Privacy Policy

Effective November 14, 2026

1. Who processes your data

This policy explains how personal data of users of the WatchFlow (WatchFlow) iPhone app and this website (together, the “Service”) is processed.

The data controller is [operator name], [registration number], [address]. Contact: [email protected].

We process personal data in accordance with Russian Federal Law No. 152-FZ “On Personal Data” and other applicable law. By using the Service you agree to this policy. By creating an account you consent to the processing described below.

2. What we collect and why

Data	Purpose
Phone number and password	Sign-up and sign-in. Your number is your login and is never shown to other users.
Profile: name, handle, tagline, bio, profile photo, home water	Shown to other users so they know who’s talking.
Content: messages in club channels and direct messages, reports, comments, photos, videos, voice messages, video messages, reactions and “Bites”	Delivering and displaying what you post. Reports may be entered into the club’s “Trophy of the week”.
Secret spots: name, coordinates, note	Storing your private places on the map. Visible only to you. Without an account they stay on your phone; after you sign in they move to your account.
Approximate location (to about one kilometer)	Sorting clubs by distance and showing spots nearby. Only while the app is open and only if you allow it. Rounded coordinates are sent with the club list request. We don’t keep a location history.
Memberships and connections: your clubs, your flock, blocked users	Running clubs, the report feed and direct messages.
Settings: who can message you, hidden words	Applying your privacy settings.
Reports you submit	Moderation and enforcing the Community Rules.
Push notification token	Sending notifications if you allow them. The token is issued by Apple and does not identify you.
Technical data: IP address, time and parameters of requests to our server	Operating and securing the Service, preventing abuse, fixing bugs.
Support requests	Answering your questions and restoring access.

Legal bases: performance of our agreement with you (the Terms of Use), your consent (location, notifications, camera and photo access) and our legitimate interest in keeping the Service secure.

3. Device permissions

The app asks for access only when an action needs it. Declining doesn’t stop you from using everything else. You can change your choice in iPhone Settings.

• Location, while using the app only, to show nearby spots and the distance to clubs.
• Photos, to attach catch photos and videos. The app sees only the files you pick or the photos you’ve shared with it.
• Camera, to photograph your catch and record video messages.
• Microphone, to record voice and video messages. Recording happens only while you’re recording.
• Notifications, to tell you about new messages and replies.

4. What we don’t do

• We don’t sell your data or share it for advertising.
• We don’t use the device advertising identifier or track you across other companies’ apps and websites.
• We don’t include third-party advertising or analytics libraries.
• We don’t read your contacts or upload your photo library.
• We never show your phone number or secret spots to anyone else.

5. Who can see your data

• All users, including guests without an account, can see your profile, messages in club channels, reports and comments. Don’t post anything there you wouldn’t show a stranger.
• The other person in a direct conversation sees that conversation.
• The club ranger and wardens can pin and delete messages in their club’s channels.
• Only you can see your secret spots, phone number and settings.
• Service providers who help us run the Service: hosting and file storage, and push delivery through Apple Push Notification service. They process data on our behalf and only for these purposes.
• Public authorities, only where and as required by law.

6. Storage and retention

Data is stored on servers located [in the Russian Federation — confirm]. We keep your data while your account exists. After you delete your account, personal data is deleted within 30 days and removed from backups as they rotate, no later than 90 days. We keep longer only what the law requires us to keep.

Data cached in the app itself (clubs, chats you’ve viewed, drafts, guest secret spots) stays on your phone and is erased when you sign out or delete the app.

7. Your rights

You can:

• find out what data we hold about you and get a copy;
• correct it (your profile is editable in the app);
• delete your data and account;
• withdraw consent by turning off permissions in iPhone Settings or deleting your account;
• complain to the data protection authority (in Russia, Roskomnadzor) if you believe we’ve violated your rights.

Send requests to [email protected] from the phone number linked to your account, or include that number in the e-mail. We reply within 10 business days.

8. Deleting your account

In the app: Profile → Settings → Delete account. Deletion can’t be undone. Your profile, phone number, secret spots, settings and direct messages are deleted. Messages and reports in clubs are deleted or anonymized and shown as “Deleted user”.

If you can’t access the app, e-mail [email protected] from the number linked to your account.

9. Age

The Service is for users aged 12 and over. If you’re under 14, use the Service with the consent of a parent or guardian. If you learn that a child under 12 has created an account, contact us and we’ll delete it.

10. Security

Traffic between the app and our server is encrypted (HTTPS). Sign-in keys are stored in the iPhone Keychain. Passwords are never stored in plain text. Only staff who need access to do their job have it.

11. Changes

We may update this policy. The new version will be posted on this page with its effective date. We’ll let you know about significant changes in the app in advance.

12. Contact

[operator name]
[registration number]
[address]
[email protected]