BagLimit Privacy Policy

Effective 31 October 2026 · Version 1.0

BagLimit is a fishing-regulations guide for British Columbia. It is made by Thomas Maslauskas, of Gibsons, British Columbia, Canada ("we", "us"). This policy explains what happens to your information when you use the BagLimit app on iPhone, iPad or Android.

The short version

• No account. You don't sign up or give us your name, email or phone number to use BagLimit.
• Your location stays on your phone. If you allow it, BagLimit uses your location on your device to work out which fishing region or tidal area you're in. We never send your location to our servers.
• No ads, no analytics, no tracking. BagLimit has no advertising, analytics or crash-reporting tools, and it doesn't track you across other apps or websites.
• We don't sell or share your information. We have nothing to sell, and we wouldn't if we did.
• Downloads are anonymous. When you download a regulation pack, your phone asks our file host for that pack. Like any internet request, this reveals your IP address and the pack you asked for to the host, which keeps short-lived technical logs.

1. Information BagLimit uses

Location (optional)

• What: your device's location, which can be precise (GPS), but only if you grant permission and only while you're using the app. BagLimit doesn't ask for background location.
• When: when you tap Check rules here on the map, when you tap Download rules for my area, and to show the blue "you are here" dot on the map.
• Why: to find which BC freshwater region or DFO tidal area and subarea you're in, so BagLimit can show the right rules and suggest the right pack.
• How: the lookup happens entirely on your device, against boundary data built into the app and stored in the packs on your phone. Your coordinates aren't sent to us or to our file host.
• Saved on your phone: BagLimit saves your most recent rules pin (its coordinates and, for a GPS fix, its accuracy) so the map can reopen where you left off. That pin stays only on your device. It's replaced each time you pick a new spot, and it's deleted when you delete the app.
• Your choice: location is optional. You can say no, or turn it off any time in your phone's Settings, and still use BagLimit by searching for a lake or river or by pressing and holding on the map.

The map

The map comes from your phone's built-in mapping service: Apple Maps on iPhone and iPad, and Google Maps on Android. To draw the map, your phone loads map images for the area on screen directly from Apple or Google. That exchange is between your device and Apple or Google, under their own privacy policies:

• Apple: https://www.apple.com/legal/privacy/
• Google: https://policies.google.com/privacy

BagLimit doesn't send your location or pins to Apple or Google.

Regulation pack downloads

• When you open the Packs screen or check for updates, the app requests the list of published packs. When you download a pack, it requests that pack file. Neither request includes your location, a user ID or any device identifier created by us.
• These requests go to our file host, Supabase (Supabase, Inc.), which stores our packs on servers in Canada (AWS region ca-central-1). Like any web server, the host automatically receives your IP address, the time, the file requested and basic device and software information (for example the app's network library and operating system). Its network provider also records the approximate area (country, province and city) that your IP address suggests. This is not your GPS location. We use this only to deliver the file and to keep the service running and secure.
• Supabase keeps these server logs for a short time, no more than 30 days, then deletes them automatically. We don't combine them with any other information, and we don't use them to identify you.

Crash reports from Apple and Google

BagLimit has no crash-reporting software of its own. If you have chosen in your phone's settings to share diagnostics with app developers (iPhone: Settings → Privacy & Security → Analytics & Improvements → Share With App Developers; on Android, usage and diagnostics sharing), Apple or Google may send us anonymous crash and performance reports about BagLimit. These show the app version, phone model, operating-system version and the technical details of the crash. They don't include your name, location or contact details. We use them only to fix bugs, and we don't keep any copies of them for longer than 90 days. Apple and Google handle their own copies under their privacy policies.

Your agreement to the Terms

When you tick the box on the first screen, BagLimit saves a record on your phone only: the Terms version, the date and time, the app version and a fingerprint (hash) of the Terms text you saw. It isn't sent to us. It lets the app know not to show the screen again until the Terms change.

Installed packs and settings

The packs you download and a list of which ones are installed (region, version, dates and a security check result) are stored on your phone so BagLimit works offline. You can remove a pack at any time from the Packs screen.

Links to official sources

BagLimit links to official websites, such as Fisheries and Oceans Canada (DFO) and the Province of British Columbia. These open in your web browser, and those sites' own privacy policies apply.

What BagLimit does not do

BagLimit doesn't:

• ask for or collect your name, email, phone number, contacts, photos, microphone or camera;
• use advertising, analytics, attribution or crash-reporting software;
• track you across other companies' apps or websites;
• sell, rent or trade personal information;
• use your information for profiling or automated decisions about you.

If you email us, we receive your email address and whatever you choose to tell us. We use that only to answer you (see section 5).

2. Who we share information with

We don't share your personal information with anyone, except:

• Service providers: our file host (Supabase) handles download requests as described above, under its own contractual privacy and security commitments. https://supabase.com/privacy
• Legal reasons: if the law requires it, for example a valid court order.
• A new owner: if BagLimit is transferred to a new owner, such as a company we form, this policy will continue to apply to any information they receive.

3. Where information is stored

Almost everything BagLimit uses stays on your device. Pack files are hosted in Canada. Our service providers may process limited technical data (such as server logs) in other countries, including the United States, where it may be accessible to authorities under local law.

4. How long we keep it

Deleting BagLimit from your phone deletes everything it stored there. We don't hold any other copy.

5. Your rights and choices

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA), you can ask what personal information we hold about you, ask us to correct it, and withdraw your consent. Because BagLimit doesn't send your location or create an account, we normally hold no personal information about you beyond short-lived server logs, any anonymous crash reports and any emails you've sent us. We'll answer any request within 30 days.

• Location: turn it on or off in your phone's Settings → BagLimit (iPhone) or Settings → Apps → BagLimit → Permissions (Android).
• On-device data: delete the app, or remove packs on the Packs screen.
• Emails: ask us to delete your messages and we will, unless the law requires us to keep them.

6. Security

Packs are downloaded over an encrypted connection (HTTPS) and BagLimit checks each one against a security code (an HMAC-SHA256 signature) before installing it, so a damaged or altered pack is refused. Information stored on your phone is protected by your phone's own security (passcode, encryption). No method is perfectly secure, but we keep the information we handle to a minimum.

7. Children

BagLimit is a general-audience app for anglers. It isn't directed at children, and it doesn't knowingly collect personal information from anyone, including children under 13. Because there's no account, no messaging and no sharing, a child using BagLimit gives us nothing beyond the anonymous download logs described above. If you believe a child has emailed us personal information, contact us and we'll delete it.

8. Changes to this policy

If we change how BagLimit handles information, we'll update this policy, change the version and effective date at the top, and post the new version at https://baglimit.app/privacy. If a change is significant, for example if we ever add accounts, analytics or ads or start sending location off your device, we'll tell you in the app and ask for your consent first where the law requires it.

9. Contact us

Questions, requests or complaints about privacy:

Thomas Maslauskas (privacy contact for BagLimit) Gibsons, British Columbia, Canada Email: support@baglimit.app

If you're not satisfied with our answer, you can contact the Office of the Information and Privacy Commissioner for British Columbia (https://www.oipc.bc.ca) or the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca).