ReefPilot Privacy Policy
Privacy policy for the ReefPilot: Aquarium Care iOS app, covering on-device data, AI features, and subscriptions.
This privacy policy applies to the ReefPilot: Aquarium Care app for iPhone and iPad ("ReefPilot", "the app"). ReefPilot is designed to keep your data on your device. We do not require an account, and we do not collect analytics, advertising identifiers, or personal profiles.
Data Stored on Your Device
Everything you enter in ReefPilot — tanks, water test readings, care tasks, timeline entries, photos, and livestock notes — is stored locally on your device. It is not uploaded to our servers and is not accessible to us. Deleting the app deletes this data, so we recommend keeping a device backup if your tank history matters to you.
AI Features (Copilot and Tank Photo Analysis)
When you ask Copilot for a care plan or analyze a tank photo, the app needs to process your request with an AI model:
- On devices that support Apple's on-device foundation models, care plans are generated directly on your device where possible. Nothing leaves your phone in that case.
- Otherwise, the app sends a snapshot of the selected tank (name, type, volume, recent readings, and open tasks) — and, for photo analysis, the photo you chose — to our server, which forwards it to OpenAI to generate the response.
These requests are processed only to generate your result. We do not store your tank data or photos on our server, we instruct OpenAI not to retain or train on the request content, and the request is not linked to your identity. AI features are optional; if you never use Copilot plan generation or photo analysis, no tank data leaves your device.
AI output is informational guidance only. It is not veterinary advice, and you should verify suggestions against your own tank conditions before acting on them.
Device Integrity Checks
To protect our AI service from abuse, requests are verified with Apple's App Attest. This involves a cryptographic key generated on your device and an anonymous device-integrity assertion validated by our server. It does not identify you personally and cannot be used to track you across apps.
Photos and Camera
The app requests camera access only when you choose to take a tank photo, and uses the system photo picker (which does not give the app access to your library) when you choose an existing photo. Photos attached to timeline entries stay on your device. A photo is transmitted only if you explicitly submit it for tank analysis, as described above.
Notifications
If you enable care reminders, notifications are scheduled locally on your device. We do not operate a push notification server.
Subscriptions and Purchases
ReefPilot Pro subscriptions are processed by Apple through your Apple ID. We do not receive your name, payment details, or billing address. Apple's handling of this data is described in the Apple Privacy Policy.
Children
ReefPilot is not directed at children under 13, and we do not knowingly collect personal information from children.
Changes to This Policy
If we change how the app handles data, we will update this page and revise the date above. Material changes will be noted in the app's release notes.
Contact
For privacy questions about ReefPilot, contact [email protected] with "ReefPilot" in the subject line.