Trust, Security & Privacy
This page is maintained by the Cyprus Sea Master team to answer common security and privacy questions about the app. It is editable project content, not an independent certification.
What the app stores
- Your account email and an optional display handle.
- Your favorite fishing spots (coordinates and labels you save).
- Catches you choose to share with the community (species, weight, spot name, photo).
- Crowdsourced clarity reports you submit.
Access control
- Authentication is required for all account features.
- Row-level security policies in the database scope every record to its owner.
- AI server functions require a valid session before reaching the AI gateway.
- Catch photos are stored in a private bucket and served via short-lived signed URLs.
Uploads
Photos are re-encoded through a canvas before upload to strip non-image payloads, and verified server-side by inspecting the file's magic bytes. Files that do not match a known raster image format are removed.
Platform & hosting
The app runs on Lovable Cloud (Supabase) for database, authentication, and storage. AI features are routed through the Lovable AI Gateway. Lovable platform capabilities are used as-is; this app is not independently certified by Lovable.
Data deletion
You can remove your catches and clarity reports from inside the app. To delete your account and all associated data, contact the maintainer.