PhishID Privacy Policy
Last updated: 24 October 2026
PhishID ("the app", "we", "us") helps Australian anglers identify fish, log catches, share fishing spots and check state fishing rules. This policy explains what information the app collects, why, and the choices you have. PhishID is operated by an individual developer based in Australia, and we handle personal information in line with the Australian Privacy Principles.
What we collect
- Account details: your email address, your display name, and a password (stored securely by Google Firebase Authentication; we never see it). If you sign in with Apple or Google, we receive the name and email address that the provider shares.
- Profile: your home state and an optional profile photo.
- Catch journal: the species, date, length, weight, place name and photos you choose to log.
- Fishing spots: spots you add to the map, including their name, notes and map location. Spots you add are visible to other PhishID users (shown as "Added by another angler", without your name).
- Photos for identification: photos you take or choose on the Identify screen.
- Location: when you open the map and allow it, your device's location is used to centre the map and to place spots you add. We do not track your location in the background or store a history of where you have been.
How we use it
- To run your account and show you your own journal, stats and spots.
- To identify fish: the photo you submit is sent to Google's Gemini AI service, which returns a suggested species. The photo is also saved to your account so it can be attached to a catch.
- To show fish photos and descriptions, the app looks up public information from Wikipedia. Only the species name is sent.
We do not sell your information, show advertising, or use your information for marketing.
Where it is stored
Your information is stored with Google Firebase (Authentication, Cloud Firestore and Cloud Storage), with data held in Google's Sydney, Australia region where available. Google may process data in other countries under its own security and privacy commitments. Photos sent for identification are processed by Google Gemini under Google's privacy policy.
Who can see it
- Your catches, photos and profile are private to your account.
- Fishing spots you add are visible to other users of the app, without your name or email.
Keeping and deleting your information
We keep your information while your account exists. You can delete your account at any time in the app: go to Me → Delete my account. This permanently deletes your account, your catch journal, the spots you added and your photos. If you can't access the app, email us (below) and we will delete it for you.
Children
PhishID is not directed at children under 13, and we do not knowingly collect information from them.
Fishing rules disclaimer
The bag and size limits in the app are a guide only and can change. Always check the rules with your state fisheries authority. AI fish identification can be wrong.
Changes to this policy
If we make important changes, we will update this page and the date above.
Contact
Questions, access or correction requests, or complaints: phishid@outlook.com. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.