MRIYA.FISH Privacy Policy
The MRIYA.FISH app has no ads, no user accounts and no third-party analytics. Your phone's location never leaves the device, and trip logs and depth recordings reach us only if you agree.
1. Who we are
The data controller is Oleksandr Nedobeha, a sole proprietor (FOP) registered in Ukraine, 10/9 Shota Rustaveli St., Bucha, Kyiv Oblast 08292, Ukraine. Email: mriyafish@gmail.com.
This policy covers the MRIYA.FISH app for Android (package mriya.fish.app) and the update server ota.mriya.fish that the app talks to. This version takes effect on 15 October 2026.
2. What data we process and why
| Data | When | Where it goes | Why | Legal basis |
|---|---|---|---|---|
| Phone location | While the app is open on screen | Stays on the phone | "You are here" marker, compass, direction and distance to the boat, lake detection; on Android 11 and older, finding the boat over Bluetooth | Providing the app's features |
| Boat PINs, spots, lakes, depth maps, settings | While you use the app | Only on the phone and on the boat; PINs are excluded from Google backup | Running the app | Providing the app's features |
| Firmware update data: boat MAC address, board, firmware versions, channel, result, error text, duration, app version, phone model and Android version | When you start a firmware update | Server ota.mriya.fish | Deliver the right firmware, investigate failed updates, keep track of versions in use | Performance of the contract for the boat you bought; legitimate interest |
| Trip logs and depth recordings: boat coordinates every second, modes, autopilot parameters, depth points with coordinates and time, boat MAC address, versions, phone model | At the end of a trip or depth recording while the phone is connected to the boat, only if you turned sending on | Server ota.mriya.fish | Diagnosing and improving the autopilot, sonar and depth maps | Your consent |
| Country derived from the IP address | Together with update data and trip logs | Server; the IP address itself is not stored in the database | Statistics by country | Legitimate interest |
| Web server log: IP address, time, requested address (may include the boat MAC address and phone model) | On every request to the server | Server | Security and troubleshooting | Legitimate interest |
| Board service log: distance, running hours, errors, operation outside permitted limits, firmware history, boat MAC address (no coordinates) | When you make a warranty claim: you send a report from the app or hand the boat over for service | Server ota.mriya.fish or our service | Assessing warranty claims | Performance of the contract (warranty); legitimate interest |
The check for new firmware on connect is anonymous: the app sends only the board type and the update channel.
The app asks for consent to send trip logs and depth recordings on first launch; sending is off by default. Only trips and depth recordings that end after you turn it on are sent. You can change your choice at any time in the app settings. Withdrawing consent does not affect processing that took place before.
Files you share with the Share button (depth maps, backups) go only to the recipient you choose.
What we do not do: we do not sell data, show ads, use advertising IDs or third-party analytics. The app has no user accounts and does not collect your name, email or phone number.
3. Third-party services
- Hosting. The server ota.mriya.fish is hosted by netcup GmbH in Germany. The host acts as a processor and does not use the data for its own purposes.
- Maps. Map tiles are downloaded directly from the provider's servers, which see your phone's IP address and the map area you are viewing. Sources: OpenStreetMap, Esri (satellite imagery), OpenTopoMap, MapTiler (only with your own key). These requests are governed by the providers' own policies.
- Google. The app is installed and updated through Google Play. Phone location is determined by Google Play services according to your Android location settings. Data processed by Google is covered by Google's privacy policy.
- Country lookup. The DB-IP address database is stored on our server; your IP addresses are not sent to DB-IP.
We do not pass data to any other third party, except where the law requires it, for example a court order.
4. Where data is kept and for how long
The server is located in Germany, in the European Union.
| Data | Retention |
|---|---|
| Trip logs and depth recordings | 24 months from receipt |
| Firmware update and download data | 24 months |
| Web server log | 14 days |
| Data on your phone | Until you delete it or uninstall the app |
| Board service log reports | Warranty period plus 3 years |
When the period ends, data is deleted automatically. Instead of being deleted, trip logs and depth recordings may be anonymised; the same applies when you ask us to delete your data. To anonymise them, we remove the boat MAC address and phone model, keep only the month instead of the exact date, and convert trip-log coordinates to positions relative to the starting point. Anonymised data no longer relates to a specific person, so we may keep it without a time limit and use it to improve the autopilot, the sonar and lake maps. We may likewise keep anonymous statistics, such as update counts per version, for longer.
5. Security
All data between the app and the server travels over HTTPS only. Only the controller has access to the server, by cryptographic key. Trip logs and depth recordings are not reachable over the internet. No protection method is perfect; we will report data incidents as the law requires.
6. Your rights
Under Article 8 of the Law of Ukraine "On Personal Data Protection", and for EU residents also under the GDPR, you have the right to:
- know what data about you we process and get a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to processing;
- withdraw your consent to sending trip logs and depth recordings;
- complain to the Ukrainian Parliament Commissioner for Human Rights or to the supervisory authority of the EU country where you live.
To use any of these rights, email mriyafish@gmail.com and include the boat ID shown on the app's About screen. We do not know who owns a boat, so we can find data only by this ID. We reply within 30 days.
7. Children
The app is meant for adults and is not directed at children under 16. We do not knowingly collect children's data.
8. Changes to this policy
We publish each new version on this page with its effective date. We will announce significant changes, such as new kinds of data, in the app before they take effect.
9. Contact
FOP Oleksandr Nedobeha, 10/9 Shota Rustaveli St., Bucha, Kyiv Oblast 08292, Ukraine. Email: mriyafish@gmail.com. Website: https://mriya.fish.