Privacy Policy

Who we are

BankIQ is a carp fishing forecast service operated by Nova Iter Limited, UK, available at bankiq.app and as an iOS app on the App Store. This policy covers both. You can reach us at support@bankiq.app.

What data we collect

• Account data — email address and encrypted password when you register, or your name/email via Sign in with Apple if you use that option in the iOS app
• Catch log data — fishing sessions, locations, fish weights, tactics, bait, and conditions you enter voluntarily, including any photos you attach to a catch log entry
• Location data — the iOS app requests precise location (with your permission) to show forecasts for where you are. Location is only read while you use the app and is never collected in the background
• Payment data — on the web, payment is handled by Stripe; we store only a Stripe customer ID and subscription status, no card numbers. In the iOS app, Premium purchases go through Apple's In-App Purchase system via RevenueCat, which shares purchase/subscription status with us — we never see your Apple ID payment details
• Usage data — on the web, anonymous analytics via PostHog, only after you accept our cookie banner (see "Cookies" below)

How we use your data

• To provide the service — generating forecasts, storing your catch log and photos
• To manage your subscription and send billing-related emails via Stripe or Apple, depending on how you subscribed
• To send transactional emails (email confirmation, password reset) via Supabase
• To understand aggregate usage patterns and improve the app, where you've consented to analytics

We do not sell your data. We do not use it for advertising.

Third-party services

• Supabase — database, authentication, and photo storage (EU data centre)
• Stripe — payment processing for web subscriptions
• Apple / RevenueCat — In-App Purchase processing and subscription management for the iOS app, and Sign in with Apple authentication
• Open-Meteo — weather forecast data (no personal data shared)
• Google Maps Platform — location search results (place names, postcodes). Your search text is sent to Google to find matching places; no account data is shared
• OpenStreetMap / Nominatim — fallback location search when Google returns no results (search queries only, no account data shared)
• PostHog — privacy-focused product analytics on the web app, only active after you accept cookies (EU data centre)
• Vercel — hosting

Data retention

Your account and catch log data is retained for as long as your account is active. If you delete your account, your data is removed within 30 days. You can request deletion at any time by emailing support@bankiq.app.

Your rights (UK GDPR)

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Lodge a complaint with the ICO at ico.org.uk

To exercise any of these rights, email support@bankiq.app.

Cookies

BankIQ uses a single session cookie to keep you logged in (set by Supabase Auth). Our analytics tool, PostHog, does not run until you accept the cookie banner shown on your first visit — you can decline and continue using the site normally. The iOS app does not use cookies; it uses similar on-device storage (Keychain) to keep you signed in. We do not use advertising or tracking cookies.

Changes to this policy

If we make material changes we will update the date at the top of this page. Continued use of BankIQ after changes constitutes acceptance.