Na rybach: Fishing Log
Privacy Policy
Effective 1 October 2026
- I don’t collect any data about you apart from e-mails you send me. Na rybach has no accounts, no server, no ads, no analytics of its own and no tracking.
- Your logbook, photos and spots are only on your iPhone or iPad.
- For the weather, the app connects straight to public services and sends them only an approximate place. It sends a spot’s exact area only when you download its aerial photo yourself.
- On Android the same, with two differences: the maps come from OpenFreeMap, and purchases from Google Play, whose library sends Google diagnostic data (the Android version).
Who is responsible for the app
Na rybach is made by Rafał Gorczyński, a private person in Poland:
Rafał Gorczyński, ul. Zielona 2, 72-300 Gryfice, Poland · rafal.gorczynski.dev@gmail.com
What stays on your iPhone or iPad
Everything you save in the app: trips, catches, photos, voice notes, spots with their points and parking, rules, the documents in the angler’s wallet, plans and settings, as well as downloaded forecasts and aerial photos. I have no access to them, and the app sends nothing from them except what is described below.
- Photos are saved without their location or other camera metadata. In “Catches from Photos” the app reads the date and place of the photo you pick, then drops the metadata.
- Location (if you allow it) is used to save where you caught a fish, fetch the weather, suggest the spot and remind you at a spot. The reminders work within the device, without a server.
- The camera, the microphone, the barometer (Motion & Fitness) and saving to Photos work only on the device: photos, measuring a fish, spot codes, voice notes, the pressure during a trip and cards saved to Photos.
- The app doesn’t sync the logbook with any cloud. If your iPhone’s or iPad’s backup is on (iCloud or a computer), the system may include Na rybach’s data in it: that’s a system setting.
- Backups, the CSV export, the catch register (PDF) and automatic backups go where you save them (e.g. Files or iCloud Drive), and that place’s rules apply there. You can encrypt backups with a password; the password is only in this device’s keychain.
Who the app connects to and what it sends
Only the services below, straight from your iPhone or iPad, with no server of mine in between. Like any internet connection, a request carries your connection’s IP address and the name and version of the app and the system; it carries no identifier of you or the device. The app keeps no cookies between connections.
MET Norway – the Norwegian Meteorological Institute (api.met.no)
- What for: the weather at a catch and at the start of a trip, “Today at the Water”, “When to Go” and other forecasts. Only while the app is open.
- What it gets: coordinates rounded to two decimal places (about 1 km), never a spot’s exact place.
- What it keeps: MET’s terms say the IP address and the coordinates of requests are stored in its logs in Oslo (Norway); MET’s privacy policy says it keeps IP addresses for up to 90 days.
MET’s terms · MET’s privacy policy
NASA POWER – NASA (USA)
- What for: archived weather for catches from about 3 days ago and older (also from old photos, from 2001), and filling in pressure changes.
- What it gets: only the centre of a cell of its grid (0.5° × 0.625°, about 55 × 43 km) and a range of dates.
- What it keeps: NASA’s privacy policy lists, among the information collected automatically, the IP address and the addresses of the pages visited, here the request’s address with the cell’s centre and the dates; raw logs are kept temporarily. The same policy says that in certain circumstances and consistent with US federal law, NASA may take additional steps to identify you using this information and may share it, including your identity, with other agencies.
Geoportal – the Polish Head Office of Geodesy and Cartography (GUGiK)
- What for: the spot’s aerial photo (orthophoto) for use without signal, for spots in Poland.
- When: only when you tap “Download Aerial Photo” (or download it again).
- What it gets: the exact area around the spot: a square at least 600 m across, covering the spot, its points and the parking.
- What it keeps: Geoportal’s privacy policy describes only its website’s cookies. The service sets technical cookies; the app discards them after each download.
Geoportal’s privacy policy (in Polish)
Apple Maps (Apple)
- The maps in the app are Apple’s (MapKit): to show them, Apple gets the area you’re looking at.
- “Directions” and “Directions to Parking” open the Maps app with the exact place as the destination.
- “Share an Apple Maps Link” makes a link with the spot’s exact place; whoever you send it to gets it.
App Store (Apple): Plus purchases
- Purchases, “Restore Purchases” and “Redeem Code” are handled by the App Store. I get no payment details and not your Apple Account. The app gets only Apple’s signed confirmations of what’s bought, kept on this device.
- Apple gives me aggregate statistics (e.g. the number of downloads and sales) and crash reports, the latter only from people who agreed in their iPhone’s or iPad’s settings to share them with app developers. Apple doesn’t tell me who you are in them.
IMGW-PIB: only when you tap “Check the water level”
- The button opens IMGW’s public map (hydro.imgw.pl) in Safari at the spot’s approximate place (two decimal places, about 1 km).
- The place is in the part of the address after “#”, which the browser doesn’t send to the server, but the page’s script reads it to show the map. The page uses Google Analytics.
- From then on, IMGW’s terms and privacy policy apply. The app takes no data from IMGW.
Other sites, and what you send yourself
- Links in the app (data sources, the guide, this page) open in Safari; those sites’ rules apply there.
- Catch, trip and season cards, spot files and QR codes, backups and plans added to the Calendar go only where you send or save them. The cards don’t show where a fish was caught.
The services above receive only the data described on this page and only to answer the app’s requests; they handle them under their own privacy policies, linked above.
E-mails to me and these pages
- I receive mail through Gmail (Google).
- These pages are on GitHub Pages: GitHub logs visitors’ IP addresses for security; the pages use no cookies or analytics.
Google’s privacy policy · GitHub Pages: data collection
Legal basis (GDPR)
- The connections described above (weather from MET Norway and NASA POWER, the aerial photo from GUGiK, Apple's maps) are needed for the features you use in the app: Article 6(1)(b) GDPR. The app sends only what they need, that is your connection’s IP address and a place: approximate for the weather, the area around the spot for the aerial photo, and the area you look at for the maps.
- NASA is in the United States. The request to NASA POWER, and with it the IP address and the centre of the grid cell, goes there because it is necessary to fetch the archived weather you ask for: Article 49(1)(b) GDPR. No European Commission adequacy decision covers this transfer. MET Norway (Norway) and GUGiK (Poland) are in the European Economic Area.
- If you write to me, I use your address and message to reply, based on legitimate interest: Article 6(1)(f) GDPR. I keep them no longer than needed to deal with the matter.
- Purchases are handled by Apple as a separate controller, under its own privacy policy, and on Android by Google (Google Play and its billing library).
- On Android the maps are OpenFreeMap’s (Hungary, in the European Economic Area): that connection is needed to show the map you ask for: Article 6(1)(b) GDPR.
- Providing data is voluntary: without these connections you can’t fetch the weather, aerial photos or maps; the rest of the app works. There is no automated decision-making or profiling.
What the app doesn’t do
- No ads, no analytics of its own and no tracking. The iPhone and iPad version has no other companies’ libraries (SDKs); the Android version has a few, described below.
- It doesn’t sell or pass your data to anyone, and doesn’t combine it with data from other apps or websites.
- It creates no account and doesn’t ask for your name, e-mail or phone number.
Children
The app collects no data from anyone, children included. A child’s purchase of Plus in Family Sharing may need a parent’s approval (“Ask to Buy”), and on Android in Family Link.
Your data and deleting it
I only have what you write to me by e-mail. You have the right to access, rectify, erase and restrict the processing of that data: write to rafal.gorczynski.dev@gmail.com.
You have the right to object at any time to the processing of your correspondence (Article 21 GDPR).
I don’t have the data in the app (logbook, spots, photos): it’s only on your iPhone or iPad.
- You delete entries in the app. Deleting the app from your iPhone or iPad deletes the logbook and everything the app saved on it. The system may keep the backup password in the keychain after the app is deleted: remove it first in Settings → Your Data → Backup Password.
- Backups and exports you made are deleted where you saved them.
- You can turn off access to location, the camera, the microphone and motion in the iPhone’s or iPad’s Settings; the app works without them too.
- For data in the logs of MET, NASA, GUGiK and Apple, ask them under their privacy policies.
The Android version
Na rybach for Android phones, from Google Play, works under the rules above, with the differences this section describes. Where the sections above mention an iPhone or iPad, read your phone.
What stays on the phone
- Your logbook, photos, voice notes, spots, wallet documents, plans and settings are only in the app’s storage on the phone. You pick photos in the system’s photo picker or take them with the phone’s camera; the app saves them without location or other metadata. In “Catches from Photos” it reads a photo’s date, and its place only if you let the picker share it.
- Permissions: location (precise or approximate, only while you use the app, never in the background), the microphone (voice notes), notifications, alarms and reminders (the recast sound) and starting after the phone is switched on (to set reminders again). The barometer needs no permission. What they give stays on the phone.
- Google’s backup: if the phone has a screen lock and Google’s backup is on, Android saves the app’s logbook and settings (without photos, voice notes and documents) to your Google Drive, end-to-end encrypted with the screen lock: I have no access to them. When the phone can’t encrypt it this way, the app stays out of that backup. Moving your data to a new phone (by cable or Wi-Fi) moves the photos too.
- Backups, CSV exports, catch registers (PDF) and automatic backups go where you save them (e.g. a folder on the phone, a memory card, Google Drive), and that place’s rules apply there. The backup password is only in Android’s key store on this phone.
Who the Android version connects to
MET Norway, NASA POWER and Geoportal (GUGiK), as described above: the same data, the weather only while the app is open, the aerial photo only when you download it yourself. Instead of Apple’s maps and the App Store:
OpenFreeMap: maps
- Why: the map of spots and catches (OpenFreeMap’s map with OpenStreetMap data, shown by the MapLibre Native library).
- What it gets: the map tiles of the area you look at, and in the request’s header the app’s name and version, MapLibre’s version, the Android version and the processor type; no identifier of you or the phone. Downloaded tiles stay on the phone so the map works without signal.
- What it keeps: according to OpenFreeMap’s privacy policy (Hyperknot Software Kft., Hungary) its regular server logs contain no IP addresses; it logs IP addresses only during an attack or misuse, for at most 30 days. OpenFreeMap may use Cloudflare as a CDN.
Google Play: Plus purchases
- Purchases, “Restore Purchases” and promo codes are handled by Google Play. I get no payment details and not your Google Account. The app gets Google Play’s confirmation of what’s bought and keeps it on the phone.
- The Google Play Billing library, which the app needs to sell anything on Google Play, sends Google its own diagnostic data about how it works: whether its requests succeeded and its connection problems with the Play Store, with technical data about the phone and system (e.g. model, Android version, language, country, network type). Google says it uses it to improve the library. This happens at every app start, with or without a purchase. The library uses Google Play services on the phone for it.
- Google gives me aggregate statistics (e.g. installs and sales) and, in Play Console, aggregate data on the app’s crashes, collected by Android from people who agreed to share diagnostic data. Google doesn’t tell me who you are.
Other apps and sites
- “Directions” and “Directions to Parking” open the phone’s maps app (e.g. Google Maps) with the exact destination; that app’s rules apply from there.
- “Share a Map Link” makes a link to the spot’s exact place on OpenStreetMap; whoever you send it to gets it.
- “Check the water level” and other links open in your browser, and “Manage Subscription” and “Redeem Code” in the Google Play Store; those sites’ rules apply there, as with IMGW above.
- The Quick Settings tile, the widget and the shortcuts on the icon only open the app; they send nothing.
Other developers’ libraries
The Android version is built with other developers’ libraries, among them Jetpack (Google), MapLibre Native and ZXing; Settings → Open-Source Licences lists them all with their licences. The only one that sends data by itself is the Google Play Billing library (above); MapLibre only loads OpenFreeMap’s map.
Google Play’s Data safety section
Google Play calls a location precise when it points to an area of less than 3 km². The coordinates rounded to about 1 km that MET Norway gets are therefore declared there as precise location, and NASA POWER’s grid-cell centre as approximate; both collected for the app’s functions, optionally (the app works without location), and shared with the services described above. The Google Play Billing library’s diagnostic data is declared there as “Diagnostics”.
Deleting data on Android
- Deleting the app deletes the logbook, photos, settings and the backup password from the phone. Delete Google’s backup in the phone’s Google backup settings or in Google Drive.
- Change the permissions in the phone’s settings: Apps → Na rybach → Permissions (the names depend on the phone).
- For data in OpenFreeMap’s and Google’s logs, ask them under their privacy policies.
Contact
Privacy questions: rafal.gorczynski.dev@gmail.com. If you write, your address and message are used only to reply. You also have the right to lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (uodo.gov.pl), or the one where you live.
Changes
If what the app sends changes, I will update this page before releasing such a version and change the date at the top. This version is effective from 1 October 2026 (the section on the Android version added).