← Back to OffshoreAI

Privacy Policy

Effective October 1, 2026

OffshoreAI (“we”, “us”) runs the website at offshoreai.fish and the OffshoreAI app. This policy explains what information we collect, why, who we share it with, how long we keep it, and the choices you have.

The short version

Information we collect

Your account

If you sign in, we collect your email address so we can send you a six-digit sign-in code. There is no password. We store the code only in scrambled (hashed) form, and it expires after 10 minutes. Your signed-in session is also stored only in hashed form, and lasts up to 90 days. If you ask for a code but do not finish signing in, we delete your email address within about two hours.

A device ID

The app creates a random ID on your device. We use it to keep your catch log in sync and to apply daily report limits. With it we record the kind of device (iPhone, Android or web) and when it was first and last used. It is not linked to your name or email unless you sign in.

Your catch log and trips

When you log a catch, we store what you enter (species, length, weight, whether it was released, and notes) and what the app records at that moment: your GPS position, water depth, sea surface temperature, chlorophyll, current, moon phase, the nearest named fishing spot, and a link to the report you were using. Trips record when they start and end.

Your location

The app uses your device’s location to show your position on the map and to record where a catch was made. Apart from the positions of catches you choose to log, we do not track or store your location. If there is no recent GPS fix when you log a catch, the app records the centre of the map instead and marks the catch as not from GPS.

AI report requests

When you request a report, we send the area and date you chose, the ocean data for that area, and up to your 40 most recent catches with the details above, including their positions. Your name and email address are not included. The request itself, with your catches, is deleted as soon as the report has been written. We keep the finished report on our servers for up to 7 days so you can reopen it, and then it is deleted automatically.

Your network address

To stop abuse of sign-in, such as someone sending codes to many inboxes, we count sign-in attempts per network. We store your IP address only as a keyed hash, and keep it for about an hour. Our hosting provider also processes IP addresses in order to deliver the site.

Usage counts

We count reports per device and per account each day to apply limits and control costs. These counts are kept for about two days.

On your device

The app stores some information on your device: your settings, your device ID, a copy of your catch log, catches waiting to upload when you have no signal, your recent reports, and a list of vessel names and types. OffshoreAI does not use cookies. Our hosting provider, Cloudflare, may set a security cookie to protect the site from automated abuse.

Vessel (AIS) data

The vessel layer shows AIS, the position and identity signals that ships and many boats broadcast publicly. We store recent vessel positions, vessel names and types, short track histories, and counts of where fishing and pleasure boats have worked. This information is about vessels that are broadcasting publicly. It is not about users of OffshoreAI, and your own location is never added to it.

Who we share information with

We share information only with service providers that run parts of OffshoreAI for us, and only what each one needs:

ProviderWhat it doesWhat it receives
CloudflareHosts the site and app and stores our dataEverything described in this policy, as our host
AnthropicWrites AI reports with its Claude modelThe report request described above; never your name or email
Our email providerDelivers sign-in codesYour email address and the code

When the map loads, your browser also contacts some map and data providers directly: Esri (the base map), NOAA (nautical charts, buoys, tides and satellite layers), NASA (satellite imagery), the Copernicus Marine Service (ocean layers), HYCOM (ocean currents), GEBCO (seafloor relief), Iowa State University (weather radar), Open-Meteo (weather and marine forecasts), Google Fonts (typefaces) and cdnjs (map software). As with any website request, they receive your IP address and the map area or point being requested. Their own privacy policies apply to that information.

We may also disclose information if the law requires it, or to protect the safety of our users or the public.

How long we keep information

InformationHow long
Catch log and tripsUntil you delete them or your account
A deleted catchIts details are erased at once. We keep only its ID and time, so your other devices know to remove it too.
Sign-in codes10 minutes
Your email address, if you ask for a code but do not finish signing inAbout two hours
Signed-in sessionsUp to 90 days, or until you sign out
Hashed network addressesAbout an hour
AI reportsUp to 7 days
A report that failed15 minutes
Vessel positions, tracks and activity countsA day, two days, and about a month

Your choices

Security

All connections to OffshoreAI are encrypted. Sign-in codes, sessions and network addresses are stored only in hashed form, and access to our systems is restricted. No method of storing or sending information is completely secure, but we work to protect yours.

Children

OffshoreAI is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, email us and we will delete it.

Where information is processed

Our service providers may process information in the United States and other countries.

Changes to this policy

If we change this policy, we will update the effective date above. If a change significantly affects how we use your information, we will tell you in the app before it takes effect.

Contact

Questions or requests: [email protected]