Privacy Policy

Version 1.3 — Effective February 22, 2026

1. Introduction

Good Buoy ("we," "our," "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the Good Buoy application and the goodbuoy.co website (collectively, the "Services").

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, display name (optional)
  • Preferences: Selected buoy stations, unit preferences, notification settings
  • Legal Acceptance Records: Timestamps and version numbers of accepted terms

2.2 Information Collected Automatically

  • Device Information: Device type, operating system version, app version
  • Usage Data: Selected stations, timeframes viewed
  • Crash Reports: Technical logs when the app encounters errors
  • Location and Motion Data: When using the Trips feature or roughness tracking, we collect GPS coordinates and device motion data (accelerometer, gyroscope). This data is used to:
    • Display your location and route on the map
    • Calculate water roughness conditions
    • Improve our algorithms and develop new features
    • Location tracks remain private by default unless you choose to share them through future social features

2.3 Information Collected via the Website

When you visit goodbuoy.co, we may collect:

  • Waitlist Signup: If you join our waitlist, your email address is collected and managed by Clerk (our authentication provider). We use this to send launch updates and product announcements. You may unsubscribe at any time.
  • Authentication Data: If you sign in via the website, Clerk processes your email, session tokens, and IP address.
  • Cookies: Our authentication provider (Clerk) sets session cookies necessary for sign-in functionality. We do not use marketing or advertising cookies.
  • Hosting Data: Our website is hosted via Cloudflare, which may process IP addresses and request headers as part of content delivery.

2.4 Information We Do NOT Collect

  • Financial information (we don't process payments)
  • Contacts or messages
  • Photos or media (except BuoyCAM images from NOAA)
  • Social media profiles or activity

3. How We Use Your Information

We use your information to:

  • Sync your preferences across devices
  • Display location and routes when using Trips or roughness features
  • Analyze location and motion data to improve roughness algorithms and develop new features
  • Improve app performance and fix bugs
  • Send notifications you've requested
  • Maintain security and prevent abuse
  • Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process data based on:

  • Consent: For optional features like notifications
  • Contract: To provide the service you requested
  • Legitimate Interest: For security and service improvement

5. Data Sharing

We do NOT sell your personal information. We may share data with:

  • Service Providers: Cloud hosting (Railway), authentication (Clerk). These providers are bound by data processing agreements and may collect technical data such as IP addresses, device information, and browser data as part of service delivery.
  • Legal Requirements: If required by law or valid legal process
  • Business Transfers: In the event of merger or acquisition
  • Social Sharing (Future): If we introduce social features, you will have the option to share your location or trip data with other users. This will always be your choice.

6. Cookies

Our Services use the following cookies:

  • Authentication Cookies: Set by Clerk to maintain your sign-in session. These are necessary for the authentication functionality to work.
  • No Marketing Cookies: We do not use advertising, tracking, or analytics cookies.

If you prefer not to accept cookies, you may adjust your browser settings. Note that disabling cookies may affect sign-in functionality.

7. Data Retention

  • Account Data: Retained while your account is active
  • Waitlist Data: Retained until the product launches or you request removal, whichever comes first
  • Location and Motion Data: Retained for up to 24 months for algorithm improvement and feature development. You may request deletion at any time.
  • Legal Acceptance Records: Retained indefinitely for legal compliance
  • Usage Analytics: Aggregated analytics retained indefinitely

8. Your Rights

You have the right to:

  • Access: Request a copy of your data
  • Correction: Update inaccurate information
  • Deletion: Request deletion of your account and data
  • Portability: Export your data in a standard format
  • Objection: Object to certain processing
  • Withdraw Consent: For consent-based processing

To exercise these rights, contact: support@goodbuoy.co

9. Data Security

We implement industry-standard security measures:

  • Encrypted data transmission (HTTPS/TLS)
  • Authentication handled by Clerk with industry-standard security practices
  • Regular security updates
  • Access controls on databases

No system is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

The Services are not intended for children under 16. We do not knowingly collect data from children. If you believe we have, contact us immediately.

11. California Privacy Rights (CCPA)

California residents have additional rights:

  • Right to know what data we collect
  • Right to delete your data
  • Right to opt-out of data sales (we don't sell data)
  • Right to non-discrimination

12. International Data Transfers

Data may be transferred to and processed in the United States. By using the Services, you consent to this transfer.

13. Third-Party Services

The Services connect to:

  • NOAA NDBC: To fetch buoy data (NOAA's privacy policy applies to their services)
  • NOAA MaritimeChartService: To fetch nautical chart overlay data (NOAA's privacy policy applies)
  • OpenSeaMap: To fetch seamark overlay data (OpenStreetMap's privacy policy applies)
  • Clerk: For authentication. Clerk processes authentication data on our behalf and may collect IP addresses, device information, and browser data as part of providing secure authentication services. See clerk.com/legal/privacy for their privacy practices.

14. Changes to This Policy

We may update this policy. Material changes will be communicated through the Services and require re-acceptance.

15. Contact Us

For privacy questions or to exercise your rights: support@goodbuoy.co