Privacy Policy

Best Fishing Catch

Effective date: 2026-10-08

This policy explains how this application handles information and how to contact us about privacy.

Information we process

Best Fishing Catch does not ask for an account, name, email address or password. On your iPhone, Core Data stores your current puzzle, rig selections, cast journal, completed levels, caught fish and capture dates, and preferences. A random installation identifier is stored in the device Keychain and sent as an installation secret over HTTPS for Daily Catch, progress synchronization and deletion. The server stores only a SHA-256 hash of that secret with synchronized completed levels, trophy identifiers, fish names, water identifiers, capture dates, artwork identifiers and a progress update timestamp. The active cast journal and audio preferences are not synchronized. Daily requests use the current UTC day. Network requests to the app service or this website expose technical information such as IP address, request time and HTTP metadata to the hosting infrastructure. The application server uses temporary hashed request identifiers for rate limiting and does not log installation secrets or progress payloads.

How we use information

Local storage makes the game playable offline and restores your round after closing the app. The installation secret authorizes access only to that installation's server progress. Optional synchronization preserves completed levels and the fish album while the same installation key remains available. Daily Catch supplies a deterministic daily puzzle; a built-in puzzle is used when the network is unavailable. Technical request handling, readiness checks and temporary rate limits operate and protect the service. Optional reminders are scheduled locally on your iPhone. Data is not used for advertising, profiling or analytics.

Service providers and sharing

The backend and this public policy are hosted by Railway, which processes network traffic, infrastructure logs and stored synchronized progress as the infrastructure provider. No advertising, analytics, social login, email delivery or third-party tracking SDK is included in the app. Progress is not made public or shared with other installations. Device storage and any device-level backups are governed by your Apple device settings. Applicable law may require disclosure to competent authorities; no routine sale of personal information or sharing for advertising is implemented.

Data retention

Your local round and progress remain on the device until you delete them, remove the app or replace the saved round. The album retains all campaign trophies and up to the latest 228 daily trophies. The installation key may remain in Keychain after an app reinstall, depending on device behavior; recovery is not promised after losing the key. Server progress remains in the persistent database until you request its deletion; no automatic expiration period is configured. Rate-limit identifiers are held in bounded server memory with a rolling one-minute request window and disappear on process restart or eviction. Infrastructure logs and provider-managed backup copies follow the relevant hosting or device provider's practices; a fixed retention duration for these copies has not been verified. The app does not schedule its own server backup jobs.

Deleting your information

Use Settings, Delete all progress to clear your local puzzle, completed levels and fish album and request deletion of that installation's server record. The action requires confirmation and turns progress synchronization off. If the network is unavailable, a pending deletion request is saved locally; reconnect and use Retry deletion to complete it. Preferences and the installation key are retained so the request can be authorized. Removing the app alone does not delete synchronized server progress. Deletion removes the active database record; SQLite storage files, infrastructure logs or existing provider/device backups may retain residual copies until their normal lifecycle completes. The service does not use backup copies to restore a deleted record automatically. Without the installation key, a server record cannot be reliably identified or accessed by the app.

Permissions and your choices

Notifications are optional. Permission is requested only when you explicitly enable Daily reminder in Settings, and reminders are scheduled locally for 6 PM in device time. Turn the reminder off to cancel pending reminders, or withdraw notification permission in iPhone Settings. The app does not request location, contacts, camera, microphone, photos or tracking access and does not embed geographic maps. Disable Sync progress to stop progress uploads; Daily Catch still makes an authenticated request when you choose to play the daily puzzle. All campaign levels remain playable offline.

Your privacy rights

You can view your caught fish and progress in the app, disable synchronization, withdraw notification permission and request deletion using Settings. Depending on where you live, you may have rights to access, correct, delete or restrict processing of your personal information and complain to a relevant supervisory authority. For privacy questions or requests, contact icloud.v61@gmail.com. This address is a public privacy contact only; the app does not send emails. Do not send your installation secret by email. Because no account or email identity is collected, assistance may require a way to identify a request without exposing another installation's data, and recovery after key loss cannot be guaranteed.

Security

The client uses HTTPS and stores its random installation secret in the device-only Keychain. Server authorization checks the secret for every private API request, uses a hash rather than storing the raw secret, and isolates database records by that hash. The server validates request data, limits request size and rate, and avoids logging secret headers or progress bodies. Local progress uses the iPhone's application storage protections. Anyone with the installation secret could authorize requests for that installation, so keep the device and key secure. No method of storage or transmission provides an absolute security guarantee.

Children’s privacy

Best Fishing Catch is designed for players aged 14 and older. It does not intentionally request identifying information from children and has no chat, accounts, advertising or social features. If you believe a child has supplied personal information to the privacy contact or service, contact icloud.v61@gmail.com so the request can be assessed and appropriate action taken.

Changes to this policy

This policy describes the practices implemented as of its effective date. If the app's processing or hosting practices change, an updated policy will be published at this page with a revised effective date. You can open the current policy from Settings at any time. Material changes will be reflected in the app or its release information when appropriate.