Privacy Policy

SwellPilot (“we”, “us”, “our”) is a surf-forecast application operated by OÜ Datadaa. If you have questions about this policy, contact us at privacy@swellpilot.com.

We collect only what is necessary to provide the service:

We do not collect precise location in the background.

• Providing personalised surf-spot recommendations near your location
• Processing and managing your subscription
• Sending push notifications you explicitly opt in to (premium feature)
• Diagnosing crashes and improving the app
• Complying with legal obligations

We do not sell your data to third parties. We do not use your data for advertising.

SwellPilot is a helper tool and not an ultimate source of truth for safety decisions. You must independently assess your own level, verify real-world conditions, and follow basic safety practices before entering the water. For full risk-allocation and liability terms, see the Terms of Service.

We share minimal data with the following trusted sub-processors:

• Authentication provider — account sign-in and identity management. Processes account details such as email and authentication metadata.
• Subscription and billing providers — subscription management and payment-status processing.
• Forecast data providers — ocean and weather forecast data. Receives anonymised coordinates to fetch forecast conditions.
• Diagnostics providers — crash reporting and technical diagnostics, such as app version, OS version, and error traces when enabled.
• Cloud infrastructure providers — backend hosting, database, networking, and storage. Data is stored in the EU.

We require service providers that process personal data on our behalf to protect it to a standard that is the same as or equivalent to the protections described in this policy.

Account data is retained as long as your account is active. You may request deletion at any time (see Section 8). Anonymised forecast cache data is automatically purged after 24 hours. Subscription receipt data is retained for 5 years as required by payment-platform guidelines.

Depending on where you live, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (this does not affect prior lawful processing)

To exercise these rights, email privacy@swellpilot.com. You can also disable location or notification permissions at any time in iOS Settings. We will respond within 30 days.

SwellPilot is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

You can delete your account and all associated data from the Profile screen in the app. Deletion is permanent and irreversible.

All data is transmitted over HTTPS. Passwords are never stored — authentication is handled by our authentication provider using industry-standard protocols. We apply the principle of least privilege to all internal data access.

If we make material changes, we will notify you via the app or email at least 14 days before they take effect. Continued use of SwellPilot after that date constitutes acceptance.