Privacy Policy

1. Data Controller

SkipperLog operates this sailing logbook application. If you have questions about how your data is handled, contact us at privacy@skipperlog.app.

2. Data We Collect

We collect only the data you provide when using the app:

• Email address — used for account creation and login
• Name and profile information — optional, used for PDF export and display
• Sailing voyages — dates, ports, nautical miles, boat details, crew lists, and daily logs you enter
• Licenses — sailing certificates you add to your profile
• Consent records — timestamps of when you accepted these terms and this policy

We do not collect location data, payment information, or tracking cookies.

3. Legal Basis (GDPR)

We process your data on the following legal bases:

• Contract performance — processing necessary to provide the logbook service
• Consent — where you have explicitly agreed to this policy at registration
• Legitimate interests — maintaining security and preventing fraud

4. How We Use Your Data

• To provide and operate the sailing logbook service
• To generate PDF exports of your voyage logs
• To calculate sailing statistics
• To send service-related notifications if necessary

We do not sell, share, or use your data for advertising.

5. Data Storage and Security

Your data is stored securely using Supabase, hosted in the European Union. We use industry-standard encryption in transit (TLS) and at rest. Access is restricted to your account only via row-level security.

6. Data Retention

Your data is retained for as long as you maintain an account. When you delete your account, all personal data is permanently deleted within 30 days.

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate data via your profile
• Right to erasure — request deletion of your account and all data
• Right to data portability — export your voyage logs as PDF
• Right to withdraw consent — you may delete your account at any time
• Right to lodge a complaint — with your local data protection authority

To exercise any right, contact us at privacy@skipperlog.app.

8. Third Parties

We use Supabase as our database and authentication provider. Their privacy policy applies to infrastructure-level processing. We do not share your data with any other third parties.

9. Changes to This Policy

We may update this policy. Material changes will be communicated via email or an in-app notice. Continued use of the service after changes constitutes acceptance of the updated policy.