Who else handles your information

To run LureMark we rely on other companies — to store the database, send email, take payments, identify fish and fetch the weather. Australian privacy law calls them our sub-processors, and requires us to tell you who they are and where they hold your information.

This is the complete list: 23 providers, of which 18 receive something about you. The rest are listed too, so that “they get nothing about you” is a claim you can check rather than take on trust.

We keep your data in Australia where we can: the database and your photos are in Sydney, and the app is served from Sydney. Where a provider is overseas it is named below.

See also the Privacy Policy and data sources & credits.

The in-app assistant, fish identification, length estimates and the fishing forecast.

What they receive

What you type to the assistant, the photographs you submit for identification or measurement, and the catch details used to build a forecast.

Where

United States — as stated by the provider

Retention & deletion

Deleting your account removes your assistant history from our systems. Anthropic's own retention is the vendor's and is listed as an owner task in docs/SUBPROCESSORS.md.

In-app purchases on iOS, and push notifications to iPhones and iPads.

What they receive

A device push token, and purchase records for subscriptions bought on iOS.

Where

United States — as stated by the provider

Retention & deletion

Turning off notifications, or deleting your account, removes the device token from our systems.

Bot protection on sign-up (Turnstile), the off-site backup archive and the self-hosted map tiles (R2 + Workers).

What they receive

Turnstile receives browser and IP signals. The backup archive holds a copy of the database — encrypted before it leaves our systems — and a mirror of every photo, which is not yet encrypted.

Where

Backup bucket created with an Asia-Pacific location hint; Cloudflare, Inc. is US-based and serves from a global edge

Retention & deletion

Database dumps and the photo mirror are purged on a 90-day schedule; a deleted account's photos are removed from the mirror the following night (scripts/backup-purge.mjs).

Source control, and the machine that takes the nightly backup.

What they receive

A complete copy of the database passes through a temporary build machine every night. It is encrypted there, to a key the machine does not hold, and the machine is destroyed when the job finishes.

Where

United States; build machines in the United States or Europe — as stated by the provider

Retention & deletion

Nothing is retained on the build machine; it is discarded after each run.

In-app purchases on Android, push notifications to Android devices, and turn-by-turn navigation when you tap Navigate.

What they receive

A device push token, purchase records for subscriptions bought on Google Play, and — when you tap Navigate to a spot or boat ramp — that destination's coordinates, because the app hands them to Google Maps.

Where

United States — as stated by the provider

Retention & deletion

Turning off notifications, or deleting your account, removes the device token from our systems.

Optional satellite imagery on the map. Off unless a token is configured.

What they receive

The part of the map you are viewing, and your IP address, when the layer is switched on.

Where

United States — as stated by the provider

Retention & deletion

Nothing is stored with the vendor on our behalf.

Free satellite imagery layer.

What they receive

The part of the map you are viewing, and your IP address, when the layer is switched on.

Where

United States — as stated by the provider

Retention & deletion

Nothing is stored with the vendor on our behalf.

Weather, marine, river-flood and place-name lookups.

What they receive

The coordinates being looked up — again, a place you fish or are standing in.

Where

Germany (European Union) — as stated by the provider

Retention & deletion

Nothing is stored with the vendor on our behalf.

The source of the basemap. Downloaded once when the tile archive is built; the app then serves tiles from our own storage. OpenStreetMap's own tile server and Protomaps' font files are runtime fallbacks used only when our tile host is not configured.

What they receive

None in normal operation. If the fallback is ever used, the tile server sees your IP address and the part of the map you are looking at.

Where

Europe / global edge — as stated by the provider

Retention & deletion

No user data is sent.

Sends email — password resets, receipts and operational alerts.

What they receive

Your email address and the contents of the message sent to you.

Where

United States — as stated by the provider

Retention & deletion

Resend keeps delivery logs on its own terms.

Keeps track of Pro subscriptions bought through the Apple App Store or Google Play.

What they receive

An app-specific user identifier and your purchase history for this app.

Where

United States — as stated by the provider

Retention & deletion

Deleting your account deletes the RevenueCat subscriber record.

Reports crashes and errors so they can be fixed.

What they receive

Error details and the page it happened on. Configured to minimise personal information, but a message or URL captured in an error can still contain some. Runtime logs are NOT sent here: a Vercel log drain to Sentry was considered on 26 Sep 2026 and declined, because the stdout stream is not redacted and the organisation is US-hosted (see docs/INCIDENT-RESPONSE.md § 4).

Where

United States (organisation region `us`, verified 26 Sep 2026)

Retention & deletion

Sentry's own retention window; an owner task in docs/SUBPROCESSORS.md.

Takes card payments for Pro.

What they receive

Your email address, a customer reference, and the card details you enter — which are entered directly with Stripe and never reach us.

Where

United States and Ireland — as stated by the provider

Retention & deletion

Deleting your account cancels the subscription. Stripe keeps payment records as its own financial obligations require.

Database, sign-in, photo storage, realtime updates and server functions — the system of record.

What they receive

Everything: your email and password hash, profile, catches and their exact coordinates, photos, saved spots, posts, comments, marketplace messages, support requests and assistant history.

Where

Sydney, Australia (project region); Supabase Inc. is US-based

Retention & deletion

Deleting your account removes these rows and objects immediately (migration 0236). Off-platform backups keep an encrypted copy for 90 days.

Counts requests so one account cannot overwhelm the app or run up its AI costs.

What they receive

A counter keyed to your account identifier or IP address. No content.

Where

Unverified — set when the Upstash database was created — we have not confirmed this

Retention & deletion

Counters expire on their own within minutes to hours.

Runs the website and the app's server code.

What they receive

Request metadata including IP address, and anything in a request while it is being served.

Where

Served from Sydney (syd1); Vercel Inc. is US-based

Retention & deletion

Request logs are retained by Vercel on the plan's terms; we store nothing there ourselves.

Turns a fish photograph into a numeric fingerprint so the app can find visually similar past identifications and use them to answer better.

What they receive

The fish photograph you submit for identification, sent as image data.

Where

United States — as stated by the provider

Retention & deletion

We keep the resulting fingerprint, not the image, and deleting your account removes it. Training opt-out is recorded in docs/LEGAL-REVIEW.md.

Tides, swell and weather for the place you are looking at (it repackages Bureau of Meteorology data).

What they receive

The coordinates whose conditions are being requested — which is a place you fish or are standing in.

Where

Australia — as stated by the provider

Retention & deletion

Nothing is stored with the vendor on our behalf.

Official fishing rules, closures, river heights, dam levels and boating safety notices — the Bureau of Meteorology and state fisheries, water and transport agencies.

Where

Australia

Retention & deletion

Read-only public data. No user data is sent — requests name a gauge or a page, never a person.

Serves the two libraries the push-notification edge function imports (`@supabase/supabase-js`, `web-push`). Code, not data.

Where

Global edge — as stated by the provider

Retention & deletion

No user data is sent. NOTE: `@supabase/supabase-js@2` is imported at an unpinned major, so the function's dependency can change without a deploy — audit LM-H33.

A fallback fetcher for state fisheries pages whose bot protection blocks us. Used only when an administrator runs a regulations sync.

Where

Unverified — we have not confirmed this

Retention & deletion

It receives a public government web address and nothing else. No user data is sent.

Builds the boat-ramp and access-point dataset. A build-time script, never called while the app is running.

Where

Germany (European Union) — as stated by the provider

Retention & deletion

No user data is sent.

Species reference photographs.

Where

United States — as stated by the provider

Retention & deletion

Fetched server-side when the species library is built. No user data is sent.

Questions or corrections

If you want to know more about any provider here, or you think something on this page is wrong, email privacy@luremark.app.