Privacy Policy

Last updated: 21 July 2026

Privacy at a Glance

The short version of how we handle your data.

Your catches are private by default

Location data is opt-in only

We never sell your data

Payments processed securely by Stripe

You can delete your account and all data anytime

We comply with US privacy laws (CCPA) and UK GDPR

Want the full details? Keep reading below.

1. Who We Are

GilledIt is a trading name of Taine Ltd, a company registered in England and Wales (company number 16343727) with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Taine Ltd is the data controller for personal data collected through the GilledIt mobile app and website. We handle data for users in both the United Kingdom and the United States.

If you have any questions about this privacy policy or how we handle your data, you can contact us at privacy@gilledit.com.

2. What Data We Collect

2.1 Account Information

When you create a GilledIt account, we collect your name, email address, and profile information. If you sign up via Apple or Google, we receive only the information you choose to share.

2.2 Catch Data

When you log a catch, we store the species, weight, length, photos, bait, gear, notes, and timestamp you provide. Catches are private by default - only visible to you unless you choose to share them publicly.

2.3 Location Data

GilledIt only accesses your location when you choose to tag a catch or use the fishing map. We never track your location in the background. When you share a catch publicly, the location is displayed as a fuzzy radius (not an exact pin) to protect your spots.

2.4 Marketplace Data

If you buy or sell on the GilledIt marketplace, payment processing is handled by Stripe. We never see or store your full card details. We receive transaction amounts for fee calculation purposes only.

2.5 Device & Usage Data

We collect anonymized usage analytics to improve the app, including device type, operating system version, app version, and general usage patterns. This data cannot be used to identify you personally.

3. How We Use Your Data

We use your personal data to:

  • Provide and maintain the GilledIt app and its features
  • Store and display your catch log and profile information
  • Enable social features such as the feed, challenges, and messaging
  • Process marketplace transactions via Stripe
  • Send you relevant notifications (which you can control in settings)
  • Improve the app through anonymized usage analytics
  • Respond to your support inquiries

We do not use your data for targeted advertising. We do not sell your personal data to third parties.

4. Who We Share Data With

We only share your data with service providers that are essential to operating GilledIt, acting under contract as our processors or as independent controllers for payments:

  • Supabase: our database, authentication and file-storage provider; all account data, catches, messages and marketplace records are stored here
  • Stripe: payment processing and seller identity verification for the marketplace; Stripe acts as its own controller for the payment and know-your-customer data it collects
  • TrackingMore: parcel tracking numbers for marketplace orders, so delivery can be confirmed automatically
  • Firebase Cloud Messaging (Google): delivery of push notifications to your device
  • Sentry: crash and error reporting from the app (an anonymous user reference only, no profile data)
  • Discord: messages sent through the website contact form, venue claims and launch-list signups are relayed to our private team workspace so we can respond
  • OpenStreetMap: map tiles for the fishing map (your IP address reaches the tile server when maps load)

Some of these providers process data outside your country. Where they do, transfers are protected by recognised safeguards including the EU-US and UK-US Data Privacy Frameworks and standard contractual clauses, together with each provider's own safeguards.

We do not share your personal data with advertisers, data brokers, or any other third parties for marketing purposes, and we do not sell personal data.

5. Your Rights

For All Users

Regardless of where you are located, you have the following rights:

  • Right to access: request a copy of your personal data
  • Right to rectification: ask us to correct inaccurate data
  • Right to erasure: ask us to delete your data
  • Right to data portability: receive your data in a machine-readable format
  • Right to object: object to certain types of processing
  • Right to restrict processing: ask us to limit how we use your data

Additional Rights for California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know: request details about the categories and specific pieces of personal information we have collected about you
  • Right to delete: request deletion of your personal information
  • Right to opt out of sale: we do not sell your personal information, but you have the right to direct us not to do so
  • Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA rights

UK/EEA Users (UK GDPR)

Users in the United Kingdom and European Economic Area retain all rights under the UK General Data Protection Regulation (UK GDPR), including the rights listed above.

To exercise any of these rights, email us at privacy@gilledit.com. We will respond within 30 days.

If you are unsatisfied with our response: US residents may file a complaint with the Federal Trade Commission (FTC). UK residents may lodge a complaint with the Information Commissioner’s Office (ICO).

6. Data Retention

Your catch data is stored for as long as your account is active, unless you choose to delete individual catches.

If you delete your account, all personal data, including your catches, profile, and marketplace history, will be permanently removed from our systems within 30 days. Anonymized, aggregated data (such as total catches per species) may be retained for statistical purposes.

7. Cookies & Tracking

The GilledIt website uses essential cookies required for the site to function correctly. We do not use advertising or tracking cookies.

We use a privacy-focused analytics tool to understand how visitors use our website. This data is anonymized and cannot be used to identify individual users.

8. Children’s Privacy

GilledIt is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us at privacy@gilledit.com and we will delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes through the app or by email. The “Last updated” date at the top of this page will always reflect the most recent revision.

10. Contact Us About Your Data

If you have any questions about this privacy policy or want to exercise your data rights, contact us: