My Koi Pond is an Android app made by an individual, not a company. This describes everything it stores and everywhere it sends anything. There are no advertisements, no analytics, and nothing is sold or shared for marketing.
On the phone, by default
Without an account the app keeps everything on the device: your fish, their photographs, water tests, filter stages, feeding history and the pond's location. Nothing is uploaded, and deleting the app deletes all of it.
The pond's coordinates never leave the phone except to fetch a weather forecast, described below. There is nowhere to store them in the online database, deliberately.
If you sign in
An account is optional, and it exists so the same pond can be used on more than one device and survive a lost phone. Signing in uses Google. From that, the app receives your email address and the account identifier Google issues for this app.
With an account, your pond records and photographs are stored on Supabase, which hosts the database and the photo storage. Each row and each photograph is tied to your account, and the database is configured so that one account cannot read another's. Photographs are fetched through links that expire.
What is sent elsewhere, and when
- Weather. The pond's latitude and longitude are sent to Open-Meteo to get the forecast for that spot. They need no account and no key. The coordinates are not stored anywhere online by this app.
- Identifying a fish. Only if you ask for it: the photograph is sent, through this app's own server function, to Google's Gemini service, which returns a suggestion of variety and markings. Google processes the image to answer; see Google's privacy policy. If you never use that feature, no photograph is sent to Google.
- Sign-in. Handled by Google and Supabase between them. The app never sees or stores a Google password.
- Crash reporting. Built in but switched off in current builds. If it is ever turned on it is configured to send no personal data, and to strip access tokens and any coordinates before anything is sent.
Deleting your account
The app has a delete option in Account. It removes the account itself, every database row belonging to it, and every photograph stored for it. It cannot be undone, and it does not touch what is on the phone — deleting the app does that.
One honest caveat: encrypted backups of the database and photo storage are kept so the pond can be recovered after a failure. Deleted data can remain inside those backups for up to 90 days, after which they expire. The backups are encrypted and are not used for anything else.
Children
The app is not directed at children and collects nothing intended to identify them.
Changes, and getting in touch
If this policy changes, the date at the top changes with it. Questions, or a request to see or delete what is held: open an issue on GitHub. An issue is public, so for anything about your own data write only that much and you will get a private way to carry on.