Privacy Policy
This is how we handle your information. Plain English. The Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) apply.
1. Who we are
Reedy's Rigs Tackle Pty Ltd (ABN 86 688 571 913), the operator of BayCast. Contact: [email protected].
2. What we collect
| What | When | Why |
|---|---|---|
| Email address | Sign-up | Account login, billing, customer support |
| First name, last name | Sign-up | Personalising the app, showing on community posts you choose to share |
| Password (hashed) | Sign-up | Authenticating you |
| Catch photos | When you upload one | Storing your catches in your diary, optional sharing to feed |
| Photo metadata (EXIF, including any GPS coordinates inside the photo) | When you upload a photo | Verification of the 24-hour rule for the report feed |
| Map marks (latitude, longitude, name, notes) | When you save a mark | Syncing across your devices |
| Subscription / payment data | When you subscribe | Stripe handles all payment data — we never see your card |
| Device info, IP, app version, basic logs | Automatically | Diagnosing crashes, fixing bugs, security |
3. What we do NOT collect
- Real-time location of your phone (we never track your location)
- Contacts, microphone, photos other than ones you upload
- Browsing data outside BayCast
- Anything you don't give us
4. Where it lives, and overseas transfer disclosure (APP 8)
- Supabase (database hosting) — your account, marks, photos, catches. Servers operate in the EU and/or USA.
- Stripe (payment processing) — your card and billing info. Servers operate in the USA.
- Hostinger (web hosting) — the website itself. Servers operate in Europe.
- Cloudflare (CDN, security) — request routing, DDoS protection. Global network.
By using BayCast you consent to your information being transferred to and stored on servers located outside Australia, including in the European Union and the United States, for the purposes set out above. We take reasonable steps to ensure these providers protect your data to standards comparable with the Australian Privacy Principles.
We do not sell your data to anyone. We do not share it with advertisers. We do not have advertisers.
5. Cookies and similar technologies
BayCast uses a small number of essential cookies and local-storage entries to keep you logged in, remember your preferences, and run the service. We do not use third-party advertising cookies. We do not track you across other websites. The Stripe checkout page may set its own cookies as part of payment processing — those are governed by Stripe's privacy policy.
6. Data breach response
We take security seriously. In the unlikely event of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth). Notifications will describe what happened, what data was affected, and what you can do to protect yourself.
7. Your rights
You can, at any time:
- See your data — email us, we'll send you a copy
- Correct your data — change name, email, etc. inside the app
- Delete your data — delete your account from Settings; this wipes your account, your marks, your photos, your catches from our systems within 30 days. Backups age out within 90 days.
- Object to processing — email us
- Lodge a complaint — with us first; if unresolved, with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au
8. Children
Free use: 16+. Paid subscription: 18+. We don't knowingly collect data from anyone younger.
9. Changes
We can update this policy. Material changes affecting paid users get 30 days' in-app notice (see Terms §9).
10. Contact
Reedy's Rigs Tackle Pty Ltd
ABN 86 688 571 913
Victoria, Australia
Email: [email protected]