Privacy Policy

Who this covers

KnownWater provides fishing intelligence and planning tools. This policy covers our website and private pilot for adults aged 18 and older.

Information you provide

We handle names, email addresses, account/provider identifiers, access roles, pilot requests and review records. A request includes your fishing frequency if provided, referral description, notes, age affirmation, legal document versions and acceptance time, and your separate optional product-email preference. Do not include sensitive personal information in free-text fields.

Trip and fishing features handle dates, launch locations, species, plans, conditions, observations, catches, feedback and notes. Guide records can include business details, agreements, proprietary patterns and internal review notes. Some older fishing-record features accept photo links; we do not promise that linked photos have had location metadata removed.

Precise location and fishing intelligence

Guide fishing sessions can record precise start/end locations and foreground GPS trails, including time, accuracy and, when available, speed and heading. Observations may use device location or a point you choose on a map. Offline records stay in browser storage until they can sync. Browser permission controls location access; ending a session or revoking permission stops further recording by that feature. Reopening an active session can resume its location watch.

We use trip, observation and location information to support fishing history, conditions lookup, review and derived fishing intelligence. Authorized guide and employee tools can access private source records. Customer plans use generalized areas and representative starting points rather than exposing raw guide trails. Public marketing previews use fictional example data.

The customer “Show my location” feature holds its live position in browser memory rather than uploading a trail. Map requests can nevertheless disclose the viewed area to tile providers, particularly when you center the map on yourself. Weather services may receive location-based lookup coordinates from the backend.

How information is used and handled by providers

Information supports authentication, pilot review and invitations, plan delivery, offline sync, product feedback, security and internal operations. Vercel serves the website; AWS services run the backend, database, authentication and operational logging. Cognito handles native sign-in and account emails; Google processes authentication if you choose it.

OpenStreetMap supplies standard map tiles and NOAA supplies nautical map layers and tide data. NWS supplies weather and alerts. Public map previews request tiles when visible, even without optional campaign cookies. These services receive ordinary request metadata, and map tiles identify the viewed geographic area. Fonts are served from the website.

An optional OpenAI integration, when enabled, processes sanitized fishing-note context and constrained plan-writing inputs. Sanitization is not a guarantee that free text contains no personal information. No payment-card checkout or promotional mailing engine is currently implemented.

Cookies and marketing choices

Necessary storage supports sessions, security, your cookie choice and requested offline features. With your optional-cookie permission, we record campaign visits, first/last campaign touch, a session identifier, referrer/browser metadata and related conversions. The signed attribution cookie lasts 30 days from its most recent permitted refresh. Rejecting it does not prevent a pilot request or sign-in. Global Privacy Control keeps optional tracking disabled. See Cookie Settings to change your choice.

Optional product updates and fishing news require a separate unchecked choice on the request form. Invitation, account and security messages do not depend on that choice. No promotional email is sent by this feature. Cookie withdrawal does not change email permission or delete previously recorded events.

Security and retention

Access controls separate customer, guide and employee data, and authentication uses provider-verified identities. No system is risk-free. Please protect your account and device, especially when saving trips offline.

There is no general automated deletion schedule for account, request, trip, GPS, review or marketing records today. Cookie expiry does not delete database records. Offline records and backups can persist separately.

Access, correction and deletion

Some authenticated features let you edit their records. We do not currently offer general self-service account deletion or a complete customer data export.

Adults only and policy changes

The private pilot is for people at least 18 years old. We do not offer child accounts or parental-consent onboarding. New public requests require an age affirmation. This is not age verification. Changes to this policy will be dated and versioned here; new pilot requests record the version presented when you accept.