Privacy policy

Version 1.4 · last updated 5 September 2026 · applies to One Fish Two Fish for iPhone and iPad

What the app stores

Everything you put into One Fish Two Fish is written to the app's own private storage area on your device, and stays there. That includes:

• Your tanks — names, volumes, chosen profile and threshold settings.
• Water test readings: pH, ammonia, nitrite, nitrate, temperature, and the date of each test.
• Your tap or RO water baseline, if you record one.
• Diary entries — water changes, feeding, dosing, maintenance, livestock, plants, health notes and anything you type into a note.
• Photos you attach to a diary entry, copied into the app's own storage so they survive you tidying your camera roll.
• Reminder preferences and the schedule worked out from your logged history.

No part of that leaves the device. It is not uploaded, synced to a service run by us, or transmitted anywhere.

What the app does not do

• No accounts. There is no sign-up, sign-in, email address, password or third-party login.
• No analytics or telemetry. No usage tracking, no event logging, no session recording, no crash-reporting SDK.
• No advertising. No ad networks, no advertising identifier (IDFA), no App Tracking Transparency prompt, because there is nothing to track.
• No tracking across apps or websites, as Apple defines tracking.
• No selling or sharing of data, including as those terms are used in the California Consumer Privacy Act.
• No location, contacts, microphone or health data. The app never asks for any of these permissions.
• No camera or photo access unless you attach a photo. Nothing is requested up front, and both are optional — see Photos below.

Notifications

If you turn on water-change reminders, the app asks iOS for permission to show notifications. These are local notifications: they are scheduled on your device by the app and delivered by iOS at the right time. There is no push server, no device token is registered with anyone, and the content of a reminder never leaves the phone.

Declining the permission simply means no reminders. Everything else in the app carries on working, and you can change your mind later in iOS Settings.

Photos

A diary entry can have a photo attached — a tank, a fish, a test vial. Tapping to add one is what makes iOS ask for the camera or your photo library, and it asks the first time only. Nothing is requested when you open the app, and never attaching a photo means never being asked at all.

When you pick a photo the app copies it into its own private storage and uses that copy, so the entry does not break if you later delete the original from your camera roll. That copy is treated like everything else here: it stays on the device, is not uploaded, and is not examined, scanned or analysed. The app reads no other photo in your library — only the single image you chose. Deleting the diary entry deletes the app's copy and leaves your camera roll untouched.

Declining either permission means diary entries without photos, and nothing else changes. You can grant or withdraw both at any time in iOS Settings, under One Fish Two Fish.

Exporting your own data

You can export your tanks as a CSV file or a full JSON backup. The file is written on your device and handed to the standard iOS share sheet, so you choose where it goes — Files, Mail, a cloud drive, or nowhere at all. That is the one way data leaves the device, it happens only when you ask for it, and where it lands is your choice rather than ours. We never see it.

Backups

Because the app's data lives in its own storage area on the device, it is included in whatever backup you have configured for the device itself — an encrypted iCloud backup or a local backup to a computer. Those backups are handled by Apple under Apple's privacy policy, not by us, and we have no access to them.

If you have device backups switched off and you delete the app, the data is gone. That is the trade for having no cloud copy anywhere.

Deleting your data

Delete a tank inside the app to remove that tank and its history, or delete the app from your device to remove everything at once. No request to us is needed, and there is no remaining copy for us to erase — we never had one.

Children

The app is suitable for all ages and collects nothing from anyone, children included. It has no chat, no user-generated content visible to others, no external links inside the app that lead to purchasing, and no advertising.

Third parties

The app bundles open-source software libraries that run entirely on your device and do not send data anywhere. It contains no third-party analytics, attribution, advertising or crash-reporting services.

Distribution happens through Apple's App Store. Apple collects its own information about downloads, purchases and crashes under Apple's privacy policy — that is between you and Apple, and we receive only the anonymous, aggregated sales and crash figures Apple shows every developer.

The App Store privacy label

On the App Store this app's privacy label reads Data Not Collected, and that is consistent with everything above. Under Apple's definition, information is only “collected” if it is transmitted off the device. Your tanks, readings, diary entries and photos are held in the app's own storage and are never transmitted anywhere, so there is nothing to declare — no data types, no tracking, and no third-party SDK collecting on our behalf.

This website

The site these pages are served from is covered by its own document, the website privacy notice. The short version: no cookies, no analytics, no third-party anything, and one form that asks for an email address so it can tell you when the app is released.

Your rights

Data protection law — including the UK GDPR and the EU GDPR — gives you rights of access, correction, erasure and portability over personal data a company holds about you. We hold none, so there is nothing to disclose, correct or export. Your tank data is in your hands already, on your own device.

The one exception is an email address you hand over yourself — through the waitlist form or by emailing us — which is a matter for the website rather than the app, and is set out in the website privacy notice. Ask and it is deleted immediately.

“We” throughout this policy means Shaun Miller, trading as In A Click IT, the developer of One Fish Two Fish and the data controller for the one case above. Contact details are at the foot of this page.

Changes to this policy

If the app ever gains a feature that changes any of the above — optional cloud sync, for instance — this policy will be updated before that version ships, the date at the top will change, and the change will be described in the App Store release notes. Any such feature would be opt-in, off by default.

Contact

Questions about this policy, or about privacy in the app, go to hello@onefishtwofish.app.

In the UK you also have the right to complain to the Information Commissioner's Office.