Privacy and data

Skunked Privacy Policy

Last updated: October 10, 2026

This policy explains how Progenaut ("we", "us", or "our") processes information when you use the Skunked fishing application, website, and related services (together, "Skunked"). Progenaut is responsible for deciding how Skunked user data is processed.

Information we process

• Account information: your email address, display name, authentication provider, and internal account identifiers. Passwords and Google sign-in credentials are processed by Firebase Authentication and Google; Progenaut's servers do not receive your password in readable form.
• Content you create: fishing records, catches, trips, sessions, notes, species, gear, bait, templates, custom fields, and other information you choose to save.
• Search terms: when you search saved records, the app may send your search text to Firebase Firestore as part of a query for matching records. Skunked does not add search terms to its custom product-analytics events.
• Location and weather information: approximate or precise location when you use a location-dependent feature. A location may be saved with your fishing content or used by Mapbox to display maps. A weather field can load automatically when its editor opens; if you allow location access, the app sends exact device coordinates to WeatherAPI to request current conditions. The Mapbox SDK sends map usage and location telemetry, including rotating session and billing identifiers, to Mapbox by default when those signals are gathered. Mapbox de-identifies location telemetry and uses it to improve its products. You can opt out through the attribution control shown on each map. Skunked does not request location merely because the app starts.
• Photos: images you select and upload, including thumbnails generated to display them efficiently.
• Workspace and access records: identifiers used to keep your personal journal under your account. If you have older group records, we also process their existing memberships, invitations, and permissions. This Android release does not offer group workspaces or invitations.
• Subscription information: a stable Skunked account identifier, subscription purchase history, and entitlement status used to provide premium access. Google Play handles payment details; Skunked does not receive your full payment-card information.
• Support information: if you contact us, we process your message and the contact details you provide. To investigate a problem, we may ask for your app version, device model, Skunked account email, or Google Play order number. Do not send passwords or payment-card details.
• Diagnostics and device information: crash reports, diagnostics, Firebase installation identifiers, IP address, device type, operating-system version, and app version. Firebase Crashlytics collects native crash reports by default to help keep Skunked reliable and prevent abuse. If you opt in to usage analytics, Firebase Analytics also collects automatic app events and device/session information. Skunked's custom events for onboarding, the first saved catch, catch-save errors, and opening maps or reports have no app-supplied parameters: they do not include fishing locations, species, notes, photos, account IDs, or other content you enter. Skunked does not show ads. Google Mobile Ads is bundled through a software dependency, but its Android initialization components are disabled for this release.

Why we process information

We process information only as needed to:

• create and secure your account;
• store, synchronize, search, filter, and map the content you save;
• publish the catch details you explicitly select for a public link;
• provide weather, map, image, and subscription features;
• diagnose crashes, prevent abuse, and improve reliability;
• with your consent, understand whether basic app journeys work;
• respond to support, privacy, and account-deletion requests; and
• meet legal obligations and protect users, Skunked, and third parties.

Depending on the context and applicable law, processing is based on performing the service you request, your consent, compliance with legal obligations, or legitimate interests such as security and reliability.

Service providers and sharing

We do not sell your personal data. This Android release presents a personal journal and does not offer invitations or group sharing. Content shared through an earlier version, if any, remains subject to its existing workspace access rules until removed. We also use the following providers to operate Skunked:

When you save a catch share, Skunked keeps a separate private copy of its catch details and photo, if available, so later changes to the catch do not alter the share. Publishing creates a public page with only the fields you chose to show and the photo if you left it visible. The photo is visible by default when one is available; you can hide it before publishing. Available fields may include the species, date and time, precise location, trip, measurements, and notes. Your account identity is not included. The link can be opened and forwarded by anyone, including social-media preview services. You can revoke or delete a catch's published links in the app. This stops Skunked from serving the pages and photos, but it cannot remove copies saved by recipients or previews cached by other services.

These providers may process data in countries outside your own. Their contractual terms and safeguards govern those international transfers. We may also disclose information when required by law or necessary to protect rights, safety, and the integrity of the service.

Retention and deletion

Account information and user-created content are generally retained while your account is active. You may remove individual content in the app or delete your entire account. Provider logs, backups, cached data, and purchase records may remain for a limited period under the relevant provider's retention rules or where required for security, fraud prevention, dispute resolution, or legal compliance.

A published catch copy and its separate photo are removed when you revoke its link, delete the source catch, or delete your account. Third-party copies and cached previews may remain outside Skunked.

Account deletion removes your Firebase Authentication account, personal workspace content, owned images, any existing collaboration identity and access, and the RevenueCat customer associated with your Skunked account. Content owned by another user or group may remain; references identifying you as its former author are anonymized. A limited deletion audit record may be retained to complete retries and verify the deletion. It contains identifiers, status, and timestamps, but not your email address or user-created content. A completed audit marker expires after 30 days; failed cleanup remains available for retry and operator resolution.

Deleting your Skunked account does not cancel a subscription managed by Google Play. Cancel it separately in Google Play subscriptions.

You can initiate account deletion inside Skunked or through the Skunked account deletion page. Before deletion, the in-app export action creates a JSON copy and downloads the photos referenced by your owned records through authenticated Firebase Storage access.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal data, and to object to or withdraw consent for certain processing. You can edit or delete much of your information in Skunked. For other requests, contact tiit@progenaut.com.

Location access can be changed in your device settings. Usage analytics is off by default. You can enable it during onboarding and withdraw consent at any time from Usage analytics in the main menu; withdrawal stops future Firebase Analytics collection on that device. Crashlytics reporting is separate from this choice. Skunked will add an appropriate consent flow before enabling advertising in any future release.

Security

Skunked uses encrypted network connections, authentication, access rules, and scoped storage paths. No internet service can guarantee absolute security, but we limit access and design deletion and access boundaries to reduce risk.

Children

Skunked is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact us so that we can investigate and delete it where required.

Changes to this policy

We may update this policy when Skunked or its legal obligations change. The current version and its effective date will remain available on this page. Material changes will be communicated through an appropriate channel when required.

Contact

Progenaut
Email: tiit@progenaut.com