What we hold,
and who can see it.
A plain-language account of what ReefGPT collects, who can reach it, and why, not a wall of legalese.
What we collect
Your account email and password (handled by Supabase Auth, we never see your raw password). Tank parameter readings you log manually or sync from a Neptune Apex controller. Your livestock, equipment, and tank-note entries. The full text of your conversations with the AI assistant. Any photos you upload of your tank or livestock. If you connect a Neptune Apex controller, your tank's serial number (not your Apex login. We never ask for or store that).
Who can see it
You, always. During this early-access trial, the ReefGPT founder can also view account data, including chat history, tank data, and photos. Through an internal admin dashboard, solely to provide support, debug issues, and check that the AI is giving safe, accurate advice. We are not a large company with a support team; this is a small-scale trial and that visibility is how issues actually get caught and fixed. We do not sell your data, and we do not share it with advertisers.
Who else touches it (service providers)
Supabase hosts our database, authentication, and file storage. Groq and Google Gemini process your chat messages and relevant tank data to generate the AI assistant's responses. Resend sends account emails (welcome, password reset, security alerts). Sentry receives error reports when something in the app breaks. Cloudflare Turnstile runs the verification check on the login and signup forms, which exists to stop automated signups from using up the email and AI capacity shared by everyone; it sees the technical signals it needs to tell a browser from a script, and it is not used to track you across sites. Each of these providers only receives what's necessary to do that job. None of them are permitted to use your data for their own purposes.
What we send when something breaks
When the app hits an error, we send a report to Sentry so we can find and fix it without waiting for you to notice and tell us. That report contains the error itself, where in the code it happened, your account's user ID, and the surrounding technical log lines. Those lines can include details like which database query failed or your Apex serial number. They deliberately do not include your chat messages, your photos, your email address, your password, or your IP address. We turned those off on purpose.
How long we keep it
For as long as your account exists. Deleting your account is self-serve: open Settings and use Delete Account. It removes your readings, livestock, notes, dosing, chat history and photos along with the login itself, it is irreversible, and there is no recovery window and no backup we can restore from. If you would rather we did it for you, email us (below).
Early access note
ReefGPT is in early access and this policy will evolve as the product matures, including moving toward more formal data-handling practices (audit logging of admin access, automated backups, and eventually a fully drafted legal policy) as the user base grows beyond a small trial.
Questions or deletion requests
Email support@reefgpt.net.