Terms of Use (EULA)
Last update:
Information We Collect
A. Information You Provide (Account Data) We collect personal information you voluntarily provide including:
Email Address & Authentication Data: Sourced securely through Firebase to establish your unique account profile, secure your identity parameters, and maintain cross-device cloud synchronization.
User-Saved Favorites: Marine spots you explicitly target to save, preserved in cloud storage to ensure automated alignment across all synchronized device modules.
Surf Profile & Quiver Metadata: Optional qualitative details you share with the chat portal (e.g., skill parameters, volume preference, board dimensional variants) utilized contextually to compute unique AI equipment analysis.
We also collect non-personal data through cookies and analytics tools for performance and improvement purposes.
B. Information Collected Automatically (Location Data)
Precise GPS Location: Sourced securely only when you explicitly grant location permissions. This exact metric is deployed strictly to anchor the mapping vector to your current point, evaluate local marine spaces, and generate nearby spot matrix options within your native driving radius. This structural data is never tracked in the background and is never commoditized for ad-tracking operations.
2. How We Use Your Information
We use your information for:
Location-Based Features & Sorting: To isolate and sort close coastal breaks, accurately map nearby weather values, and deliver tailored ocean stewardship notices.
AI Concierge & Communications: To parse prompt queries through the interactive interface and safely compile and email custom flight itineraries or spot dossiers when explicitly requested via the email generation trigger.
Application Performance Analytics: To evaluate completely anonymized, aggregated user session actions to identify system bugs and continuously strengthen forecast delivery stability.
3. Data Sharing & Disclosure
SurfMatch does not rent, sell, or trade your personal identity files or location records to third-party data brokers or marketing houses.
Data transmission is carefully quarantined and occurs strictly when mandatory to build service data layers:
Third-Party Services & SDKs: To operate, improve, and secure SurfMatch, we integrate with trusted third-party service providers. These third parties may have access to or process your data strictly in accordance with their own privacy policies:
RevenueCat: Used for managing in-app purchases, subscriptions, and checking premium entitlements. (Processes purchase history and anonymous app user IDs; does not process credit card info directly).
Google Firebase & Google Cloud: Used for secure user authentication (including Apple and Google Sign-In), database storage (user profiles and saved spots), and powering our SurfMatch Intelligence⢠AI processing.
PostHog: Used for product analytics and crash reporting to help us understand app usage and improve the surfer experience.
Loops: Used for securely sending onboarding and transactional emails.
Xweather (Vaisala) & Google Maps: Used for providing live radar, weather modeling, and mapping features. (Processes your location data only when you grant the app location permissions).
Data sources. Weather and marine forecast data by Open-Meteo.com, licensed under CC BY 4.0. Premium marine data and radar by Xweather (Vaisala). Live buoy observations from the NOAA National Data Buoy Center and, in Queensland, from the Queensland Government (Open Data, CC BY 4.0). Maps by Google.
Secure AI Processing Pipelines: Interactive user chat streams are systematically processed through secure text payload wrappers to handle conversational coaching evaluation.
Legal Obligations: System access records may be shared exclusively if required via standard compliance protocols or emergency network safety operations.
4. Your Rights & Choices
Control Over Location: You maintain absolute system authority over geographic features and can completely revoke native device GPS tracking parameters at any time via your device operating system permissions setup.
Account Deletion: You retain the comprehensive right to systematically erase your profile data structure and delete all internal system records instantly.
In-App Mechanism: You can completely trigger direct profile purging immediately by navigating to the designated account settings pane inside the App menu options.
Web or Email Request: If you lose direct app access or are operating outside the interface, you can call for total server-side profile wipe operations by emailing info@surfmatchapp.com using the mandatory subject flag "Delete My Account". Following confirmation protocols, your entire account record and favorites cache will be scrubbed from servers inside a maximum 30-day window.
5. Your Rights
Depending on your location, you may have rights under privacy laws such as GDPR or CCPA, including:
Accessing the data we hold about you
Requesting correction or deletion
Withdrawing consent
Lodging a complaint with a data protection authority
6. Contact
SurfMatch
Email: info@surfmatchapp.com
Nova Scotia, Canada