Effective June 28, 2026
HookBook is owned and operated by RPM Experience Labs LLC (“RPMx,” “we,” “us,” “our”). This Policy explains what we collect, how we use it, who we share it with, and your choices. By using HookBook you agree to it. We treat your fishing data the way anglers treat a honey hole: your spots are private. We don’t sell your data, and we never make your GPS locations public.
1. Information we collect
You give us: account info (email, name, birth month and year, optional profile photo); catch & trip logs (species, size, lures, conditions, dates, notes, who you fished with); photos; and your Gilly conversation transcripts (text and speech-to-text) when you log by chatting. If you subscribe, our payment processor collects your payment details — we do not store your full card number.
Collected automatically (with your permission): precise location— from a photo’s embedded GPS or your device’s location — to map a catch, find the body of water, and fetch its weather; in the mobile app, access to your camera and photo library so you can add catch photos (a photo you take in the app may be tagged with your current location); and device/usage analytics to improve and secure the App. You can grant or revoke camera and location permission anytime in your device settings.
2. How we use it
To run the Service (store your logbook; build your maps, stats, cards, books, and Wrapped); identify a fish from a photo and pre-fill species/size (an AI suggestion you can always change); auto-fill the body of water and weather; power Gilly and the AI features you use; process subscriptions and support; improve and secure the App; confirm you’re old enough to use HookBook (from your birth month and year) and send you birthday greetings and offers; and send you service messages (and, if you opt in, occasional product updates). You can unsubscribe from non-essential email anytime. We do not sell your personal information or use your private catch locations for advertising.
3. How it’s shared
Only as needed to run the Service, with trusted providers acting on our behalf. Our current providers include Supabase (database, file storage, authentication), Vercel (hosting), OpenAI (AI features — identifying fish from photos, powering Gilly, generating narration, and answering stats questions), OpenWeatherMap and Mapbox (weather and maps), Stripe (payment processing), Resend (email), and Sentry (error monitoring). The photos and prompts you submit for AI features are processed by OpenAI to return a result; OpenAI does not use them to train its models. We also share when you choose to — content you publish via a share link, card, book, or Wrapped is visible to anyone with the link (your precise GPS is not included). And we share when required by law or to protect rights and safety, or in a business transfer with notice.
4. Your location is private
Where you fish is sacred. Your GPS coordinates are stored privately to your account, are never shown publicly, and are never sold. Photos live in private storage, served only through expiring signed links, and database access is restricted per-user. When you share a card or link, your precise coordinates are not included.
5. Data retention
We keep your catches, photos, and content while your account is active, and encrypted backups for a limited period for disaster recovery. We may set a storage limit on free accounts and may archive or delete content from accounts that stay inactive for an extended period (with notice where required). When you delete your account, we delete or de-identify your personal information within a reasonable period, except limited records we must keep for legal, accounting, or fraud-prevention reasons.
6. Your choices and rights
View and edit your catches, profile, and content anytime in the App; delete your account and its data from within the App; deny or revoke location permission in your device settings (some auto-fill won’t work without it); and unsubscribe from non-essential email. Depending on where you live (e.g., California, EU/UK), you may have additional rights to access, delete, correct, or port your data and to opt out of certain processing — contact us to exercise them, and we won’t discriminate against you for doing so.
7. Children
HookBook is not directed to children under 13, and we don’t knowingly collect their information. If you believe a child gave us information, contact us and we’ll delete it. Users under 18 should use HookBook only with a parent or guardian’s permission.
8. Security
We use encrypted transport, private storage with signed URLs, per-user access controls, and restricted access. No system is perfectly secure, so we cannot guarantee absolute security.
9. Changes & contact
We may update this Policy and will post the new effective date and, for material changes, notify you. Questions or requests: privacy@hookbook.ai or the in-app Support & Feedback screen (RPM Experience Labs LLC).