Legal & Privacy

Privacy Policy

Your privacy matters to us. This Privacy Policy describes how Tacklbox collects, uses, and shares information about you when you use our mobile application and services.

Last Updated

June 9, 2026

1. Information We Collect

In Plain English

We collect account credentials you provide directly, location details you share with your permission, automatic usage metrics, and analytics info via Firebase.

  • Name & email address (when you create your account).
  • Hashed password (we never see or store your plaintext password).
  • Community content — photos, reviews, comments, and other posts you share publicly.
  • Location data — with permission, device coordinates to power forecast suggestions and catch maps (can be revoked anytime).
  • Usage metrics — pages visited, features used, session duration, and click pathways.
  • Device identifiers — device type, OS version, app version, and mobile advertising IDs (Apple IDFA / Google Ad ID).
  • Crash and diagnostics data — error logs and reports to help fix performance issues.

2. How We Use Your Information

In Plain English

We use your data to power forecast bite scores, customize mapping coordinates, troubleshoot crashes, and enforce our terms of service.

  • Create and manage user accounts and credentials.
  • Deliver local fishing forecasts, bite scores, and species suggestions.
  • Provide location-based mapping (when permissions are granted).
  • Send verification codes, security updates, and transaction notices.
  • Identify and repair application crashes and memory leaks.
  • Enforce compliance and protect the safety of our users.

3. Sharing & Disclosure

In Plain English

We never sell your personal data. We only share it with trusted vendors (like database hosting), law enforcement when required, or during mergers.

  • Service Providers: Cloud hosting, database systems, analytics tools, and support software bound by strict data policies.
  • Legal Compliance: Disclosing information under legal subpoenas, laws, or to protect the safety of users and the public.
  • Business Transfers: Safe transfer during mergers/acquisitions, with 14-day advance notification to let you delete your account.
  • Explicit Consent: Any other sharing requires your explicit approval.

4. Children's Privacy

In Plain English

We protect minors' safety, strictly comply with COPPA guidelines, and do not knowingly collect personal details from children under 13 without verifiable consent.

  • No knowingly collected data from children under 13 without verifiable parental consent.
  • Immediate deletion of unauthorized underage profiles upon parental request.
  • Parents/guardians hold full rights to inspect, correct, or request deletion of their children's data at any time.
  • Ages 13–17: We strongly encourage parental involvement and supervision.

5. Your Privacy Choices & Rights

In Plain English

You remain in complete control of your data. You can toggle locations, notifications, and reset ad-tracking, or delete your profile directly in settings.

  • Location Settings: Revoke precise location anytime in your system Settings without affecting the rest of the app.
  • Push Notifications: Toggle notifications in settings.
  • Ad Tracking: Reset or restrict IDFA/Ad ID tracking via system privacy panels.
  • Account Deletion: Initiate account and data deletion directly in Settings > Account. Requests are processed within 30 days.
  • California Residents (CCPA): Rights to know what data we collect, request deletion, opt-out of sales, and avoid discrimination.

6. Data Retention

In Plain English

We keep your personal info as long as your account is active, and erase personal data within 30 days of deletion unless legally required.

  • Active Accounts: Kept as long as your account is active to deliver our app services.
  • Usage Stats: Analytics data may be retained in aggregated or anonymized form indefinitely.
  • Account Deletion: Personal details are erased within 30 days, except where financial/legal audits require retention.

7. Data Security

In Plain English

Your data is protected using industry-standard protocols, including HTTPS/TLS encryption, salted password hashing, and restricted employee access.

  • TLS/HTTPS: All data in transit is encrypted using modern secure protocols.
  • Password Hashing: Passwords are encrypted before storage (plaintext is never stored or visible).
  • Access Control: Role-based internal controls limit data access to authorized personnel only.
  • Reporting: If you believe your account has been compromised, contact info@tackl.co.

8. Third-Party Links & Services

In Plain English

Tacklbox contains external links or integrations (such as Mapbox). Third-party practices are governed by their respective privacy terms.

  • External Integrations: The App may link to or integrate with external websites or API services.
  • Separate Policies: This policy does not cover external partners; review their policies independently.
  • No Liability: We are not responsible for the privacy practices of external platforms.

9. Changes to This Policy

In Plain English

We update this policy periodically. We will highlight the 'Last Updated' date. Material modifications are notified via in-app banner at least 14 days in advance.

  • Periodic Updates: We revise the policy and update the 'Last Updated' timestamp at the top.
  • 14-Day Notice: Prior notice for major, material changes affecting user rights.
  • Acceptance: Continued use of the App after updates constitutes acceptance of the new policy.

10. Contact Us

In Plain English

Have questions or want to exercise your privacy rights? Reach us directly at info@tackl.co. We reply within 24-48 hours.

  • Email support: info@tackl.co.
  • In-App: Go to Settings > Contact Support to reach our team.
  • Response time: We target a 24-48 hour response window for all inquiries.

Still Have Privacy Questions?

We are committed to resolving your queries quickly. Contact our data integrity coordinator.