Privacy Policy
1. Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
OnlineFishingCoach UG (haftungsbeschränkt)
Raiffeisenstraße 19
56753 Welling
Germany
Email: kontakt@onlinefishingcoach.de
2. Principles of Our Data Processing
We follow the principle of "Privacy by Design" and process as little personal data as possible:
- No registration or user account required
- Catch data, markers and settings are stored exclusively on the user's local device
- No tracking cookies, no profiling, no advertising
- AI requests are pseudonymised and routed through a dedicated proxy server
3. What Data Is Processed?
3.1 Website (hookiq.app)
When you visit our website, the hosting provider (ALL-INKL.COM) automatically collects the following data in server log files:
- IP address (anonymised)
- Date and time of access
- Page visited / URL
- Amount of data transferred
- Browser type and version
- Operating system
- Referrer URL
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing and securing the website).
3.2 Apps — Locally Stored Data
The following data is stored exclusively on the user's local device and is not transmitted to our servers:
- Catch entries (photos, weight, length, fish species, date, time, lure, notes)
- Water markers and hotspots
- App settings and preferences
- Favourite waters
3.3 Location Data (GPS)
The app uses GPS data to provide location-based features (e.g. water map, weather, tides). Location data is only processed locally and is not transmitted to our servers. Location sharing can be revoked at any time in the device settings.
3.4 AI-Powered Catch Analysis
For the AI catch analysis, catch data is pseudonymised and transmitted via a proxy server operated by the provider to Google Gemini (Google Ireland Limited). No directly identifying data (name, device ID, precise GPS location) is shared with Google. For the text-based catch analysis, the following data is transmitted:
- Fish species, weight, length
- Lure and method
- Date and time
- General weather data at the time of the catch
For the AI image recognition (fish recognition, tackle box and water analysis), the photo taken or selected by the user is additionally transmitted in pseudonymised form via the proxy to Google Gemini, where it is processed exclusively for the immediate analysis. The image is not stored permanently by the provider.
Legal basis: Art. 6(1)(b) GDPR (performance of contract) or Art. 6(1)(a) GDPR (consent, insofar as the user actively triggers the function).
3.5 Weather and Environmental Data
The app retrieves weather, water level and environmental data from the following third-party providers. Only the requested location (coordinates) is transmitted:
- Open-Meteo (weather, tides) — open source, no API key required
- PEGELONLINE / Wasserstraßen- und Schifffahrtsverwaltung des Bundes (water levels, Germany)
- Rijkswaterstaat (water levels, Netherlands)
- Hub'Eau / EauFrance (water levels, France)
- VMM — Vlaamse Milieumaatschappij (water levels, Belgium/Flanders)
- Environment Agency UK (water levels, United Kingdom)
- Stormglass (marine weather data, tides)
3.6 Ship Tracking (AIS)
The app displays AIS ship positions on the map. For this purpose, data is retrieved from an AIS data provider. Only the map coordinates of the current map view are transmitted.
3.7 Subscription and Payment
Subscriptions and payments are processed exclusively through the Apple App Store or the Google Play Store. The provider has no access to payment data (credit card numbers, bank details). We only receive a confirmation of the subscription status from the store operator.
3.8 Crash and Error Analysis ("Sentry")
To ensure the stability of our apps and to fix technical errors, we use the service Sentry, provided by Functional Software, Inc. (45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA). We operate Sentry in the EU region (hosted via de.sentry.io); processing therefore takes place on servers within the European Union.
If a crash or technical error occurs in the app, error reports are automatically transmitted to Sentry. These include in particular crash and error logs (e.g. stack trace, affected program component), device and diagnostic data (e.g. device model, operating system and version, app version) as well as the IP address (for technical transmission reasons).
We do not transmit any names, email addresses or comparable direct identifiers. Location data (GPS) is technically removed before transmission. The error analysis is carried out on a pseudonymous, purely technical basis.
Purpose: Detection, analysis and correction of errors and crashes as well as improving the stability, security and performance of our apps.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a stable and error-free application).
Data processing agreement: A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
Storage period: Error reports are only stored for as long as necessary for error analysis (by default a maximum of 90 days) and are then automatically deleted.
Further information on data protection at Sentry: https://sentry.io/privacy/
3.9 Push Notifications
If you activate push notifications (e.g. for water level or temperature alerts), we process a device-specific push token in order to be able to send you the corresponding notifications. For the technical delivery we use the Expo Push Notification Service (650 Industries, Inc., USA); the delivery itself takes place at the operating-system level via Apple (Apple Push Notification service) or Google (Firebase Cloud Messaging).
Purpose: Sending the notifications and alerts you have configured.
Legal basis: Art. 6(1)(a) GDPR (consent through activation) or Art. 6(1)(f) GDPR. You can deactivate push notifications at any time in the app or device settings.
4. Cookies and Consent on the Website
The website hookiq.app uses technically necessary cookies that are required for its operation and do not require consent (§ 25 (2) TTDSG). The apps do not use cookies.
In addition, we use statistics and marketing services on the website. Marketing services (Meta Pixel, Google Ads) are loaded exclusively after your explicit consent via our cookie banner. For statistics (Google Analytics 4) we use Google Consent Mode v2: without consent, no cookies are set and no personal data is stored; only anonymous, cookieless signals are transmitted. You can withdraw or adjust your consent at any time with effect for the future via the "Cookie settings" link in the footer. The legal basis is Art. 6(1)(a) GDPR (consent) in conjunction with § 25 (1) TTDSG.
4.1 Statistics — Google Analytics 4
For reach and usage analysis we use, subject to your consent, Google Analytics 4, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Pseudonymous usage data is processed (e.g. pages visited, clicks, time on page, approximate location based on the truncated IP address, device and browser). The IP address is truncated (IP anonymisation). We use Google Consent Mode v2: without consent no analytics cookies are set and no personal data is stored; only anonymous, cookieless signals are transmitted to Google for statistical modelling. Full measurement with cookies only takes place after your consent.
Purpose: analysis and improvement of our offering. Legal basis: Art. 6(1)(a) GDPR. Storage period: until withdrawal or according to the Google settings (by default a maximum of 14 months).
4.2 Marketing — Meta Pixel and Google Ads
Subject to your consent, we use marketing technologies to measure the effectiveness of our advertising and to show you relevant ads (retargeting):
- Meta Pixel (Meta Platforms Ireland Limited) — for advertising on Facebook and Instagram
- Google Ads (Google Ireland Limited) — for conversion tracking and advertising in the Google network
Pseudonymous usage and device data as well as cookie IDs may be processed in this context. Purpose: reach measurement, conversion tracking and personalised advertising. Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via the cookie settings.
5. Disclosure of Data to Third Parties
Personal data is only disclosed to third parties if:
- this is necessary for the performance of the contract (Art. 6(1)(b) GDPR)
- there is a legal obligation to do so (Art. 6(1)(c) GDPR)
- there is a legitimate interest (Art. 6(1)(f) GDPR)
Data processors:
- ALL-INKL.COM — web hosting (server log files)
- Google Ireland Limited — AI analysis via Google Gemini (pseudonymised)
- Google Ireland Limited — web analytics (Google Analytics 4) and advertising (Google Ads), only after consent
- Meta Platforms Ireland Limited — marketing (Meta Pixel), only after consent
- Functional Software, Inc. (Sentry) — crash and error analysis (EU hosting, pseudonymised)
- 650 Industries, Inc. (Expo) — delivery of push notifications
- Apple Inc. / Google LLC — subscription management and payment processing
6. Data Transfer to Third Countries
For the AI catch analysis, pseudonymised data is transmitted to Google Gemini. Google may process data in the USA. The transfer is based on the EU-US Data Privacy Framework (adequacy decision of the EU Commission) and the Standard Contractual Clauses (SCCs).
When push notifications are enabled, the device-specific push token is transmitted for technical delivery to the Expo Push Notification Service (650 Industries, Inc.) as well as to Apple or Google; processing in the USA may occur in this context. The transfer takes place on the basis of the EU-US Data Privacy Framework and the Standard Contractual Clauses (SCCs). The crash and error analysis (Sentry), by contrast, takes place on servers within the EU; no third-country transfer occurs here.
If you have consented to statistics and marketing, data may be transmitted to Google LLC or Meta Platforms, Inc. in the USA via Google Analytics 4, Google Ads and the Meta Pixel. This is based on the EU-US Data Privacy Framework and the Standard Contractual Clauses (SCCs). Without your consent, no such transfer takes place.
7. Data Retention
- Locally stored app data: until deleted by the user
- Server log files of the website: maximum 30 days
- Subscription data: in accordance with statutory retention periods (up to 10 years under commercial and tax law)
8. Your Rights
You have the following rights under the GDPR:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
To exercise your rights, please contact: kontakt@onlinefishingcoach.de
9. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Postfach 30 40
55020 Mainz
Website: https://www.datenschutz.rlp.de
10. Notes on Data Sources
The app uses publicly available data sources. We thank the following organisations for providing them:
- Open-Meteo — open-source weather API
- PEGELONLINE — hydrological information system of the Wasserstraßen- und Schifffahrtsverwaltung des Bundes (German Federal Waterways and Shipping Administration)
- Rijkswaterstaat — Ministry of Infrastructure and Water Management, Netherlands
- Hub'Eau / EauFrance — French water information system
- VMM — Vlaamse Milieumaatschappij, Belgium
- Environment Agency — United Kingdom
- Stormglass — marine weather and tidal data
11. Changes to This Privacy Policy
We reserve the right to amend this privacy policy as necessary to reflect changes in the legal situation or changes to our service. The current version can always be found on our website.
Last updated: March 2026