Privacy Policy

Effective 2 July 2026

Reefr is operated by KR8IT (“Reefr”, “we”, “us”), based in Queensland, Australia. You can reach us at suren@kr8it.com.

Reefr helps reef-keepers track their tank and get early warnings from their own history. We built it privacy-first: the sensitive details of your tank stay in your private account and are never used for advertising or sold. This policy explains, plainly, what we collect and why.

The one promise that shapes everything

Your sensitive content — your parameter readings, photos, tank and livestock details, and personal notes — stays in your private, per-user account. It is never mixed with other users’ data, and it never flows into our analytics. Our usage analytics only ever record that you did something (e.g. “logged a test”, “opened the camera”), never the actual values, images, or tank specifics.

What we collect, and why

1. Early-access sign-up. When you request early access, we collect your email and a few survey answers (where you are in your reef journey, tank size/type, how long you’ve been keeping, your biggest struggle, which platform you want, and how you heard about us), plus an optional note. We use your email to contact you about early access, and the answers to understand who’s interested. Your email and any free text are stored privately and are never sent to our analytics — we only look at anonymous, aggregated counts. We won’t sell your email or send you marketing beyond early-access updates.

2. Your account and tank data. To run the app we store the data you create — tank readings, photos, catalogue items, notes, and the event log that powers your history and early warnings — in your private, per-user account. Sign-in (email, password) is handled by our authentication provider, Clerk.

3. Anonymous usage analytics. Our mobile app records anonymous, behavioural usage events (e.g. onboarding started, a warning shown) to understand how the app is used and improve it. These are tied to a random anonymous ID — not your name, email, or account — and never include your parameter values, photos, notes, or tank specifics. Your approximate location is not collected and your IP address is discarded. You can turn analytics off anytime in Settings. (Our web app does not currently use analytics.)

4. Crash and error reports. We use Sentry to capture crashes and errors so we can fix them. These reports are scrubbed by design — parameter values, photos, notes, emails, and personal data are stripped before they’re sent.

Nemo, your AI companion

Nemo is powered by Google’s Gemini models. Your tank data is only ever sent to Google when you explicitly ask Nemo something — you tap to chat, take a diagnosis photo, or opt in to photo identification. It is never sent in the background. Before each request, Nemo shows you exactly what it’s about to send. You consent once on first use and can withdraw it anytime in Settings.

We use Google’s paid Gemini API: your inputs and Nemo’s replies are not used to train Google’s models. Google retains API data only briefly for abuse-and-misuse monitoring, then deletes it.

Who we share data with

We don’t sell your data. We use these trusted providers to run Reefr; each only receives what it needs:

• Clerk · Sign-in & accounts
  Your email, password, session
• Fly.io · App hosting & database
  Your account and tank data (hosted in Sydney, Australia)
• Tigris · Photo storage
  Your tank photos (compressed, location metadata stripped)
• Google (Gemini) · Nemo AI
  Only what you send Nemo, on request (paid API tier — no training; brief abuse-monitoring retention)
• Resend · Email
  Your email address, for account & opt-in messages
• Expo · Push notifications
  A device push token (no tank values in notifications)
• PostHog · Anonymous analytics (mobile)
  Anonymous usage events only (no personal or tank data)
• Sentry · Crash reporting
  Scrubbed error reports (no personal or tank content)

Your choices and rights

• Export your data. Download your full tank history (JSON or CSV) from the web app anytime.
• Delete a tank. Permanently delete any tank — its readings, photos (including the image files), and history — from the app.
• Turn off analytics or withdraw AI consent — toggles in Settings.
• Delete your whole account. Settings → Delete account, right in the app — it permanently removes your entire account and all associated data, including photos and your sign-in. This can’t be undone. (You can also email suren@kr8it.com and we’ll do it for you.)
• Depending on where you live, you may have additional rights (to access, correct, or delete your data, or object to processing). Contact us to exercise them.

Data retention

Your tank history is kept for as long as your account is active — that history is what powers your early warnings. When you delete a tank or your account, that data is removed as described above (photo files are hard-deleted from storage). Early-access sign-ups are kept until you ask us to remove them.

Security

Every request to our servers is authenticated and scoped to your account, so no user can access another user’s data. Data is encrypted in transit (TLS) and at rest.

Children

Reefr isn’t directed at children. You must be at least 16 to use Reefr.

International users

Reefr serves reef-keepers worldwide. Your data is stored and processed in Australia and by the providers listed above (which may process data in other countries). By using Reefr you consent to this transfer.

Changes to this policy

We’ll update this page if our practices change, and note the new effective date at the top.

Contact

Questions or requests: suren@kr8it.com.