Privacy policy

This policy applies to the SeeWave Android app and to the seewave.surf website. It explains what data we process, why, and how to exercise your rights.

Data controller

Elisa Allart and Maxime Casas, 147 avenue Paul Bringuier, 34080 Montpellier, France. Contact: contact@seewave.surf.

Data processed by the app

From installation, without signing up

The first time you open it, the app automatically creates an anonymous identifier, with no name or email address. It makes the service work, and is linked to:

• the disciplines you practice (surf, kitesurf);
• the alerts you set up: spot, discipline, days and criteria (swell, wind, tide, temperatures);
• your phone's technical notification identifier, if you turn alerts on;
• the date you last used the app.

Your favorite spots and display preferences (language, units) stay stored on your phone.

If you create an account (optional)

You can create an account with an email address and a password, or by linking your Google account. This adds:

• your email address, to identify you;
• your list of favorite spots, so you find it on all your devices.

Your password is handled by our authentication provider and stored in hashed form: we never have access to it.

Location

If you allow it, the app uses your phone's location, only while it is open, to put you on the nearest spot and show the spots around you. Your position is sent to our server for that search only; it is not saved in your account. This permission is optional: without it, you can browse the map freely.

What we don't do

• No audience measurement tools, no advertising trackers.
• We never sell or rent your data.

Data processed by the website

The seewave.surf website sets no cookies, uses no audience measurement tools and loads nothing from third parties (fonts are hosted on the site itself). Like any web server, our host keeps technical logs (IP address, page requested, date) for security purposes.

If you email us, we use your address and your message only to reply to you.

If you sign up for the Android beta, the form sends us your Google account email address by email. We use it only to invite you to the beta: for that purpose we add it to the app's testers list on Google Play, and may email you about the beta. The website does not store it anywhere else.

Legal bases

• Performance of the service you use: anonymous identifier, account, sync, alerts.
• Consent: location and notifications, which you can withdraw at any time in Android's settings; beta sign-up, which you can withdraw at any time by email.
• Legitimate interest: security of the service and replying to your messages.

Service providers and third parties

• Supabase: authentication and the app's database.
• Google Firebase Cloud Messaging: delivering notifications on Android.
• Google: sign-in, only if you choose to link your Google account; the beta testers list on Google Play, if you sign up for it.
• OpenStreetMap and Esri: base maps. To display the map, your phone downloads images directly from their servers, which therefore receive your IP address.
• OVH: hosting of the website, weather maps and spot photos, and sending of beta sign-ups.

When one of these providers processes data outside the European Union, the transfer is covered by the European Commission's standard contractual clauses.

Retention periods

• Account: as long as it exists. Deleted immediately from the app, or within 30 days of an email request.
• Anonymous identifier and linked data: deleted after 24 months without using the app.
• Emails received: as long as needed to handle the request, and 3 years at most.
• Beta sign-ups: until the end of the beta, then deleted; sooner if you ask us.
• Host's technical logs: 12 months at most.

Deleting your data

You can delete your account and all linked data at any time, directly in the app (Settings, Account, Delete my account) or by email. The steps are on the Delete your account page.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, email us at contact@seewave.surf. We reply within one month at most.

If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the authority of your country.

Minors

Creating an account is reserved for people aged 15 and over. Below that age, a parent's consent is required.

Changes

This policy may change as the app evolves. The date of the last update is shown at the top of the page.