Privacy Policy

Last updated: 20 August 2026

SeaYouSurf ("SeaYouSurf", "we", "us") is operated by Not a Startup AB, a company registered in Sweden (org. nr SE559566425001). This policy explains how we collect, use, and protect your personal data when you use our websites (seayousurf.app and app.seayousurf.app) and our iOS and Android apps (together, the "Service"), in line with the EU General Data Protection Regulation (GDPR).

1. Who is responsible (data controller)

Not a Startup AB (SE559566425001) is the data controller. For any privacy question or to exercise your rights, contact us at hello@seayousurf.app.

2. What we collect

• Account data: we offer three ways to sign in, and what we receive depends on which you choose:

  • Sign in with Google: your name, email address, and profile picture.
  • Sign in with Apple: your name and email address. If you use Apple's Hide My Email, we only ever receive the private relay address Apple generates for you, never your real one.
  • Email magic link: your email address only.

  Most accounts have no password at all. Where one is set, it is stored only by our authentication provider (Supabase), hashed, and is never visible to us.

• Profile & preferences: your surfing skill level, the boards in your quiver, the wave sizes you are comfortable in, your chosen home location, your unit preferences, and your notification settings.

• Your activity in the Service: the spots you save as favourites, sessions you log, and answers you give to in-app feedback surveys.

• Community contributions: surf condition reports you submit (size, conditions, crowd). Reports from signed-in surfers are linked to your surf profile. Reports submitted without an account are stored with the submitting IP address instead, used only to stop the same source flooding one spot with reports.

• Location: with your permission, your device's location, used to find and rank the surf spots nearest you. Your chosen home location is saved to your profile. The location you are currently browsing around is stored in a sy_loc cookie on your device for 30 days and sent to our servers with your requests, so the spots nearest you can be ranked before the page is drawn. To turn it into a place name ("Biarritz"), the coordinates are sent once to BigDataCloud, a reverse-geocoding service. You can clear it at any time from the location control in the app.

• Notification data: if you allow notifications in the mobile app, a device push token so we can send the surf alerts you have switched on. You can turn alerts off in the app, or in your device settings, at any time.

• Usage & device data: pages viewed, interactions, approximate location and device/browser information, through:

  • Google Analytics, which we run only where it is enabled, and then only after you accept analytics cookies, never before;
  • Vercel Web Analytics, which is cookieless, sets no identifier on your device and does not track you across other sites;
  • Sentry, which records technical error and crash reports where it is enabled, so we can fix faults. It runs with personal-data collection switched off and no session recording.

• Email: your address is used for account and service emails (sign-in links, referral confirmations) and is added to our newsletter list. Every newsletter carries a one-click unsubscribe link, and unsubscribing does not affect your account. To be left off the list before you ever receive one, email hello@seayousurf.app.

We do not process payment data. SeaYouSurf has no paid tier at present, there is nothing to buy in the app or on the website, and no card details ever reach us or our processors.

3. Why we use it and our legal basis

You can withdraw consent at any time: revoke location or notification permission in your device settings, and change your analytics choice under Profile → Settings → Privacy, or through the cookie banner on our websites.

4. Who we share it with (processors)

We share data only with service providers acting on our instructions:

We do not sell your personal data, and we do not share it with advertising networks. We use no advertising identifier (no IDFA) and run no ad tracking.

We use AI (Anthropic) to help write our surf-spot guides and classify how each break behaves. It is given information about surf spots only, never your personal data.

5. International transfers

Our database and hosting are in the EU. Some other providers may process data outside the EU/EEA. Where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

6. Retention

We keep personal data only as long as needed for the purposes above, then delete or anonymise it. If you delete your account, we delete your account data, profile and preferences. Community reports may be retained in anonymised form so past forecasts remain accurate. IP addresses stored against anonymous reports are kept only for the short anti-abuse window.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. Access, portability and erasure are built into the Service: see section 8. For anything else, email hello@seayousurf.app. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY, imy.se).

8. Getting a copy of your data, and deleting your account

Both are available to you directly inside the app and the website, under Profile → Settings → Account → Account & data:

• Download my data gives you a copy of the personal data held against your account.
• Delete account permanently removes your account, surf profile, preferences and saved spots.

If you would rather we did either for you, email hello@seayousurf.app.

9. Cookies and on-device storage

We use cookies and similar technologies as described in our Cookie Policy.

10. Children

The Service is not directed to children under 16. We do not knowingly collect their data.

11. Changes

We may update this policy; we will post the new version here with an updated date.

12. Contact

Not a Startup AB (SE559566425001), hello@seayousurf.app