Privacy Policy

1. Introduction

FishMarket.ai ("FishMarket.ai", "we", "us", or "our") operates the FishMarket.ai mobile application (the "App") and the website located at fishmarket.ai (together, the "Service"), which let customers browse, order, and pay for seafood and related products for delivery.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights you have. By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this Policy.

We are based in the United Arab Emirates and process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL"). If you access the Service from outside the UAE, other local data protection laws (such as the EU/UK GDPR) may also apply to you, and we honor the applicable rights described in Section 11 regardless of where you are located.

2. Information We Collect

2.1 Information you provide to us

• Account information: name, email address, phone number, and password (or sign-in token if you use Google Sign-In).
• Delivery details: delivery address, building/area, and any delivery instructions or special requests you add to an order.
• Order information: items purchased, quantities, order history, and invoices.
• Communications: messages you send to our support team, and any content of reviews, ratings, or wishlist items.
• Photos/images: if you choose to upload a profile picture or attach an image (e.g. to a support request), using your device camera or photo library.

2.2 Information collected automatically

• Device information: device model, operating system and version, unique device/app identifiers, and general app diagnostics.
• Usage data: pages/screens viewed, features used, buttons tapped, and time spent in the App, collected via Firebase Analytics.
• Crash and performance data: crash logs and stack traces, collected via Firebase Crashlytics, to help us fix bugs.
• Location data: precise or approximate location, only when you grant permission — see Section 4.
• Log data: IP address, access times, and app version, generated automatically when you use the Service.

2.3 Information from third parties

• Google Sign-In: if you choose to sign in with Google, we receive your name, email address, and profile photo from Google, as permitted by your Google account settings.
• Payment processor (Geidea): confirmation of payment status and a masked/tokenized reference to your payment method — see Section 6.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account, and authenticate you when you sign in;
• Process, fulfil, and deliver your orders, and calculate pricing, weight-based totals, and invoices;
• Communicate with you about orders, delivery updates, order status, and customer support;
• Show your saved/nearby delivery address on the in-app map for accurate delivery;
• Improve, troubleshoot, and secure the App, including diagnosing crashes and measuring feature usage;
• Detect, prevent, and investigate fraud, abuse, or security incidents;
• Comply with legal obligations, such as tax and consumer-protection recordkeeping; and
• Send you service-related notices and, where you have opted in, promotional offers (which you can opt out of at any time).

4. Location Data

The App requests location permission (fine or coarse) so you can drop a pin or confirm your delivery address on the map when placing an order. Location is:

• Only accessed while you are actively using the relevant screen (e.g. the address picker), not continuously in the background;
• Used solely to help you select an accurate delivery location and estimate delivery availability/fees;
• Never sold, and never used for behavioral advertising.

You can deny or revoke location permission at any time from your device settings; you will then need to enter your delivery address manually.

5. Camera & Photos

If you choose to attach a photo (for example, a profile picture or an image in a support message), the App will ask for camera or photo-library access. This is entirely optional and only activates when you tap an "add photo" control — we do not access your camera or gallery without your explicit action.

6. Payments

Card payments are processed by Geidea, a licensed third-party payment service provider. When you pay by card:

• Your full card number, expiry date, and CVV are entered directly into Geidea's secure payment form and are not stored on our servers;
• We receive only a payment confirmation, transaction reference, and (where applicable) a masked card number (e.g. last 4 digits) to show on your order history/invoice;
• Geidea processes and secures your payment data under its own privacy policy and applicable card-industry (PCI-DSS) security standards.

7. Third-Party Services

We use the following third-party services to operate the App. Each provider processes data under its own privacy policy:

8. How We Share Information

We do not sell your personal data. We share information only:

• With the third-party service providers listed in Section 7, solely to operate the Service;
• With our delivery/logistics staff or partners, limited to what is needed to fulfil your order (name, phone number, delivery address);
• With professional advisors (e.g. auditors, lawyers) where necessary for our legitimate business purposes;
• If required by law, regulation, legal process, or governmental request; or
• In connection with a merger, acquisition, or sale of assets, subject to this Policy continuing to apply to your data.

9. Data Storage & Security

Your data is stored on secure cloud infrastructure (including Firebase/Google Cloud services). We apply reasonable technical and organizational measures — such as encryption in transit (HTTPS/TLS), access controls, and secure authentication — to protect your data against unauthorized access, loss, or misuse. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Data Retention

We retain your account and order data for as long as your account is active and for a reasonable period afterward to comply with tax, accounting, and legal obligations, resolve disputes, and enforce our agreements. Analytics and crash data are retained by our providers according to their own retention schedules (typically up to 14 months for Firebase Analytics). You may request deletion of your account data at any time as described in Section 11.

11. Your Rights & Choices

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data (editable directly in your Profile, or by contacting us);
• Delete your account and associated personal data;
• Withdraw consent for optional data uses (e.g. location, marketing communications) at any time;
• Object to or restrict certain processing of your data; and
• Receive a copy of your data in a portable format, where technically feasible.

To exercise any of these rights, email us at support@fishmarket.ai. We will respond within a reasonable time and in line with UAE PDPL requirements.

12. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

13. International Data Transfers

Some of our service providers (e.g. Firebase/Google Cloud) may process and store data on servers located outside the UAE. Where this occurs, we take reasonable steps to ensure your data receives an equivalent level of protection, consistent with UAE PDPL requirements for cross-border data transfers.

14. App Permissions Summary

You can review or change any of these permissions at any time in your device's Settings.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Last updated" date above, and for material changes we will provide additional notice (such as an in-app notification) before the changes take effect.

16. Contact Us