Privacy Policy

1. Who this covers

This policy applies to the Linkfisher app, on every platform we release it for, and this website (linkfisher.app). It's controlled by the Linkfisher team. Contact details are at the end of this page.

2. What we collect, and why

Account information

• Email address, used to sign you in via a one-tap magic link. We don't use or store passwords.
• Username and display name, shown to people you share Buckets with, so they know whose link is whose.
• Avatar photo, only if you choose to upload one. It appears on your own account screen, and to other people wherever your account shows up to them, which today means the member list on a shared Bucket you are both in. Only you can change or remove it.

Your username, display name and avatar are the parts of your account other people see. Avatar images are served from a public web address, so anyone who has that address can open it without signing in to Linkfisher. Treat your avatar as public rather than private, and if you would rather not have a picture, leave it unset. Your email address is never shown to other users.

Guest use (no account) skips this entirely. See "Guest mode" below.

The links you save

• The URL itself, plus the page title, description, and preview image we fetch to build the card you see in your list.
• Any category, Bucket, tag, or remarks text you attach to a link.
• Timestamps for when a link was saved, edited, and last opened, so "3 days ago" and the unread fish can work.

Clipboard access

Linkfisher reads your clipboard only at the moment you tap Catch, from the app, the home screen widget, or the "Spotted a link" prompt, to check whether it contains a URL worth offering to save. It is never read in the background, never scanned continuously, and nothing is sent anywhere unless you choose to save it.

Camera access

Used only when you open the QR scanner to catch a link from a printed or displayed code. Frames are processed on-device to detect a URL. No image or video is stored or transmitted, by us or anyone else.

Notifications

If you allow notifications, we store a device token for that device so we can reach it, along with the language the app is set to on that device, so we can send notifications in the language you use the app in. Today these are about activity in shared Buckets you are part of, and we may also use them for news about the app. You can turn notifications off for Linkfisher at any time in iOS Settings, and signing out deletes that device's token.

Usage analytics

Linkfisher records which screens you open and which buttons you tap, so we can see what works and what breaks. It also captures crash and error reports automatically. This runs through PostHog, hosted in the EU.

While you are signed out, these events carry no identity beyond a random per-install id. Once you sign in, they are associated with your account, and your email address, display name, username, and plan are attached to your analytics profile so support requests can be matched to real usage. We never send the contents of your links, their titles, your notes, or your tags to analytics.

Analytics is on by default and you can switch it off at any time in Profile › Data Settings. That choice sticks across restarts, and it stops every analytics event, error reports included.

One thing continues either way: the app asks PostHog for its own settings, such as which features are switched on and what your plan's limits are. That request carries your account or install id so the right settings come back, and no usage data. Without it the app wouldn't know what you're entitled to.

Ads

Free and guest users see ads supplied by Google AdMob. Premium subscribers see no ads at all, and no ad code loads for them.

Google, as the ad provider, may collect device and advertising identifiers, approximate location derived from your IP address, and information about the ads you are shown and interact with, in order to serve and measure ads. That processing is governed by Google's own privacy terms. Depending on the choices below, this can amount to tracking across other companies' apps and websites.

You have two separate controls over this, and neither one is buried:

• Consent form. If you are in the EEA, the UK, or Switzerland, Google's IAB-certified consent form appears before any ad is loaded and asks whether ad partners may use your data. To change that answer, email us at hi@linkfisher.app and we'll walk you through it.
• App Tracking Transparency. On iOS, the system asks whether Linkfisher may track you across other companies' apps and websites. If you choose "Ask App Not to Track", your advertising identifier is not shared and ads become non-personalised. You can change this any time in iOS Settings › Privacy & Security › Tracking.

Neither prompt appears at first launch. Both are shown after the welcome walkthrough, at the first point an ad could actually be displayed. Apple's SKAdNetwork is also enabled, which lets advertisers measure installs without identifying you.

Subscriptions

Premium purchases are handled by the App Store or Google Play, and managed for us by RevenueCat. RevenueCat receives your Linkfisher account id and the store's own purchase receipt so we know whether your subscription is active. We never see or store your card details.

Guest mode

If you use Linkfisher without an account, your links live only in local storage on that device. Nothing is sent to our servers, and we have no way to see or recover that data. It is yours alone, and it stays on the device unless you create an account and choose to bring it along. Ads and analytics still apply, on the same terms as above.

3. Who else can see your links

By default: nobody but you. If you create or join a shared Bucket, the people you invite (or who invite you) can see the links, categories, and remarks in that specific Bucket, exactly as they were tagged, not filtered through their own category list. Tags stay private to you even on a link you contributed to a shared Bucket. A shared Bucket's links are stored on our servers so everyone invited to it can open them from any device. Free accounts can own a limited number of shared Buckets and join any number of other people's, and Premium removes the limits. Removing someone from a Bucket ends their access to it.

We do not sell your data, and we do not share your saved links with advertisers.

4. Where your data lives

Linkfisher is built on Supabase for authentication, database, and file storage. Supabase acts as our infrastructure processor. Your account and link data is stored in a Postgres database with row-level security rules that restrict every row to the account that owns it (or, for shared Buckets, the accounts explicitly invited to that Bucket). Avatar images live in private object storage scoped the same way.

These are the other companies that process data on our behalf:

• PostHog (EU region), usage analytics and error reports.
• Google AdMob, serving and measuring ads to free and guest users.
• RevenueCat, subscription status.
• Apple Push Notification service, delivering shared Bucket notifications.
• Resend, sending sign-in and Bucket invite emails.
• Cloudflare, serving this website.

Some of these process data outside the EEA and the UK. Where they do, transfers rely on the European Commission's standard contractual clauses or an equivalent safeguard.

All traffic between the app and our backend is encrypted in transit (TLS).

5. How long we keep it

We keep your account and link data for as long as your account is active. If you delete your account, your links, Buckets, categories, tags, and avatar are deleted from our systems. If a link becomes part of a shared Bucket you don't own, the Bucket owner controls its lifecycle within that Bucket.

6. Your rights

If you're in the EU, UK, or a jurisdiction with similar protections (GDPR, UK GDPR, and equivalents), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate account details, directly in Account settings.
• Erase your account and associated data ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time, where processing relies on it.
• Lodge a complaint with your local data protection authority.

Most of these you can exercise yourself, without asking us:

• Correct. Username, display name, and avatar are editable in Profile › Account.
• Erase. Profile › Account › Delete Account permanently deletes your account, your cloud-synced links, and the Buckets you own or are part of. You choose whether the links on that device are wiped too.
• Object. Analytics has an off switch in Profile › Data Settings, and tracking permission is in iOS Settings › Privacy & Security › Tracking.

For a data export, or anything else on that list, contact us using the details below and we'll handle it directly.

7. Children's privacy

Linkfisher isn't directed at children, and we don't knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we'll remove it.

8. Changes to this policy

If we make a material change to how we handle your data, we'll update the date at the top of this page and, where required, notify you in the app.

9. Contact

Questions, requests, or complaints about this policy: hi@linkfisher.app.