it passes to the first crew member who accepted. Your other trips are deleted, but each crew member keeps their own catches and recap. A circle you own passes to its longest-standing member, or is deleted if no one else is in it. Other members' posts stay. While a paid membership is active, cancel it first.
  • You can edit or delete anything you've saved, at any time.
  • You can turn off notifications in Profile → Notifications.

Children

CastPlan is for people 13 and older. We don't knowingly collect data from children under 13. If you think a child under 13 has an account, contact us and we'll delete it.

Changes

If we change this policy in a way that matters, we'll update the date above and tell you in the app.

Contact

Questions or requests? Email us at hello@castplan.fish.