REEF TANK LOG

Privacy Policy.

Effective: October 1, 2026

The short version. Your tanks, readings, corals and notes are stored on your device only. There is no account and no sign-in. We never see your log. One thing does leave your device, and only when you ask for it: if you import an ICP lab report as a PDF or a photo, that file is sent to be read for you — see section 5. A CSV export is read on the phone and goes nowhere. We also collect anonymous usage and crash data to fix bugs, and that data contains none of your entries.

1. Who we are

Reef Tank Log is an aquarium logbook published by CodeEnsis Ltd. ("we", "our", "us"), registered in Cyprus. This policy explains what the app stores, what leaves your device, and the rights you have.

2. What stays on your device

The following lives in the app's local database on your phone. It is never transmitted to our servers:

Tanks you create (name, volume, type, setup date).
Every parameter reading you log (value, parameter, timestamp, test-kit brand).
Dose schedules and the doses you tick off.
Livestock entries (common and scientific name, category, status) and your written journal notes.
Maintenance events (water changes, services, cost, notes) and equipment entries.
App preferences: units, theme, onboarding state, and the date of your last export.

If you uninstall the app, this data is removed with it. We hold no copy and cannot restore it.

3. What we do not collect

No CodeEnsis account or login is created or required.
No reading, tank name, coral name or note is transmitted to CodeEnsis servers. The single exception is a lab report you choose to import as a PDF or a photo, described in section 5.
No contacts, location, camera, photo library or microphone access is requested.
We do not sell or rent data to anyone, and we show no advertising.

4. Analytics and crash reporting

Reef Tank Log uses Google Firebase Analytics and Firebase Crashlytics. These are active in the released app and are used to understand which screens are used and to receive crash reports so we can fix them.

What they receive is limited and non-identifying: app version, operating system version, device model, screen and event names (for example "reading logged" or "paywall shown"), the parameter type of a logged reading, crash stack traces, and a randomly generated app install identifier. They do not receive the values you log, your tank names, your coral names, or your notes.

The install identifier is generated by the app, is not linked to your name, email, Apple ID or Google account, and is reset if you uninstall the app.

Firebase is a service of Google LLC; Google's practices are described at policies.google.com/privacy. You can stop all of this collection by uninstalling the app.

5. Importing an ICP lab report

Reef Tank Log can read a water analysis from an ICP laboratory - Oceamo, Fauna Marin, ATI, Triton - and turn its table into readings. There are two paths, and they are not the same:

A CSV export is parsed on your phone by the app itself. Nothing leaves the device.
A PDF or a photo of a report is sent over an encrypted connection to a CodeEnsis function on Google Cloud, which passes it to OpenAI's API to transcribe the table. The transcription comes back to your phone, which maps the elements and converts the units. You see every value and choose what to save.

This happens only for a file you pick yourself, once per file you pick. The app never uploads your log, your tanks, your corals or your notes, and there is nothing in it that uploads anything on its own.

What is sent is the file as it is - the measured values, the analysis number and the dates, and anything else the laboratory printed on it, which at some labs includes your name or an address. We do not look for that and do not use it, but we cannot remove it from your file either. If that matters to you, import the lab's CSV export instead, or enter the values by hand.

Neither CodeEnsis nor Google Cloud keeps the file: it is held in memory for the few seconds the request takes and is gone when the request ends. We store no copy, and the readings that come out of it are written only to your phone. Under OpenAI's API terms the file is not used to train OpenAI's models, and we have not opted in to share it; OpenAI may keep API data for up to 30 days to detect abuse. See OpenAI's privacy policy.

The function is reachable only by the app itself, which proves it is a genuine, unmodified build through Apple's App Attest and Google's Play Integrity before any file is accepted.

6. Purchases

In-app purchases are processed by Apple or Google, and are managed on our side through RevenueCat, Inc. RevenueCat receives the anonymous install identifier described above and the purchase receipt issued by the store, so that Pro can be restored on your devices. It does not receive your log data.

We never see or handle your card details. Payment is handled entirely by the App Store or Google Play. RevenueCat's policy: revenuecat.com/privacy.

7. Permissions the app asks for

Notifications - only if you turn on a dose reminder, and only asked at that moment. Reminders are scheduled locally on the device; nothing is sent through a server. Declining permission does not prevent you from creating a schedule, it just means no reminder is delivered.
File access - only via the system share sheet and file picker, when you export or restore a backup or import a lab report. The app receives only the file you pick.

You can revoke any permission at any time in your device's system settings.

8. Backup and export

Export writes a single .reeflog.json file containing your full log and hands it to the operating system's standard share interface. You choose where it goes - Files, iCloud Drive, Google Drive, email, anywhere. That destination is governed by its own privacy policy, not ours. The file never passes through CodeEnsis.

9. Children

Reef Tank Log is a general-purpose hobby app and is not directed at children under 13. We do not knowingly collect data from children under 13.

10. Your rights

Because we hold no personal data on our servers, there is no CodeEnsis-side account to access, export or delete. Within the app you can at any time:

Edit or delete any individual reading from the reading history.
Delete a dose schedule, a livestock entry and its journal, a maintenance record, or a piece of equipment.
Delete a tank, which removes everything logged against it.
Export a full copy of your data as a portable JSON file.
Uninstall the app to remove everything.

If you are in the EEA or UK and wish to request deletion of the anonymous analytics records associated with your install identifier, contact us and we will coordinate with Google's data-deletion process on your behalf.

11. Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with an updated "Effective" date above. Continuing to use Reef Tank Log after a change means you accept the updated policy.

12. Contact

Questions or requests about this policy: support@codeensis.com. A human reads every message.