Privacy policy
Last updated: 17 October 2026
Sprat is operated by Savvy Apps Ltd. This policy explains what personal data we collect, why, and what you can do about it.
Who we are
Savvy Apps Ltd is the data controller for the personal data described here.
| Company | Savvy Apps Ltd |
| Registered in | England and Wales, company number 17406534 |
| Registered office | Unit A, 82 James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE |
| Contact | hello@savvyapps.uk |
| ICO registration | ZC231616 |
The short version
We collect an email address so you can sign in. If you use the app, we store the marks you add, the sessions you log and the fish you catch — because that record is the product.
We do not sell your data, we do not run ads, and we do not share your fishing spots with anyone.
What we collect, and why
If you join the waiting list
This section is not yet in effect. The waiting list is not open, and no email addresses are being collected. It is published here so it is in place before it opens.
| What | Why | Lawful basis |
|---|---|---|
| Your email address | To tell you when the app opens, and to send the occasional thing worth reading before then | Consent. You ticked a box saying so, and you can withdraw it at any time |
| The date and wording you consented to | So we can show what you agreed to if you ask | Consent, and our legal obligation to keep the record |
| Which platform you use, if you tell us | To send you the right link when it opens | Consent |
| Where you fish, if you tell us | To make sure your part of the coast is covered before you install | Consent |
Every marketing email has an unsubscribe link. It works immediately, and once you have unsubscribed we keep a note of your address so we do not accidentally add you again.
If you use the app
| What | Why | Lawful basis |
|---|---|---|
| Your email address | Signing in. We use a link rather than a password | Performance of our contract with you |
| Marks you add | They are yours, they are private by default, and they are the point | Contract |
| Sessions, catches and blanks you log | Your journal, and the advice gets better as the record grows | Contract |
| Photos you add to a catch | Your record of the fish | Contract |
| Your location, if you allow it | To find marks near you. The app works without it — you can search or browse by county | Consent, which you give through your device and can withdraw in your device settings |
| Which conditions were showing when you logged | So the advice can be checked against what actually happened | Contract |
If you tell us the advice was wrong, we store what you tapped and which card it was about. If you answer the question at the end of a session, we store that answer against the same card. If you send us an idea or a question, we store what you wrote.
All of it is attached to the card and the rules behind it, not to a picture of you, and all of it goes when your account does.
When something in the app breaks, it sends us an error report so we can fix it. A report says what failed and where in our code, the page it happened on with anything that identifies you or a mark taken out, and your browser and device type. It does not include your name, your email address, your IP address or your location. If you have no signal, the report waits on your phone until it can be sent.
You can switch this off at any time, in Account → Send error reports. It is on unless you switch it off. Once it is off, your phone does not create or keep error reports at all. Failures on our own servers are still recorded, without anything that identifies you.
What we do not collect
We do not use analytics or tracking cookies on our website. We do not build advertising profiles. We do not buy data about you from anyone else.
The only cookie the app sets is the one that keeps you signed in. It is necessary for the service to work, so it does not require your consent.
Your marks are private
A mark you add is visible only to you. It is not shown to other anglers, it is not published, and it does not appear in search results.
Some marks in the app are public — beaches, headlands and harbours from Ordnance Survey open data. Those were public before we used them. Yours are not, and they will not become public without you deliberately choosing to make them so.
Photos have their location data removed when you upload them, so a photo cannot reveal where you were.
How the advice improves
When you log what happened, that outcome contributes to how the app advises at that mark in those conditions.
This is not shown to anyone as yours. Nobody sees that you fished somewhere, or what you caught. What contributes is the fact of an outcome at a public mark in a set of conditions.
If you delete your account we delete your outcomes along with everything else. We do not keep an anonymised copy. Nothing in the app reads one angler’s outcomes against another’s, so there would be nothing for a copy to feed.
When you tap Buy
The kit on a card is what we think you should use. Where we can, we link it to a shop that stocks it, and if you buy something we may earn a commission. That is how the app is paid for.
Tapping Buy sends you to the retailer through Awin, an affiliate network. Awin is told which click it was and which product — not who you are. No name, no email, no account.
From the moment you arrive you are on the retailer’s site, under their rules. They and Awin will set their own cookies there. We do not set any, and we cannot see what you do once you have left.
If a sale happens we are told that it happened and what it was worth, so that we can be paid. We are not told anything about you.
Who else processes your data
We use a small number of suppliers to run Sprat. Each processes data only on our instructions.
| Railway | Hosting and our database |
| Cloudflare | Our domains, and storage for catch photos |
| Resend | Sending email — sign-in links and, if you are on the list, our emails to you |
| Sentry | Error reports, so we can find and fix what breaks |
| UK Hydrographic Office, Open-Meteo | Tide and marine conditions. We ask about a place, never about you |
The app and its database run in Amsterdam. Sign-in emails are sent from Ireland. Error reports are held in Germany. Awin is in the UK. Catch photos are held by Cloudflare, which does not pin them to a particular country.
Most of that sits inside the UK or the EEA, which UK law already treats as safe without further arrangements. For anything outside, we rely on our suppliers’ standard data protection terms.
How long we keep things
| Waiting list, unconfirmed | 30 days, then deleted |
| Waiting list, confirmed | Until you unsubscribe, or until we launch and a reasonable period after |
| Unsubscribed addresses | We keep a record so we do not contact you again |
| Your account and everything in it | For as long as you have an account |
| After you delete your account | Removed promptly. Backups age out within 30 days |
| A catch logged with no signal | Held on your phone until it syncs. If it cannot sync within 30 days it is removed, and the app tells you |
| Error reports | Up to 90 days, then deleted automatically |
| An error report made with no signal | Held on your phone until it can be sent, and never made at all if you have switched error reports off |
We keep a daily backup of our database so we can recover from a failure. Each backup is deleted after 14 days. If you delete your account, your data is removed from the live service straight away, and disappears from our backups as they expire — within 14 days, and never more than 30.
Your rights
Under UK data protection law you can ask us to:
- tell you what we hold about you, and give you a copy
- correct anything that is wrong
- delete your data
- stop or limit what we do with it
- send your data elsewhere in a portable format
- object to how we are using it
And you can withdraw consent at any time where consent is the basis — unsubscribe for email, device settings for location.
Email hello@savvyapps.uk. We will respond within one month.
Complaints
If you are unhappy with how we have handled your data, tell us first — hello@savvyapps.uk. We will acknowledge your complaint within 30 days and do our best to put it right.
If you are still unhappy, you can complain to the Information Commissioner’s Office, the UK’s data protection regulator.
| Website | ico.org.uk/make-a-complaint |
| Helpline | 0303 123 1113 |
| Post | Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |
Children
Sprat is not designed for children and we ask that under-18s do not create an account without a parent or guardian’s involvement.
We do not knowingly collect data from children. If you believe a child has given us their data, email hello@savvyapps.uk and we will remove it.
Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects how we use your data, we will tell you — by email if we hold your address.
A note on safety
Sprat gives advice about fishing on the coast, which can be dangerous. The app is a decision-support tool, not a substitute for your own judgment about conditions. Nothing in it replaces checking the sea in front of you.
This is not a data protection matter, but it is worth saying here as well as in our terms.