Privacy Notice

1. Who we are

Jone Rokodinono Nasau is the data controller for the personal information collected through FinFinder. If you have questions about this notice, you can contact us through the Service or at the support details provided on our website.

2. Information we collect

• Account information: name, email address, and authentication details when you sign in or create an account.
• Photos and uploads: images you submit for fish identification, plus any related metadata needed to process the request.
• Usage data: how you interact with the Service, including identification requests, feature usage, and device/browser information.
• Technical data: IP address, browser type, operating system, and cookies or similar identifiers.
• Support data: messages, feedback, or other information you provide when contacting us.

3. How we use your information

• To create and manage your account and provide the Service.
• To process fish identification requests and improve results.
• To handle billing, subscriptions, and customer support.
• To maintain security, prevent fraud, and enforce our Terms.
• To analyse usage and improve the Service.
• To send service-related messages and, where permitted, marketing communications.

4. Legal basis for processing

We process personal information on the basis of: (a) performance of a contract with you, (b) compliance with a legal obligation, (c) our legitimate interests (such as security, fraud prevention, and service improvement), and (d) your consent, where required.

5. Who we share information with

We do not sell your personal information. We share it only with:

• Service providers: hosting, analytics, customer support, and authentication providers that help us operate the Service.
• Payment processor: Paddle acts as our Merchant of Record for subscriptions and payments. Paddle processes payment, billing, tax, subscription management, and invoicing data in accordance with its own privacy practices.
• Professional advisers: lawyers, accountants, or insurers where necessary.
• Authorities: when required by law or to protect our rights.

6. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, we delete or anonymise it.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, and to receive a copy in a portable format. You may also withdraw consent where processing is based on consent. To exercise these rights, contact us using the details provided on the Service.

If you are in the UK or EEA, you also have the right to complain to your local supervisory authority.

8. Security

We use appropriate technical and organisational measures to protect your information, including encryption, access controls, and secure hosting. No system is completely secure, and we cannot guarantee absolute security.

9. Cookies and similar technologies

We use essential cookies to operate the Service and, where permitted, analytics cookies to understand usage. You can manage cookie preferences through your browser settings.

10. International transfers

Your information may be transferred to and processed in countries other than your own. Where this occurs, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions to protect your information.

11. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be posted on this page with the updated date.