Privacy Policy

1. Information we collect

• Account details. When you sign in with Google we receive your email address, name and profile picture. We store a username, display name, optional bio, avatar and banner in your AquaKeep profile.
• Content you create. Tanks, water parameter logs, reminders, posts, comments, club and event submissions, marketplace listings, reviews and direct messages, along with any images you upload.
• Activity records. Club memberships, event RSVPs, marketplace inquiries and a security activity log of privileged actions on your own account.
• Technical data. Basic request and error information, referral and UTM campaign values, landing path, device category and a pseudonymous analytics identifier.

A postal code you type to find nearby events is used for that single search and is not saved to your profile.

2. How we use your information

• To create and secure your account and show your profile to other members.
• To deliver the features you use: tank tracking, reminders, feed, clubs, events, marketplace and messages.
• To send in-app notifications about replies, messages and marketplace activity.
• To keep the community safe: reviewing submissions, handling reports and preventing abuse.
• To fix problems and improve the app.

We do not sell your personal information, and we do not use your data to train AI models.

3. Where your data is stored (cloud infrastructure)

AquaKeep runs on managed cloud infrastructure provided through Lovable Cloud, which uses Supabase (PostgreSQL database, authentication and file storage) as its backend, with hosting and content delivery handled by our web hosting provider. Data may be processed on servers located in the United States and the European Union.

Access to the database is protected by row-level security rules so that private information — your messages, tank logs, reminders and notification settings — is readable only by you and, where strictly necessary, by AquaKeep administrators for safety and support. Uploaded images are stored in a private bucket and served through time-limited links. Passwords are never stored by us: sign-in is handled by Google and our authentication provider.

4. Automated safety checks

Everything you share is checked for safety automatically. That includes posts, replies, listings, profile names, bios and photos, club and event submissions, and your direct messages and the photos you send in them.

Each item is first compared against a list of blocked words, then sent to an AI model through the Lovable AI Gateway (currently a Google Gemini model). The model rates it for things like sexual content, hate speech, harassment, violence, scams, illegal wildlife trade and spam. Content that clearly breaks our rules is not published. Content the check is unsure about is held for a person on our team to review, and messages may be flagged to our team. We keep the result with the content so reviewers can see why. Content sent for a check is used only for that check and is not used to train the model.

Child sexual abuse material. If we find apparent child sexual abuse material, we preserve it, suspend the account and report it to the National Center for Missing & Exploited Children (NCMEC), as US law requires (18 U.S.C. § 2258A).

The AquaKeep AI assistant is separate: when you ask it a question, your message and the relevant tank details you have saved are sent to the AI provider to generate an answer. Your conversation is stored in your account so you can return to it.

5. What other people can see

Posts, comments, public club pages, events and marketplace listings are visible to anyone browsing AquaKeep, including people who are not signed in. Your profile, username, avatar, reputation and badges are public. Direct messages are visible only to you and the person you are talking to. Tanks, water logs, reminders and notification settings are private to your account.

6. Retention and deletion

We keep your data while your account is active. You can edit or delete your own content at any time. Ask us to delete your account and we will remove your profile and personal content, except records we must keep for safety and abuse prevention (such as moderation history and audit entries), which are kept in a minimised form.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Contact us and we will respond within a reasonable time.

8. Children

AquaKeep is not intended for children under 13. If you believe a child has created an account, contact us and we will remove it.

9. Changes and contact

We will update this page when our practices change and adjust the date above. Questions about privacy, or a request about your data? Email privacy@aquakeep.co.