Privacy Policy

1. The short version

Bosun's Mate is a vessel management app. We collect the data you give us when you create an account or log entries about your vessel. We do not sell your data, ever. We do not embed third-party advertising trackers. We use Stripe for payments and IONOS for transactional email — that's it.

2. What we collect

• Account data: name, email, hashed password (we never see your plaintext password).
• Vessel data you enter: vessel name, type, photos, engine hours, entries (maintenance, fuel, receipts, parts, etc.).
• Subscription data: plan, status, Stripe customer ID. Payment card details are handled directly by Stripe and never touch our servers.
• Authentication metadata: session tokens (HTTP-only cookies), login timestamps.

3. What we do NOT collect

• We do not track your location in the background — see the next section for how we handle GPS.
• We do not collect device identifiers, IDFA, advertising IDs.
• We do not embed third-party analytics or session-recording scripts.
• We do not access your phone's contacts, camera roll, or microphone unless you explicitly attach a photo to an entry.

4. Location data (foreground only, opt-in per entry)

When you tap "Add my current location" on a Cruising Log entry, Bosun's Mate asks your device for one GPS fix at that moment. We use it to:

• Save the latitude/longitude with that single log entry, so you can find it later.
• Resolve the coordinates to a human-readable place name (e.g. "Princess Louisa Inlet, BC") via OpenStreetMap's free Nominatim service. We send only the coordinates — no account info — and they return a place name.
• Optionally auto-fill the "where met" field on any Cruiser Contacts you linked to that entry, so your address book remembers where you crossed paths (only if those fields are currently empty — we never overwrite something you've typed).

We never poll your location in the background. We never track you between log entries. The only time we read your GPS is in the second you tap the button. You can revoke the permission any time in your device settings — the app keeps working with location features simply disabled.

5. How we use it

• To show you your vessel data and let you edit it.
• To send you transactional emails (welcome, password reset, billing receipts, trial-ending reminders).
• To process subscription payments via Stripe.

6. Who we share it with

• Stripe (payment processor): handles all billing. Their privacy policy: stripe.com/privacy.
• IONOS (email delivery): delivers transactional emails on our behalf.
• Emergent-managed Google Auth (optional): only if you choose "Sign in with Google" — we receive your email, name, and profile picture from Google.

We do not share, sell, rent, or trade your data with anyone else.

7. Where your data lives

Encrypted at rest in our managed MongoDB database. Transferred over HTTPS/TLS only. Backed up daily.

8. Your rights

• Access: log in to see all your data.
• Export: use the "Export to PDF" feature for any vessel.
• Deletion: email captain@bosunsmate.app with "Delete my account" and we'll remove everything within 14 days.
• Correction: edit anything inside the app, anytime.

9. Children

Bosun's Mate is not directed at children under 13. We do not knowingly collect data from anyone under 13.

10. Changes

If we materially change this policy, we'll email you at least 30 days before the changes take effect.

11. Contact

Questions? Email captain@bosunsmate.app.