Privacy Policy
Last updated: 1 March 2026
Privacy at a Glance
The short version of how we handle your data.
Your catches are private by default
Location data is opt-in only
We never sell your data
Payments processed securely by Stripe
You can delete your account and all data anytime
We comply with US privacy laws (CCPA) and UK GDPR
Want the full details? Keep reading below.
1. Who We Are
GilledIt is operated by GilledIt Ltd, a company registered in England and Wales. We are the data controller for personal data collected through the GilledIt mobile app and website. We handle data for users in both the United Kingdom and the United States.
If you have any questions about this privacy policy or how we handle your data, you can contact us at privacy@gilledit.com.
2. What Data We Collect
2.1 Account Information
When you create a GilledIt account, we collect your name, email address, and profile information. If you sign up via Apple or Google, we receive only the information you choose to share.
2.2 Catch Data
When you log a catch, we store the species, weight, length, photos, bait, gear, notes, and timestamp you provide. Catches are private by default - only visible to you unless you choose to share them publicly.
2.3 Location Data
GilledIt only accesses your location when you choose to tag a catch or use the fishing map. We never track your location in the background. When you share a catch publicly, the location is displayed as a fuzzy radius (not an exact pin) to protect your spots.
2.4 Marketplace Data
If you buy or sell on the GilledIt marketplace, payment processing is handled by Stripe. We never see or store your full card details. We receive transaction amounts for fee calculation purposes only.
2.5 Device & Usage Data
We collect anonymized usage analytics to improve the app, including device type, operating system version, app version, and general usage patterns. This data cannot be used to identify you personally.
3. How We Use Your Data
We use your personal data to:
- Provide and maintain the GilledIt app and its features
- Store and display your catch log and profile information
- Enable social features such as the feed, challenges, and messaging
- Process marketplace transactions via Stripe
- Send you relevant notifications (which you can control in settings)
- Improve the app through anonymized usage analytics
- Respond to your support inquiries
We do not use your data for targeted advertising. We do not sell your personal data to third parties.
5. Your Rights
For All Users
Regardless of where you are located, you have the following rights:
- Right to access: request a copy of your personal data
- Right to rectification: ask us to correct inaccurate data
- Right to erasure: ask us to delete your data
- Right to data portability: receive your data in a machine-readable format
- Right to object: object to certain types of processing
- Right to restrict processing: ask us to limit how we use your data
Additional Rights for California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know: request details about the categories and specific pieces of personal information we have collected about you
- Right to delete: request deletion of your personal information
- Right to opt out of sale: we do not sell your personal information, but you have the right to direct us not to do so
- Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA rights
UK/EEA Users (UK GDPR)
Users in the United Kingdom and European Economic Area retain all rights under the UK General Data Protection Regulation (UK GDPR), including the rights listed above.
To exercise any of these rights, email us at privacy@gilledit.com. We will respond within 30 days.
If you are unsatisfied with our response: US residents may file a complaint with the Federal Trade Commission (FTC). UK residents may lodge a complaint with the Information Commissioner’s Office (ICO).
6. Data Retention
Your catch data is stored for as long as your account is active, unless you choose to delete individual catches.
If you delete your account, all personal data, including your catches, profile, and marketplace history, will be permanently removed from our systems within 30 days. Anonymized, aggregated data (such as total catches per species) may be retained for statistical purposes.
8. Children’s Privacy
GilledIt is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us at privacy@gilledit.com and we will delete it promptly.
9. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes through the app or by email. The “Last updated” date at the top of this page will always reflect the most recent revision.
10. Contact Us About Your Data
If you have any questions about this privacy policy or want to exercise your data rights, contact us:
- Email: privacy@gilledit.com
- General inquiries: Contact page
- Help & support: Help Center