Privacy policy
This policy explains what data the gupp.app website and the Gupp Tank app (iOS and Android) handle, why and for how long. It covers the website, the early-access list and the app.
Who is responsible
The data controller is Josué Araya Marín, an individual, in Costa Rica. You can write to privacidad@gupp.app about anything privacy related.
What data we handle
We only handle the data each feature needs. On the website and the early-access list:
Early-access sign-up: your email, the language of the page, your tank type (if you choose to give it) and a record that you accepted these texts, with date and version. We do not store your IP address.
Technical data: the site is hosted on Vercel, which may log IP addresses and request data in server logs for security and operation.
Storage in your browser: we save your language, your theme (light or dark) and your cookie choice. It is essential to the site and does not track you.
Analytics: only if you accept it. It measures how the site is used in aggregate and does not include personal data such as your email.
What the Gupp Tank app handles
When you create an account and use the Gupp Tank app, we handle:
Account: your email and, if you give it, your first and last name and your avatar. If you sign in with Google or Apple we receive your email and name from them. If you register with a password, we store it only as a one-way hash, never in plain text.
Your tanks: their name, size and type, the animals you add, your water parameter readings, dosing and feeding records, reminders and your care history and achievements.
Diagnosis photos: the photos you take to diagnose a fish, and the assessment the AI gives you.
Your device: your time zone, to time reminders; the language of the app; and the push notification token (Firebase Cloud Messaging) of each phone you sign in on, with your notification preferences.
Subscription: your plan and its state, and the purchases made through Google Play or the App Store, handled with RevenueCat.
Crash reports: when the app fails, a technical report goes to Sentry, with no photos and no content of your tanks.
The app does not use your location.
What we use it for
Your email on the early-access list is used only to tell you when the app is available. We do not use it for anything else, we do not sell it and we do not share it for advertising.
In the app, your data is used to give you the service: your tanks, your readings, your reminders and notifications, your plan, and the AI diagnosis. When you ask for a diagnosis, the photo is sent to Google Gemini, which returns the assessment. We do not use your photos to train or improve any AI model, and we do not keep them anonymized.
Analytics, if you accept it, helps us understand which parts of the site are used so we can improve them.
Basis for handling your data
On the website, your consent. You give it by ticking the checkbox on the form and by choosing your cookie preferences, and you can withdraw it at any time.
In the app, handling your data is necessary to give you the service you asked for by creating an account. The push notifications are optional and you can turn them off in the app or on your phone.
How long we keep it
We keep your early-access email until 6 months after the app launches, or sooner if you unsubscribe. The record of your consent is deleted together with your sign-up.
We keep the data of your app account for as long as the account exists. When you delete your account, everything is deleted immediately: your account, your tanks and everything under them, your history, your notification data and every diagnosis photo and your avatar. Nothing is kept anonymized.
One thing outside our servers does not go at once: the email provider keeps its sending logs, which include the recipient address, for 30 days. We do not keep separate backups of the database. The stores and RevenueCat keep the records of purchases under their own policies and the tax rules that apply to them.
Your cookie choice stays in your browser until you change it or clear the site data.
Your rights
You can ask for access to your data, to have it corrected or deleted, object to its handling and withdraw your consent. Write to privacidad@gupp.app, or use the unsubscribe link each notice will carry: your record is deleted.
You can delete your app account yourself, at any time, from the app (Profile → Delete my account), or by writing to us if you no longer have the app. The steps are on the Delete your account page.
The applicable law is Costa Rica’s Law No. 8968 on the Protection of Individuals regarding the Processing of their Personal Data. If you believe your rights were not respected, you can go to the Data Protection Agency of Costa Rica (Prodhab).
Security
The site and the API use encrypted connections (HTTPS), photos are kept in private storage, and access to the data is limited to whoever needs it to run them.
Minors
The site and the app are not aimed at minors. If you believe a minor signed up, write to us and we will delete it.
Changes
If this policy changes, we will publish the new version here with its date. The current version is shown at the top of the page.