Privacy Policy

Account & profile: name, email, password (or passkey — we never see or store the passkey itself), photo, bio, target qualification, membership number, location, and an optional emergency contact.

Trip data: dates, times, duration, distance, vessel, crew and their role on the trip, weather and wind conditions, dictated or typed trip notes, photos you attach, and — only for trips logged via Quick Log or Saltlog Persist — a GPS track of the route.

Vessels & crew: vessel details (name, type, make, model, photo) and crew details (name, photo, relationship, contact email if you choose to add one).

Live trip location: collected only while you are actively using Quick Log or Saltlog Persist to record a trip, for the sole purpose of building that trip’s route. We do not track your location at any other time — this is separate from the optional Launch Location described below.

Launch Location (optional):if you choose to add one, a name, address, postcode, and GPS coordinates for the place you usually set off from. Never collected automatically — you either search for it or use your device’s current location yourself, once, and can change or remove it at any time.

Payment data: if you subscribe to Premium, your payment is handled entirely by Stripe. We never see or store your card details — we only receive confirmation of your subscription status.

Basic technical data: the session information needed to keep you signed in.

• To provide the Service itself — this is necessary to perform our contract with you (our Terms & Conditions).
• To process Premium payments and manage your subscription — contract necessity, via Stripe.
• To send you account and billing emails (e.g. confirming sign-up, password resets) — contract necessity.
• To auto-fill weather when you use Quick Log — with your action (starting a trip) as the trigger; see “Third parties” below.
• To pre-fill your starting point when logging a trip, and — once built — to power a reminder if you leave your Launch Location without starting a log, if you choose to add one — your explicit action (adding it) as the trigger.

We do not sell your personal data to third parties. We may use information you provide — such as your location, your target qualification, or the vessels you own — to show you relevant recommendations or sponsored content within the app, including from affiliate partners. Your personal data is never handed to those partners; if you choose to click through to a partner’s site, their own privacy policy governs what happens from there.

Launch Location and marinas/clubs: we may also use the marina, club, or mooring names and addresses people record in Launch Location, aggregated across users rather than tied back to your individual account, to help us identify and build relationships with marinas and clubs about Saltlog. This is never used to reveal to a marina or club which of their visitors has a Saltlog account.

Crew-based suggestions:if another user has logged you as crew using the same email address your Saltlog account is registered with, we may match that email to suggest you to each other as people to follow — for example, letting them know you’re already on Saltlog, or showing you the skippers who’ve logged you as their crew. We never reveal your email address itself this way — only your name, and only to someone who already independently had that email on file from a real trip together. You can turn this off at any time in Settings (“Crew Discovery”); this does not affect someone finding you by deliberately searching your exact email address.

We use a small number of service providers (“processors”) to run Saltlog, each only for the purpose stated:

• Supabase — hosts our database, authentication, and file storage.
• Vercel — hosts the website and app itself.
• Stripe — processes Premium payments; we never receive your card details.
• Resend — sends transactional emails (sign-up confirmation, password reset).
• Open-Meteo and OpenStreetMap (Nominatim) — when you use Quick Log, your current coordinates are sent to these free services to look up the weather and a place name. This happens without your account details attached — they only ever receive a latitude and longitude.
• Your browser or device’s own speech recognition (Apple, in Saltlog Persist)— if you choose to dictate a trip log or note, the words you speak are turned into text by your browser’s built-in speech recognition, or, inside Saltlog Persist, by Apple’s speech recognition. On a device and language where Apple’s newest on-device recognition is available, this happens entirely on your phone; where it isn’t, Apple processes the audio on their own servers to produce the text. We never record or store the audio itself, and no paid transcription service is ever used. Dictation is always optional — typing works exactly the same as talking.

We do not share your personal data with any other third party for their own use, and none of the processors above are permitted to use your data for their own purposes. (This is separate from the affiliate recommendations described in Section 2 — those never involve handing your personal data to the partner.)

We keep your account and trip data for as long as your account is active. In line with treating your logbook as a genuine historical record, we don’t delete a vessel or crew member you’ve used on a trip — removing one from active use archives it rather than deleting it, so your past trips always keep an accurate record of what vessel or who was actually involved.

Rows you upload via Bulk Import that don’t automatically process (“Exceptions”) are kept indefinitely until you either fix or explicitly discard them yourself — there is no automatic deletion.

Under UK data protection law, you have the right to:

• access the personal data we hold about you;
• correct inaccurate data — most of your own profile, trip, vessel, and crew data can be edited directly in the app at any time;
• request erasure of your data;
• object to or restrict certain processing;
• request a copy of your data in a portable format.

Full account deletion is not yet a self-service feature in the app. To request it, or to exercise any of the rights above, contact us at hello@boatbouy.co.uk and we will action it directly. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) if you believe we have mishandled your data.

Your data is protected by row-level security in our database, meaning the system itself enforces that you can only ever access your own data — this isn’t just a setting in the app’s interface. We use industry-standard encryption in transit and at rest via our infrastructure providers.

Saltlog is not directed at children. You must be at least 16 to create an account (see our Terms & Conditions).

We may update this policy from time to time; the “last updated” date above will change when we do.

hello@boatbouy.co.uk