Privacy Policy
Last updated: March 3, 2026
1. Scope and Controller
This Privacy Policy explains how AquaSimple ("AquaSimple", "we", "our", "us") collects, uses, shares, and protects information when you use our website, app, and related services (the "Service").
For personal data processed under this policy, AquaSimple is the data controller.
2. Data We Collect
- Account and profile data: name, email, password hash, avatar, country, language, plan type, and account settings.
- Aquarium and content data: aquarium/scape records, photos, notes, measurements, inventory, and other user-generated content.
- Commercial data: transaction and billing metadata when you buy optional paid features (if available).
- Usage and device data: IP address, browser/device information, pages, interactions, cookies, and event telemetry.
- Communications data: support requests, notifications, surveys, and email interactions.
3. How We Use Data
- Operate, maintain, and improve the Service.
- Deliver core plan functionality, including public discovery features for Free plan aquariums.
- Authenticate users, prevent fraud, and secure accounts.
- Deliver support and service communications.
- When you are signed in and explicitly opt in on a store-managed shared aquarium page, register your interest and enable that store to contact you.
- Analyze product usage and measure feature performance.
- Operate and improve discovery and sponsored surfaces inside the Service where legally permitted.
- Comply with legal obligations and enforce platform rules.
4. Market Research and Industry Insights
We may produce and commercialize aggregated and de-identified insights for market intelligence, trend analysis, and strategic industry research.
- Outputs are aggregated (for example by region, category, or trend).
- Direct identifiers are removed before de-identification workflows.
- Partners are contractually prohibited from re-identifying individuals.
If data can still reasonably identify a person, we treat it as personal data and apply this policy.
5. Brand Discovery Surfaces
AquaSimple may display relevant public aquarium content on community and brand-related pages inside the platform.
- This discovery is based on your public aquarium data and related item/brand links in the Service.
- We do not sell plain customer lists containing direct identifiers like full name, email, or phone number.
- If we introduce new external marketing uses in the future, we will provide separate notice and consent controls where legally required.
6. Cookies and Similar Technologies
We use cookies, SDKs, pixels, and similar technologies for core service functionality, analytics, and marketing.
Where required by law (including in the EEA/UK), we request consent before placing non-essential analytics or advertising technologies.
7. Legal Bases (EEA/UK/Switzerland)
Where required, we rely on one or more of these legal bases:
- Contract: providing the Service you requested, including Free plan public discovery functionality.
- Legitimate interests: security, fraud prevention, and product analytics.
- Consent: non-essential cookies and other activities where consent is legally required.
- Legal obligation: compliance with applicable laws.
You may object to processing based on legitimate interests, and you can withdraw consent-based processing at any time, subject to applicable law.
8. How We Share Data
- Service providers (hosting, analytics, support, communications, payments).
- Store operators for store-managed shared aquarium pages, when you submit the contact form or provide logged-in opt-in consent.
- Partners involved in sponsored surfaces inside AquaSimple.
- Authorities where disclosure is legally required.
- Corporate transaction counterparties (for example merger or acquisition).
9. International Data Transfers
We may process data outside your country. For transfers from the EEA/UK/Switzerland, we use recognized safeguards where required, including contractual clauses and related protections.
10. Retention
We retain personal data for as long as needed for service delivery, legal compliance, security, and legitimate business purposes. Retention periods vary by data category.
11. Your Privacy Rights
Depending on your location, you may have rights to:
- Access, correct, delete, and port your personal data.
- Object to or restrict processing.
- Withdraw consent where processing is consent-based.
- Opt out of targeted advertising.
- Opt out of "sale" or "sharing" where those legal definitions apply.
- Where required by law, use recognized browser-based universal opt-out preference signals (for example, Global Privacy Control).
- Appeal denied requests where applicable.
If you are in the EEA/UK/Switzerland, you may also lodge a complaint with your local data protection authority.
To submit a request, contact contact@aquasimple.pt with subject "Privacy Request" and your request type (for example "Access", "Delete", "Do Not Sell or Share", or "Opt Out of Targeted Ads"). We may verify your identity before fulfilling requests.
12. Children
The Service is not directed to children under 13 (or older minimum age where required by local law). If we learn that we collected personal data without valid authorization, we will delete it.
13. Security
We use reasonable technical and organizational safeguards. No transmission or storage method is fully secure.
14. Changes to This Policy
We may update this policy from time to time. Material updates will be posted with a revised "Last updated" date.
15. Contact
For privacy questions or rights requests, contact contact@aquasimple.pt.