Privacy policy

Last updated: 13 October 2026

This policy explains what data Barbel (the app and the barbel.app website) uses, where it stays and who receives it. In short: without an account your diary, catches and spots stay on your phone. If you create an account and sync, a copy goes to an online store in Europe that only your account can read.

1. Who is responsible

The data controller is Diego Carlo Cassini, sole trader (foreign natural person) based at Sadová 59, 252 28 Černošice, Czech Republic, company ID (IČO) 08129894. For any request about your data write to hello@barbel.app.

2. What stays on your phone

Barbel works without an account. This data is created and stored on your phone:

• diary, trips, sessions and catches (species, sizes, weight, bait, notes, photos);
• your points on the map, favourite waters, tackle and checklist;
• the GPS track of roaming sessions and the weather recorded during sessions;
• settings, profile photo and details, statistics and achievements.

If you uninstall the app or clear its data, this data is deleted. Until you create an account and sync, Barbel does not hold a copy.

3. Location

The app uses your phone's location, only if you allow it, to show you on the map, record a session's route, find nearby waters and show the weather there. Your real-time location is not sent to Barbel.

To show weather and forecasts, the app sends an external weather service the rounded coordinates of the chosen place (not your name or other data). You can deny the location permission in your phone's settings: the app still works, with fewer features.

4. External services the app contacts

To work, the app connects to these services. Each of them, like any website, necessarily receives your IP address and the technical details of the request:

• Open-Meteo: weather forecasts and historical data, using rounded coordinates of the place;
• ČHMÚ (Czech hydrological service): water levels and flows;
• NOAA Space Weather Prediction Center: geomagnetic activity index;
• OpenStreetMap: map tiles, based on the area you view;
• unpkg.com: the library that draws the map;
• Cloudflare (dati.barbel.app): the images and packs you download in the app (languages, waters with their rules, species photos);
• Google ML Kit: automatic text translation, which runs on your phone; the first time, the app downloads language dictionaries from Google.

The services used for the account (Supabase, Resend, Cloudflare Turnstile) are described in the following sections. These services have their own policies. Barbel does not sell your data and uses no advertising or ad-tracking tools.

5. Account (optional)

You can use Barbel without an account. If you create one, to set it up and run it we process:

• the email address and username you choose (the username identifies your profile and is not visible to other users);
• the password: it is held in protected form by the sign-in service provider, we cannot see or read it;
• the profile details you enter: country, a short description, the expiry date of your fishing licence (not its number) and your photo.

Your email address is confirmed with a code we send from noreply@barbel.app; the same happens if you forget your password. Sign-in with Google and Apple may come in the future.

The account and sync store is hosted by Supabase, in Europe. Sending the messages with the codes is handled by Resend, which receives your email address and the message text.

You can sign out whenever you like and delete the account from the app (Profile): the account, the syncs and the photos saved online disappear.

6. Sync and backup

When you tap "Sync" or "Backup" in the app, or if you turn on automatic backup (once a day, on Wi-Fi), a copy of your data is saved to your online space: diary, trips, sessions, catches, GPS tracks, points, tackle, settings, profile, statistics and photos. Photos on the server are reduced (1600 pixels on the long side): the originals stay on your phone.

How many copies we keep and how much photo space you have depends on the plan: the basic plan keeps the latest copy, Barbel Pro more copies and more space. If your photos exceed the space, your data is still saved and the extra photos stay only on the phone.

Data travels over an encrypted connection (HTTPS) and is protected by access rules: only your account can read your space. The controller may access the store only for technical or support needs, and does not use it for any other purpose.

From the Profile you can also download a copy of all your data as a file.

7. The barbel.app website and the user area

The website uses no advertising cookies and no analytics tools that follow you. In your browser it keeps only what is needed for it to work: the theme (light or dark), the language and, if you sign in, the session, so you do not have to sign in on every page.

The user area shows, read-only, the data of your account's latest sync. Photos open through temporary links valid for about an hour. To work, the pages load fonts from Google Fonts, libraries from unpkg.com and jsDelivr (map and the connection to the sign-in service), map tiles from OpenStreetMap and the anti-abuse check from Cloudflare: each of these services receives your IP address and the technical details of the request.

8. Anti-abuse check

To protect sign-in, account creation and password recovery from automated programs, the app and the website use Cloudflare Turnstile. The service analyses technical signals of your browser or phone (such as the IP address) to tell a person from a program, without asking you to solve puzzles in normal cases. We do this for the security of the service.

9. Community

The community will arrive with later updates. If you use it, what you choose to publish (text, photos, places) will be visible to other users according to the settings you choose. You will be able to report and block a content item or a user; content that breaks the rules may be removed. We never publish your private data ourselves: a point stays private until you share it.

10. Purchases

Barbel Pro and paid maps are bought through the App Store or Google Play. Barbel does not see or keep your card or payment details. Purchases stay tied to your Apple or Google account and are not deleted if you delete the Barbel account; subscriptions are cancelled in the store. To check which purchases you made we receive, from a purchase-management service, a confirmation of the entitlement, linked to an identifier (that of your Barbel account, if you have one).

11. Notifications

Trip reminders and alerts about weather and water level are notifications generated on your phone. You can turn them off in your phone's settings.

12. Technical logs

The providers that run Barbel's services (for example the file server and the sign-in service) keep technical logs of requests, such as IP address, date and requested file, for security and to see whether the service works. We do not use them to profile you.

13. Why we process data

• to provide the app, your account and the features you use (performance of the service you asked for);
• to use location, camera, gallery and notifications, only if you grant permission on your phone (consent);
• to keep the service secure and working and to prevent abuse (legitimate interest).

14. How long

Data on your phone stays as long as you keep it. Account and sync data stay until you delete them or delete the account; after deletion they are removed from our storage within a reasonable time, and any technical copies kept by the provider expire shortly after. Providers' technical logs are kept for the time needed for security, normally a few months.

15. Your rights

Under the EU General Data Protection Regulation (GDPR) you can ask to access, correct or delete your data, restrict its use, receive it in a readable format and object to processing. Many things you can do yourself in the app: edit your profile, download your data and delete the account. For the rest write to hello@barbel.app. You can also complain to the data protection authority in your country; for the controller, in the Czech Republic, it is the Úřad pro ochranu osobních údajů (uoou.cz).

16. Children

Barbel is not intended for children under 16 without the consent of a parent or guardian.

17. Where data is processed

Online account and sync data are hosted in Europe. Some external providers are based or have infrastructure outside the European Economic Area (for example in the United States); in that case we rely on the safeguards provided by law for data transfers.

18. Security

The connections of the app and the website to our services use HTTPS. Access to the online stores is protected by rules that limit reading to your account. No system is one hundred percent secure: choose a long password, do not share it and do not reuse it on other services.

19. Changes to this policy

We may update it when Barbel's features change. The current version is always at barbel.app/privacy; for important changes we also tell you in the app.

20. Contact

For any privacy question: hello@barbel.app.