ReefATLAS helps users manage reef aquarium projects, equipment, livestock, water parameters, maintenance records, and connected device information. If you choose to connect a Ring account, ReefATLAS only requests and uses Ring data needed to provide the features you authorize. ReefATLAS does not sell personal information, Ring account data, Ring device data, video, audio, snapshots, event history, or OAuth tokens.
This Privacy Policy explains how ReefATLAS ("ReefATLAS," "we," "us," or "our") collects, uses, stores, shares, and protects information when you use the ReefATLAS website, application, cloud sync services, support services, and connected integrations, including the Ring integration.
By using ReefATLAS, you acknowledge this Privacy Policy. If you do not agree with it, do not use ReefATLAS or connect third-party services to ReefATLAS.
1. Information We Collect
Account Information
When you create or use a ReefATLAS account, we may collect your name, username, email address, password authentication data, account identifiers, subscription or access status, and related account settings.
Reef Aquarium Project Information
ReefATLAS may collect information you enter into the app, such as tank names, tank dimensions and volumes, equipment details, livestock lists, coral placement, PAR readings, water parameter readings, maintenance tasks, notes, photos, dosing records, reminders, reports, and other aquarium project content.
Device, Browser, and Usage Information
We may collect technical information such as IP address, browser type, operating system, device identifiers, pages or features used, dates and times of access, diagnostic logs, error reports, and security event logs. We use this information to operate, secure, troubleshoot, and improve ReefATLAS.
Payment and Subscription Information
If paid features are offered, payment processing may be handled by third-party payment providers. ReefATLAS does not intentionally store full payment card numbers. We may receive limited billing status information, such as plan type, payment status, transaction identifiers, renewal dates, and subscription history.
Support Communications
If you contact us, we may collect the information you provide, including your email address, issue description, attachments, screenshots, diagnostic details, and our correspondence with you.
2. Ring Integration Information
ReefATLAS may offer an optional integration with Ring. You are not required to connect Ring to use ReefATLAS. Ring data is accessed only after you authorize the integration through Ring's account linking and consent flow.
Ring Account Linking and OAuth Tokens
When you connect Ring, Ring may provide ReefATLAS with authorization codes, access tokens, refresh tokens, scopes, token expiration information, Ring account identifiers, and related account linking status. ReefATLAS uses this information only to complete account linking, maintain the connection you authorized, refresh access when permitted, and call Ring or Amazon Vision API endpoints on your behalf.
Ring Device and Event Data
Depending on the permissions you grant, ReefATLAS may access or receive Ring device identifiers, device names, device type, device online or offline status, device capabilities, coarse location information such as country or state where provided for compliance, configuration data such as motion or privacy-zone settings, device addition or removal events, motion events, doorbell button events, subscription status events, and app integration added or removed events.
Ring Video, Audio, Snapshots, and Media Clips
If you authorize media-related features and use those features, ReefATLAS may access Ring live video streams, image snapshots, or historical media clips made available by Ring. ReefATLAS uses Ring media only to provide the requested feature in the ReefATLAS experience. ReefATLAS does not use Ring video, audio, snapshots, or media clips for advertising, unrelated analytics, facial recognition, biometric identification, model training, or sale to third parties.
Ring Webhook Events
If enabled, Ring may send ReefATLAS webhook notifications about authorized devices and integration status. ReefATLAS verifies webhook signatures where required, processes the event to provide the integration feature, and retains only the event information needed for operation, audit, troubleshooting, and user-facing history.
Ring Data Limits
ReefATLAS does not request Ring data unless it is needed for a feature you authorize. ReefATLAS does not attempt to bypass Ring user permissions, Ring privacy settings, device privacy zones, subscription limits, or other restrictions set by Ring or the user.
3. How We Use Information
We use information to:
- Provide, operate, maintain, and secure ReefATLAS.
- Create, save, sync, display, and manage reef aquarium projects.
- Authenticate users and protect accounts from unauthorized access.
- Complete authorized Ring account linking and provide Ring integration features.
- Discover authorized Ring devices, show device status, receive authorized events, and display authorized media when requested.
- Provide customer support, investigate issues, and respond to user requests.
- Monitor reliability, debug errors, prevent abuse, and enforce legal terms.
- Comply with applicable laws, platform rules, developer obligations, and security requirements.
4. How We Do Not Use Ring Data
For Ring account data, Ring device data, Ring events, Ring tokens, Ring media, Ring video, Ring audio, Ring snapshots, and Ring clips, ReefATLAS does not:
- Sell, rent, lease, or trade the data.
- Use the data for third-party advertising or cross-context behavioral advertising.
- Use the data for facial recognition, biometric identification, or surveillance unrelated to the feature you authorized.
- Use the data to train artificial intelligence or machine learning models unless you separately request a feature that clearly requires processing and applicable law and platform rules allow it.
- Share the data with data brokers.
- Access devices, media, or events outside the permissions you granted through Ring.
5. Legal Bases and Consent
Where a legal basis is required, we process information based on one or more of the following: your consent, performance of a contract, our legitimate interests in operating and securing ReefATLAS, compliance with legal obligations, or protection of vital interests where applicable.
For the Ring integration, ReefATLAS relies on your authorization through Ring's consent and account linking flow. You may revoke Ring access through Ring account or app settings where Ring provides that control, and you may also contact ReefATLAS support for help disconnecting ReefATLAS from your ReefATLAS account.
6. Sharing and Disclosure
We may share information only as described below:
- Service providers. We may use hosting, database, authentication, analytics, email, support, payment, security, and infrastructure providers to operate ReefATLAS. These providers may process information only to provide services to ReefATLAS and must protect it appropriately.
- Connected services you authorize. If you connect Ring or another third-party service, information may be exchanged with that service as needed to provide the integration you requested.
- Legal and safety reasons. We may disclose information if required by law, legal process, court order, government request, or to protect rights, safety, security, users, or the integrity of ReefATLAS.
- Business transfers. If ReefATLAS is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.
- With your direction. We may share information when you instruct us to do so or when you intentionally publish, export, or transmit information from ReefATLAS.
7. Data Storage and Security
ReefATLAS uses reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include HTTPS, access controls, authentication, token protection, logging, monitoring, and restricted access for operational personnel.
No system is completely secure. You are responsible for using a strong password, protecting your login credentials, and keeping your account contact information current. Do not share your ReefATLAS password, Ring account credentials, OAuth tokens, or device access with unauthorized people.
8. OAuth Tokens and Credentials
ReefATLAS does not ask you to provide your Ring password. Ring account authorization is handled through Ring's authorization and account linking process. ReefATLAS stores OAuth tokens and related account linking data only as needed to maintain the integration you authorized. We treat tokens as sensitive credentials and use them only for server-side requests needed to operate the Ring integration.
9. Data Retention
We retain information for as long as needed to provide ReefATLAS, maintain your account, operate connected integrations, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and preserve backups. Retention periods vary depending on the type of information and the purpose for which it is used.
When you disconnect Ring, ReefATLAS will stop using Ring tokens for ongoing access and will delete or disable stored Ring tokens within a reasonable period unless retention is required for security, legal, backup, audit, or dispute-resolution purposes. Historical logs or backups may persist for a limited period before deletion according to our backup and security practices.
10. Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have the right to withdraw consent where processing is based on consent.
You can exercise privacy rights by contacting us at privacy@thereefatlas.com. We may need to verify your identity before completing a request. Some information may be retained where necessary for legal, security, fraud prevention, backup, or legitimate business purposes.
11. Disconnecting Ring
You may disconnect ReefATLAS from Ring through Ring account or app settings where available. You may also contact ReefATLAS support at support@thereefatlas.com for assistance. After disconnection, Ring may notify ReefATLAS that the integration was removed, and ReefATLAS will stop requesting new Ring data for your account unless you reconnect.
12. Cookies and Similar Technologies
ReefATLAS may use cookies, local storage, session storage, or similar technologies to keep you signed in, remember preferences, protect sessions, store project state, measure reliability, and improve performance. You may control cookies through your browser settings, but disabling cookies or storage may prevent ReefATLAS from working correctly.
13. Analytics and Diagnostics
We may collect aggregated or diagnostic information to understand performance, crashes, feature usage, and reliability. Where practical, we limit analytics to information needed to operate and improve ReefATLAS. We do not use Ring video, audio, media clips, snapshots, or OAuth tokens for advertising analytics.
14. Children
ReefATLAS is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to ReefATLAS, contact us so we can take appropriate action.
15. International Data Transfers
ReefATLAS may process and store information in the United States or other locations where we or our service providers operate. If information is transferred internationally, we use safeguards required by applicable law where required.
16. U.S. State Privacy Notices
Some U.S. state privacy laws provide additional rights, such as the right to know, access, correct, delete, or obtain a copy of personal information, and the right to opt out of certain sales, sharing, targeted advertising, or profiling. ReefATLAS does not sell personal information and does not use Ring data for cross-context behavioral advertising.
To submit a privacy request, contact privacy@thereefatlas.com. You may designate an authorized agent where permitted by law. We may request information needed to verify the request and your authority.
17. Third-Party Services
ReefATLAS may link to or integrate with third-party services, including Ring, hosting providers, authentication providers, payment processors, support tools, and other connected aquarium or smart-home services. Your use of third-party services is also governed by their privacy policies and terms. ReefATLAS is not responsible for third-party privacy practices.
18. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and provide notice where required by law or appropriate for the nature of the change. Your continued use of ReefATLAS after an updated policy becomes effective means you acknowledge the updated policy.
19. Contact Us
For privacy questions or requests, contact:
ReefATLAS Privacy
Email: privacy@thereefatlas.com
Support: support@thereefatlas.com
Website: https://thereefatlas.com