Privacy Policy

This Privacy Policy describes how WaveTracer ("WaveTracer," "we," "us," or "our") collects, uses, and shares information when you use the WaveTracer mobile application (the "App"). We built WaveTracer to help boaters plan and enjoy time on the water, and we believe your data should serve that purpose — and nothing else.

1. Information We Collect

Information you provide

• Account information. When you create an account we collect your email address and a password. Authentication is handled by Supabase (see Service Providers below); we never see your password in plaintext.
• App settings and preferences. Saved locations, units, theme preferences, and similar settings you configure in the App.
• Trip data. If you record a trip, we store the trip's path, distance, duration, waypoints, and any notes you add.
• Support correspondence. If you contact us, we keep your messages and email address so we can reply.

Information collected automatically

• Location data. When you use features that require it (current weather and tide for your location, recording a trip, the map view), the App reads your device's location through Apple's Core Location framework. Location data used for live features is read on-device and is not transmitted to our servers unless you explicitly save it (for example, by saving a location or recording a trip).
• Subscription data. If you purchase WaveTracer Pro, we receive your subscription status (active, expired, refunded), product identifier, purchase date, and renewal date. This is provided to us by RevenueCat, which handles purchase validation with Apple. We do not receive your credit card or payment method — Apple processes all payments.
• Device and diagnostic data. Standard app diagnostics such as iOS version, device model, App version, and crash logs. We use this only to keep the App stable.

Information we do not collect

• We do not collect contacts, photos (other than ones you intentionally attach), microphone, or health data.
• We do not embed third-party advertising SDKs.
• We do not track you across other apps or websites.

2. How We Use Information

• To provide the core features of the App (sign-in, saved locations, trip recording, weather and tide data for your area).
• To process and validate WaveTracer Pro subscriptions.
• To respond to support requests.
• To diagnose crashes and improve App stability.
• To comply with legal obligations.

We do not use your data for advertising, profiling for advertising purposes, or sale to data brokers.

3. Service Providers

We rely on a small number of trusted service providers to run WaveTracer. These providers have access to data only as needed to perform their services and are bound by confidentiality and data-protection obligations.

• Apple Inc. — Provides authentication (Sign in with Apple, when used), payment processing for in-app purchases, push notifications, and crash diagnostics. Privacy Policy
• Supabase, Inc. — Hosts our backend, including authentication, account records, and your saved locations and preferences. Data is stored in the United States. Privacy Policy
• RevenueCat, Inc. — Manages WaveTracer Pro subscriptions, validates purchases with Apple, and provides subscription analytics. RevenueCat receives your account identifier and subscription events. Privacy Policy
• National Oceanic and Atmospheric Administration (NOAA) — Provides public tide, weather, and marine forecast data. The App fetches this data using approximate or precise location coordinates depending on the feature. NOAA is a U.S. government agency and does not receive your account information.

4. Sharing of Information

We do not sell your personal information, and we do not share it with third parties except:

• With the service providers listed above, as needed to operate the App.
• To comply with a valid legal request (subpoena, court order, lawful regulatory request).
• To protect the rights, property, or safety of WaveTracer, our users, or the public.
• In connection with a business transfer (e.g., merger or acquisition), in which case the acquiring entity will be bound by this Privacy Policy or will provide notice and an opportunity to opt out.

5. Data Retention

We retain account data for as long as your account is active. If you delete your account, we delete your account record, your saved locations, your trips, and your preferences from our active databases promptly, and from backups within 30 days. Subscription transaction records may be retained longer where required by tax or accounting law.

6. Your Rights and Choices

Regardless of where you live, you can:

• Access the data tied to your account by viewing it in the App.
• Correct account data (email, settings, saved locations) directly in the App.
• Delete your account and associated data from Settings → Account → Delete Account inside the App. Account deletion is permanent.
• Withdraw location consent at any time in iOS Settings → Privacy & Security → Location Services → WaveTracer. The App will keep working; features that need your location will prompt you again.
• Cancel a subscription at any time in iOS Settings → [Your Name] → Subscriptions or via the Manage Subscription row in WaveTracer Settings.

Residents of California (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect about you, the right to request deletion, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, contact us at contact@getwavetracer.com. We will not discriminate against you for exercising these rights.

Residents of the European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are in the EEA, UK, or Switzerland, you have the right to access, rectify, erase, restrict, port, or object to processing of your personal data, and to lodge a complaint with your local data protection authority. The legal bases on which we process your data are: contract (to provide the App you signed up for), legitimate interest (to keep the App secure and stable), and consent (for location and any optional analytics — you may withdraw consent at any time). To exercise your rights, contact contact@getwavetracer.com.

7. Children

WaveTracer is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS) and encryption at rest by our service providers. No system is perfectly secure, but we work to keep WaveTracer's surface area small.

9. International Data Transfers

WaveTracer is operated from the United States. If you access the App from outside the United States, you understand that your information will be processed in the United States, where data protection laws may differ from those in your country.

10. Changes to This Policy

If we make material changes to this Privacy Policy, we will update the Effective Date at the top and, where appropriate, notify you in the App or by email. Continued use of the App after a change constitutes acceptance of the updated policy.

11. Contact

Questions or requests about this Privacy Policy? Email us at contact@getwavetracer.com.