Privacy policy

LAST UPDATED · 2026-07-13

Afloata (“we”, “us”) is an offline-first boat maintenance app for iOS and Android, and this website (afloata.com). This policy explains what data we handle, where it lives, and what control you have over it. The short version: your boat data is yours, it lives primarily on your device, we don't show ads, and we never sell data.

Data you give us

• Account data. When you create an account: your email address, a display name, and a password (stored only as a cryptographic hash). If you sign in with Apple or Google, we receive an identifier and the email those services share with us instead of a password.
• Boat data. Boats, equipment, maintenance schedules, service log entries, checklists, expenses, and any photos or documents you attach. This is the content the app exists to manage.

Where your data lives

• On your device, first. Afloata is offline-first: every record is stored in a local database on your phone. You can use the app without any connectivity.
• On our servers, when you sign in. Signing in enables sync: a copy of your boat data and attachments is stored on servers we operate, so it can reach your other devices and survive a lost phone. Server infrastructure is hosted in the European Union; if that ever changes materially, we will update this policy.

How we use data

• To run the service: syncing between your devices, storing attachments, sending the reminders you configure.
• To fix problems: error and crash reports may include technical details (device model, OS version, app version, stack traces). They do not include advertising identifiers.
• To respond when you contact support.

We do not sell or rent personal data. We do not show ads. We do not build advertising profiles.

What we share, and with whom

• Infrastructure providers that host our servers and file storage, processing data on our instructions.
• Sign-in providers (Apple, Google) when you choose to sign in with them.
• App stores and payment processors (Apple App Store, Google Play, and their subscription tooling) if and when you buy a subscription — we never see your card details.

This website

afloata.com is a static site. It sets no cookies and runs no analytics or tracking scripts.

Retention and deletion

We keep your synced data for as long as your account exists. Deleting your account (Settings → Account → Delete account, or see account deletion) permanently and irreversibly erases your synced data from our servers. We retain only a minimal, irreversible record that the account was deleted, which prevents a deleted account from being restored or impersonated.

You can export a complete snapshot of your data from the app's settings at any time.

Your rights

Where the GDPR or similar laws apply, you have the right to access, correct, export, restrict, object to the processing of, and erase your personal data. Most of these you can exercise directly in the app (edit, export, delete). For anything else, email us — and you may lodge a complaint with your local supervisory authority.

Children

Afloata is not directed at children under 16, and we do not knowingly collect their data.

Security

Data in transit is protected with TLS. Passwords are stored only as salted hashes. Access to production systems is restricted and credentialed.

Changes

If this policy changes in a way that matters, we will note it in the app or on this page before it takes effect.

Contact

Privacy questions: privacy@afloata.com