Privacy policy

1. Who we are

SurfSeer is a wave-face prediction app for iOS and Android. This policy covers the SurfSeer app, this website, and the accounts and sync service behind them.

Contact details for privacy enquiries are published here before launch, and in-app support is available from the Settings tab.

2. What we collect

We collect what the app needs to predict waves for you, and not much else.

• Account details — the email address you sign up with, and a verification state. If you use Sign in with Apple, we receive whatever Apple passes on, which may be a relay address.
• Your spots — the breaks you add, their location, and the profile you set for each one (which way the coast faces, tide preference, floor type, and the local knowledge you enter).
• Your profile — your height and the boards in your quiver, because they're what the face prediction is scaled against.
• Your sessions — the surfs you log: date, time, duration, the wave height you got, your rating, and your assessment of how the prediction compared.
• Technical data — crash reports and error diagnostics, and a device identifier used to keep your subscription and your sync in order.

3. How we use it

Your spots, profile and sessions exist to produce and sharpen your predictions. Session feedback tunes the model for that spot — yours, not a shared pool.

Account details let you sign in, verify your email, recover a password, and carry your spots between devices. Crash and error data is used to fix the app.

We do not sell your personal information, and we do not use it to build advertising profiles.

4. The Seer and your AI provider

The Seer — SurfSeer's chat and forecast narrations — runs on an AI provider you choose, using an API key you supply. That means the data sent for those features goes to a company you picked, on an account you control, under their terms.

Your API keys are stored in your device's secure enclave, never in plain storage. They are sent only in request headers to the provider you configured, and they do not appear in logs or message bodies.

Spot coordinates included in a request are wrapped so a model can't be led into inventing locations, and responses are checked for coordinate leakage before they're shown to you.

If you don't configure a key, the Seer is simply unavailable. Predictions still work — the engine runs on your device and does not need AI to function.

• You choose the vendor and the model tier.
• You can remove a key from Settings at any time, which stops any further data being sent to that provider.
• We don't proxy your requests through our own AI account, and we don't pay for your inference.

5. Where it's stored

Your data is cached on your device so the app works offline, and synced to our managed backend so it follows you across devices. Authentication is handled by a managed identity service; subscriptions are handled through the App Store or Google Play and their billing partner.

Edits you make offline are queued on your device and sent when you're back on a connection.

6. Who we share it with

Only the service providers that make the app work: hosting and account infrastructure, marine and tide data services, subscription billing through the app stores, and error reporting. Each receives only what it needs for its function.

The AI provider you configure is a separate case, covered in section 4 — that relationship is between you and them.

We may disclose information where the law requires it. Otherwise, no.

7. Your choices

You can view and edit your spots, profile, quiver and sessions in the app at any time. You can remove an API key, change your Seer's Voice, or delete a spot whenever you like.

You can request a copy of your data or ask us to delete your account and everything attached to it, through in-app support. Deleting your account removes your spots, sessions and profile from our backend.

Depending on where you live you may have additional rights under local privacy law — including access, correction, deletion and complaint rights. We'll honour them.

8. How long we keep it

Your spots, sessions and profile are kept while your account is open, because that history is what makes your predictions sharper. Delete your account and they go.

Crash and diagnostic data is kept for a limited period and then discarded.

9. Children

SurfSeer isn't directed at children and we don't knowingly collect data from anyone under the age required by their local law to consent. If you believe a child has created an account, contact us and we'll remove it.

10. Changes to this policy

If we change this policy in a way that materially affects you, we'll say so in the app before the change takes effect. The date at the top always reflects the current version.

11. A word on safety

Not privacy, but it belongs here. SurfSeer's predictions are guidance, not guarantees. Conditions change, forecasts are wrong sometimes, and no app replaces your own read of the water. Surf within your ability, know your break, and make your own call.