Privacy Policy
Last updated: February 12, 2026
1. Information We Collect
Account Information
When you sign in via Google or Apple, we receive your name, email address, and profile identifier. We do not receive or store your password.
Vessel Data
We collect sensor data transmitted from your vessel, including but not limited to: GPS position, battery voltage, bilge levels, temperature, wind speed, engine parameters, and other NMEA/SignalK data. This data is stored securely and associated with your vessel account.
Usage Data
We collect information about how you use the Service, including pages visited, features used, and interaction patterns. This helps us improve the product.
2. How We Use Your Information
- Provide, maintain, and improve the Service
- Send alert notifications via your configured channels (push, SMS, email, etc.)
- Power the AI marine assistant with vessel context (your vessel profile and sensor data)
- Generate float plan documents and safety notifications
- Process payments via Stripe
- Communicate service updates, security alerts, and support messages
3. Data Sharing
We do not sell your personal or vessel data. We share data only in these circumstances:
- Crew members: Users you invite to your vessel can access vessel data according to their role and permissions.
- Voyage tracking: If you enable public voyage tracking, the shared tracking page shows vessel position and trip information to anyone with the link.
- Service providers: Stripe (payments), Twilio (SMS/voice), Resend (email), Anthropic (AI assistant). These providers process data under their own privacy policies and our data processing agreements.
- Legal requirements: When required by law, subpoena, or to protect safety.
4. Data Security
We implement industry-standard security measures including encryption in transit (TLS 1.3), secure authentication (OIDC with PKCE), and access controls. Vessel data is stored in encrypted databases with role-based access.
5. Data Retention
Vessel sensor data is retained for the duration of your subscription plus 90 days after expiration. You may request data export or deletion at any time by contacting support. Account deletion removes all personal data and vessel associations.
6. Your Rights
You have the right to:
- Access your personal and vessel data
- Correct inaccurate data
- Request deletion of your data
- Export your vessel data
- Withdraw consent for optional data processing
- Object to data processing for marketing purposes
7. Cookies
The Service uses essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.
8. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover such data has been collected, we will delete it promptly.
9. International Data Transfers
Data may be processed and stored in the United States. By using the Service, you consent to the transfer of data to the United States.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top indicates when the policy was last revised.
11. Contact Us
For privacy-related questions or requests, contact us at privacy@helmwatch.ai.