Privacy Policy - Fish Identifier

Effective date: June 3, 2026
Developer: Mustapha Marir - solo developer based in Morocco
Contact: marirfam@gmail.com
App package: com.marirfam.fishid

This document explains what Fish Identifier collects, what it does not collect, why data is processed, and which third parties are involved.

1. What Fish Identifier does not collect

No account data. The app has no sign-up or login flow.
No personal profile data. We do not ask for your name, address, phone number, age, or contacts.
No precise location. The app does not request location permission.
No cloud sync of your collection. Saved fish identifications stay on your device.
No sale of personal data. We do not sell user data.

2. What Fish Identifier does process

a) Fish scan images

When you use the scan feature:

The image is prepared on your phone.
It is sent over HTTPS to our backend proxy at https://fish-id-worker.marirfam.workers.dev.
The proxy verifies app integrity and forwards the image to Google’s Gemini API for fish identification.
The identification result returns to your phone.

We process this only to provide the identification result you requested.

We do not intentionally store scan images in our own database.

b) Play Integrity attestation

To reduce abuse, the app uses Google Play Integrity when sending scan requests. A Play Integrity token is sent with the scan request so the backend can verify the app installation is genuine.

c) Local collection storage

If you save a result to your collection, that saved entry is stored locally on your device using an on-device database. This local data can include:

fish name
classification
family
region or habitat label
confidence
saved image path
saved date

This local collection is not uploaded to our servers.

d) Crash and diagnostics reporting

We use Sentry to receive crash and error diagnostics so we can improve app stability. This may include:

stack traces
app version
device model
operating system version

Sentry privacy policy: https://sentry.io/privacy/

e) Advertising

The app shows ads using Google AdMob. AdMob may process device-level identifiers and ad-performance signals, including the Android Advertising ID, according to Google’s policies.

Google Ads policy: https://policies.google.com/technologies/ads

f) Firebase Remote Config

We use Firebase Remote Config to adjust certain app behavior remotely, such as ad settings or emergency configuration changes, without requiring a full app update.

Firebase privacy information: https://firebase.google.com/support/privacy

3. Children

Fish Identifier is not directed to children under 13. We do not knowingly collect personal data from children.

4. Your choices

You can stop all app-related processing by uninstalling the app.
You can delete your saved local collection by clearing app data or uninstalling the app.
You can reset your Android Advertising ID from Android privacy settings.
In supported regions, you can review ad privacy choices through the app’s Privacy preferences setting.

5. Legal basis and service providers

Depending on your region, data is processed under one or more of the following bases:

Contractual necessity - to return the identification result when you request a scan
Legitimate interest - to protect the service from abuse and maintain app reliability
Consent - where required for advertising personalization choices

Third-party processors may include:

Cloudflare - request handling and backend delivery
Google Gemini API - AI-based fish identification
Google Play Integrity - app authenticity verification
Google Firebase Remote Config - runtime configuration
Google AdMob - ad serving and measurement
Sentry - crash reporting

6. Security

Data sent between the app and backend services is transmitted over HTTPS.

7. Changes to this policy

If this policy changes materially, we will update this page and revise the effective date shown at the top.

8. Contact

For privacy questions or requests, contact:

Email: marirfam@gmail.com
Subject line: please include “Fish Identifier privacy”

Fish Identifier is built and supported by one developer.