Privacy Policy
Last updated: 10 November 2026
Aquiio ("the app") is published by MB "Dokao", company code 305621626, registered in Lithuania ("we", "us"). We are the data controller for the limited data described below. Contact: support@aquiio.com.
Short version
- No ads, no tracking, no analytics or advertising SDKs, no account. We never sell data or share it for advertising, and we do not track you across apps or websites.
- Your tanks, tests, photos and notes are stored on your device and in your own iCloud. We cannot see them.
- Only when you use an AI feature does the app send what that feature needs to our server, which passes it to our AI provider, Anthropic, for the answer. Our server does not store the photos or the text.
- To keep free AI fair and to confirm Pro, our server keeps a few random identifiers and usage counts. They are not linked to your name, email or Apple ID.
- AI features can be switched off in Settings → AI. Then nothing is sent.
1. Data that stays with you (device and iCloud)
Tank details, inhabitants, water tests, tasks, events, photos and notes are stored on your device and synced through your private iCloud account (Apple CloudKit private database). If you share a tank, the people you invite reach it through Apple's iCloud sharing with their own iCloud accounts. Apple runs iCloud under its own privacy policy; we have no access to this data. You can export it at any time (Settings → Back up everything, or Export as CSV) and delete it by deleting the records, the app and its iCloud data (iPhone Settings → your name → iCloud → Manage Storage → Aquiio).
Settings such as units and reminder choices are kept on the device. Widgets and the Apple Watch app read a summary from the app on your own devices.
If you connect an aquarium device (Seneye, CoralVue HYDROS, or a Neptune Apex on your Wi-Fi), the app talks directly to that device or its maker's service with the login you enter. The login is stored in the iOS Keychain on your device. These readings never pass through our server; the device maker's own privacy policy applies to its service.
2. Data processed when you use AI features
The AI features are: the health photo check, "Why did my fish die?", Ask Aquiio (assistant), species photo ID, tank photo check, label scan, reading a test from a photo, the optional AI explanation in "Why did it change?", the tank planner, quick log, treatment progress photos and the weekly report. Before the first use of each one, the app shows what it will send. When you use one, the app sends to our server:
- Photos you choose for that feature (a fish, your tank, a product label, a test strip). They are resized on the device and their metadata, such as location and camera details, is removed first.
- Text and choices you provide: the symptoms you pick, your question, your quick-log text.
- Tank context the answer needs: volume, inhabitants (species and counts), water test values, care events and treatments (for "Why did my fish die?" the last 14 days), and for the weekly report a summary the app computes on your device. Tank names and nicknames are never sent.
- Technical data: a random install token the app creates (a UUID that is also the App Store "app account token" of purchases made in the app; it is not your Apple ID, name or email); the identifier of the app's App Attest key and a signed proof from Apple's App Attest service that the request comes from the genuine Aquiio app; and, if you have Pro, the App Store transaction ID of your purchase so we can confirm it with Apple.
Our server runs on Cloudflare Workers. It checks the request, forwards the content to Anthropic's Claude API to generate the answer, returns the answer to your device, and does not store or log the photos, the text or the answer.
Anthropic processes this content as our service provider under its commercial terms. It does not use it to train its models. It deletes API inputs and outputs within 30 days, except where it must keep them longer to enforce its usage policy (content flagged as violating it can be kept for up to 2 years) or where the law requires. Details: Anthropic Privacy Center.
AI answers are suggestions you confirm. Health answers are possible causes, never a diagnosis.
3. What our server keeps
Our server keeps no names, emails, Apple IDs, photos, tank data or AI answers. It keeps only what makes the limits and Pro work:
| Data | Why | How long |
|---|---|---|
| App Attest key identifier and its public key | Check that requests come from the genuine app | 400 days after last use |
| Install token, recorded with that key | Count free AI per install, so reinstalling does not reset it | 400 days after last use |
| AI credit and quick-log counts per key, install token or purchase | Monthly allowances | about 40 days |
| "Free health check used" mark per key and install token | One free check per install | 400 days |
| Pro: which App Attest keys use a purchase (at most 5) | Stop one purchase being shared widely | 400 days after last use |
| Cached Pro status | Fewer calls to Apple | 1 hour |
| If enabled: Apple's App Attest fraud-risk number for a key | Stop free AI on devices that create many fake installs | with the key record |
| Rate-limit counts per IP address and network, stored under a salted one-way hash, never the address itself | Stop floods and free-credit farming | up to 2 days |
| Total AI spend per month, without identifiers | Cost cap | about 40 days |
None of this is linked to your identity, and we do not combine it with data from other sources.
4. IP addresses
Every internet connection reveals an IP address. Cloudflare receives yours when the app calls our server and when you visit aquiio.com, and processes it to deliver the request and protect against attacks. Our server uses it only for the rate limits above, under a salted hash, and does not log it. We do not use it to work out where you are. Request logging for our server is switched off.
5. Purchases (StoreKit)
Purchases are made through Apple's App Store with StoreKit. Apple handles payment; we never receive your card details, name or Apple ID. If you have Pro, the app sends your purchase's transaction ID with AI requests, and our server asks Apple's App Store Server API whether the purchase is active and belongs to this install (through the app account token). Apple's privacy policy applies to your purchase.
6. Legal bases (GDPR)
- Providing the features you use, including AI answers and Pro: contract (Art. 6(1)(b)).
- App Attest, usage counters, rate limits, the IP hash and the fraud check, to prevent abuse and keep the service secure and affordable: legitimate interests (Art. 6(1)(f)).
- Records the law requires us to keep: legal obligation (Art. 6(1)(c)).
7. Service providers
| Provider | Purpose | Location and safeguards |
|---|---|---|
| Cloudflare, Inc. | Hosting our server, its counters and aquiio.com | Global network; EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework |
| Anthropic, PBC | Generating AI answers (Claude API) | United States; Standard Contractual Clauses in Anthropic's data processing terms |
| Apple Inc. | App distribution, purchases (StoreKit, App Store Server API), App Attest, iCloud | Under Apple's own terms and privacy policy |
8. No tracking
We do not track you. The app has no advertising, no analytics, no third-party SDKs that collect data, and no App Tracking Transparency prompt because nothing in it tracks. aquiio.com sets no cookies and uses no analytics.
9. Children
Aquiio is rated 4+ because it contains no objectionable content, but it is a tool for aquarium keepers and is not directed to children. We do not knowingly collect personal information from children, and the app asks no one for personal information.
10. Your rights
Under the GDPR and similar laws you can ask for access, correction, deletion, restriction or portability, and object to processing. Most of your data is only on your device and in your iCloud, fully under your control. The server-side records above are not linked to your identity, so to act on them we need identifiers from your device: write to support@aquiio.com and we will tell you how to find them. You can also lodge a complaint with the Lithuanian State Data Protection Inspectorate (VDAI, vdai.lrv.lt) or your local authority.
11. Security
API keys exist only on our server, every connection uses HTTPS, every AI request must carry Apple's App Attest proof, purchase data is checked against Apple's signature, and we do not log request bodies, photos or IP addresses.
12. Changes
We will update this page and the "Last updated" date when the policy changes, and tell you in the app about material changes.