AquaSimple

1. Scope and Controller

This Privacy Policy explains how AquaSimple ("AquaSimple", "we", "our", "us") collects, uses, shares, and protects information when you use our website, app, and related services (the "Service").

For personal data processed under this policy, AquaSimple is the data controller.

2. Data We Collect

Account and profile data: name, email, password hash, avatar, country, language, plan type, and account settings.
Aquarium and content data: aquarium/scape records, photos, notes, measurements, inventory, and other user-generated content.
Commercial data: transaction and billing metadata when you buy optional paid features (if available).
Usage and device data: IP address, browser/device information, pages, interactions, cookies, and event telemetry.
Communications data: support requests, notifications, surveys, and email interactions.

3. How We Use Data

Operate, maintain, and improve the Service.
Authenticate users, prevent fraud, and secure accounts.
Deliver support and service communications.
When you are signed in and explicitly opt in on a store-managed shared aquarium page, register your interest and enable that store to contact you.
Analyze product usage and measure feature performance.
Run marketing and sponsored campaigns where legally permitted.
Comply with legal obligations and enforce platform rules.

4. Market Research and Industry Insights

We may produce and commercialize aggregated and de-identified insights for market intelligence, trend analysis, and strategic industry research.

Outputs are aggregated (for example by region, category, or trend).
Direct identifiers are removed before de-identification workflows.
Partners are contractually prohibited from re-identifying individuals.

If data can still reasonably identify a person, we treat it as personal data and apply this policy.

5. Advertising and Brand Campaigns

We may deliver marketing and sponsored campaigns, including brand campaigns relevant to audience segments based on activity in the Service.

On-platform campaigns: sponsored placements and brand messages inside AquaSimple.
Off-platform campaigns: where allowed, campaigns via ad partners and ad-tech providers.
No plain identifiable list sales: we do not sell plain customer lists containing direct identifiers like full name, email, or phone number.

In some jurisdictions, certain advertising disclosures may be legally classified as "sale" or "sharing" even without monetary exchange.

6. Cookies and Similar Technologies

We use cookies, SDKs, pixels, and similar technologies for core service functionality, analytics, and marketing.

Where required by law (including in the EEA/UK), we request consent before placing non-essential analytics or advertising technologies.

7. Legal Bases (EEA/UK/Switzerland)

Where required, we rely on one or more of these legal bases:

Contract: providing the Service you requested.
Legitimate interests: security, fraud prevention, and product analytics.
Consent: non-essential cookies and certain marketing activities.
Legal obligation: compliance with applicable laws.

You may object to processing based on legitimate interests, including direct marketing, subject to applicable law.

8. How We Share Data

Service providers (hosting, analytics, support, communications, payments).
Store operators for store-managed shared aquarium pages, when you submit the contact form or provide logged-in opt-in consent.
Marketing and advertising partners.
Business partners for sponsored campaigns and co-marketing.
Authorities where disclosure is legally required.
Corporate transaction counterparties (for example merger or acquisition).

9. International Data Transfers

We may process data outside your country. For transfers from the EEA/UK/Switzerland, we use recognized safeguards where required, including contractual clauses and related protections.

10. Retention

We retain personal data for as long as needed for service delivery, legal compliance, security, and legitimate business purposes. Retention periods vary by data category.

11. Your Privacy Rights

Depending on your location, you may have rights to:

Access, correct, delete, and port your personal data.
Object to or restrict processing.
Withdraw consent where processing is consent-based.
Opt out of targeted advertising.
Opt out of "sale" or "sharing" where those legal definitions apply.
Where required by law, use recognized browser-based universal opt-out preference signals (for example, Global Privacy Control).
Appeal denied requests where applicable.

If you are in the EEA/UK/Switzerland, you may also lodge a complaint with your local data protection authority.

To submit a request, contact contact@aquasimple.pt with subject "Privacy Request" and your request type (for example "Access", "Delete", "Do Not Sell or Share", or "Opt Out of Targeted Ads"). We may verify your identity before fulfilling requests.

12. Children

The Service is not directed to children under 13 (or older minimum age where required by local law). If we learn that we collected personal data without valid authorization, we will delete it.

13. Security

We use reasonable technical and organizational safeguards. No transmission or storage method is fully secure.

14. Changes to This Policy

We may update this policy from time to time. Material updates will be posted with a revised "Last updated" date.

15. Contact

For privacy questions or rights requests, contact contact@aquasimple.pt.