WaveForm

WHAT WE COLLECT

Only what you type into the app:

• Account. Your email address and a password, used to create and sign in to your account. Authentication is handled by Supabase; we never see your password.
• Profile. The name you tell us, your home break, your boards, your comfort size band, and the wave character you say you like.
• Journal. Your sessions and field notes: the spot, the date, a rating, a wave height, your free text, and the structured size fields a field note carries (the band you saw, the sets, the form, and the app’s own read at the time).
• Custom spots. The names and map coordinates of spots you add yourself.
• Username. The public name you choose, if you choose one. It appears only on reports you share.
• Reports. A session or field note you choose to SHARE becomes a report: its spot, date and time, rating or size fields, and text are shown to every signed-in surfer under your username for ten days. You can unshare it any time from the journal; deleting the entry, or your account, removes it. Flagged reports are hidden and reviewed.
• Votes. Your agree or disagree on another surfer’s report, counted on it without your name.

WHERE IT IS STORED

All of the above is stored server-side in your account’s own rows in Supabase, hosted in the United States, guarded by row-level security so only your account can read or change them. Shared reports are the one exception: every signed-in surfer can read them, and only you can change or remove yours. A copy is kept on your device so the app works offline and syncs when it reconnects.

Forecast data (swell, wind, tide, buoys) reaches the app through our own cached proxy on Vercel. Forecast requests carry no account information — every phone receives the same regional bundle, and the proxy keeps no record of who asked.

WHAT WE DON'T COLLECT

• No location. The app never asks for or reads your device’s position — the map is a chart of the coast, not a track of you.
• No camera, no photos, no contacts.
• No advertising, no trackers, and no analytics SDK. The app contains none.
• No sale of your data, and no sharing with anyone — apart from the reports you choose to share, it is used only to run your account.

DELETING YOUR DATA

Deletion is in the app: Settings → DELETE ACCOUNT removes your account and every row that belongs to it — profile, journal, custom spots — immediately and permanently. Signing out and deleting the app removes the on-device copy. If you cannot get into the app, email supportwaveform@gmail.com from your account address and we will delete it for you.

CONTACT

Questions about this policy: supportwaveform@gmail.com, or see the support page.

CHANGES

If this policy changes, the date above changes with it.