Privacy Policy for Boat Buddy

Effective Date: 05/15/2026 Last Updated: 05/15/2026

This Privacy Policy describes how Boat Buddy ("we," "us," "the app") collects, uses, and shares information when you use our iOS application. By using Boat Buddy, you agree to the practices described below.

1. Who We Are

Boat Buddy is a social and safety app for boaters that lets you add friends to your fleet, see each other's positions on a map, share marine information, and file voluntary float plans.

The app is operated by Jeffery Gallo, referred to in this policy as "we," "us," or "the developer."

For privacy questions, contact us at: jeffersongallo17@gmail.com

2. Information We Collect

We collect only the information necessary to provide the app's features.

Information you provide directly

• Profile information: captain name, boat name, boat make, boat length, profile photo.
• Crew ID: a 6-character identifier auto-generated for you so other users can add you to their fleet.
• Float plans (optional): destination, expected return time, free-text notes, and the designated watcher you choose from your fleet.

Information collected automatically while you use the app

• Precise location: GPS coordinates, speed, and heading, used to show you on the map and share your position with friends in your fleet. Location is only collected while the app is in use ("When In Use" permission).
• Navigation status: your selected status (Underway / Anchored / Docked) and timestamps for status changes.
• Device identifiers: a randomly assigned Firebase anonymous user ID, not tied to your Apple ID, email, or phone number.

Information from third parties (only if you connect them)

• Spotify: if you choose to connect your Spotify account, we read the track and artist you are currently listening to so it can be displayed to friends in your fleet. We do not access your playlists, library, or any other Spotify data. You can disconnect Spotify at any time from the Profile tab.

Information we do not collect

• We do not collect your name, email address, phone number, or any payment information.
• We do not collect analytics, advertising identifiers, or behavioral tracking data.
• We do not access your contacts, photo library beyond your selected profile photo, microphone, or HealthKit.

3. How We Use Your Information

We use the information we collect to:

• Display your boat on the map for friends in your fleet
• Allow friends in your fleet to view your status, speed, heading, boat details, and current Spotify track
• Send local notifications to fleet members when your status changes
• Deliver an overdue alert to your designated watcher if a filed float plan passes its expected return time without check-in
• Show you marinas, fuel docks, and marine weather information based on your current location

We do not use your information for advertising, profiling, training AI models, or selling to third parties.

4. Sharing & Disclosure

Boat Buddy is built around social sharing among consenting users. Your information is shared as follows.

With other Boat Buddy users

• Your fleet (users you've explicitly added via Crew ID or QR code) can see: your boat name, captain name, profile photo, current location, speed, heading, navigation status, currently playing Spotify track (if connected), and boat details (make and length).
• Users you designate as a float plan watcher receive a copy of that float plan: destination, ETA, and notes.
• Crew ID lookups: any signed-in Boat Buddy user who knows your 6-character Crew ID can find your public profile (name, boat name, photo) in order to send you a fleet request. They cannot see your location until you accept them into your fleet.

With service providers

• Google Firebase (Google LLC) hosts our backend database, authentication, file storage, and serves as a data processor. Their privacy policy is available at https://firebase.google.com/support/privacy.
• Spotify AB (only if you connect your Spotify account) receives standard OAuth requests from your device. Their privacy policy is at https://www.spotify.com/legal/privacy-policy/.
• OpenStreetMap Foundation and Open-Meteo are queried anonymously when you display marinas, fuel docks, or weather. Your specific location may be included in the query but no user identifier is sent.
• Apple Inc. delivers push and local notifications and runs the underlying iOS platform.

We do not sell, rent, trade, or otherwise share your personal information for marketing purposes.

Legal disclosure

We may disclose information if required by valid legal process (subpoena, court order, etc.) or to protect the rights, safety, or property of users or the public.

5. Data Storage and Security

• Your profile, location, status, and float plans are stored in Google Firebase's Firestore database, hosted on Google's secure cloud infrastructure.
• Profile photos are stored in Firebase Storage.
• Spotify access tokens are stored only on your device, in the iOS Keychain. They are not transmitted to our servers.
• Communication with Firebase, Spotify, OpenStreetMap, and Open-Meteo uses encrypted HTTPS connections.

No method of internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Third-Party Services

Boat Buddy integrates with the following third-party services. Use of these services is governed by their own privacy policies.

7. Your Rights and Choices

Controls in the app

• Disconnect Spotify at any time from the Profile tab. Tokens are immediately deleted from your device.
• Disable location in iOS Settings → Boat Buddy → Location. The app continues to function but your position will not be shared with friends.
• Disable notifications in iOS Settings → Boat Buddy → Notifications.
• Remove fleet members to revoke their visibility into your location.

Account deletion

To delete your account and all associated data (profile, fleet relationships, float plan history, and uploaded profile photo), email us at jeffersongallo17@gmail.com with the subject "Delete my account" and include your 6-character Crew ID from the Profile tab. We will permanently delete your data within 30 days.

Regional rights (GDPR / CCPA / etc.)

If you reside in the EU, UK, California, or another jurisdiction with applicable privacy laws, you may have additional rights including the right to access, correct, port, or delete your personal data. To exercise these rights, contact us at jeffersongallo17@gmail.com.

8. Data Retention

• Active profile data is retained as long as your account is active.
• Inactive accounts (no app activity for 12 months) may be deleted at our discretion.
• Float plans marked completed are retained for 90 days then deleted.
• Spotify "now playing" data is overwritten by your most recent track and is not historically logged.

9. Children's Privacy

Boat Buddy is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

10. International Data Transfers

Your information is processed and stored on servers operated by Google Firebase, which may transfer data across multiple regions including the United States. By using the app, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via an in-app notice or by updating the "Last Updated" date at the top of this policy. Continued use of Boat Buddy after changes take effect constitutes acceptance of the updated policy.

12. Contact

For any questions, concerns, or requests related to this Privacy Policy or your personal information:

Email: jeffersongallo17@gmail.com Subject line for data-related requests: "Boat Buddy Privacy"

This privacy policy is provided as a starting point. Consult a qualified attorney before publishing, especially if your user base extends to the EU, UK, or California.