Privacy Policy

unnur is built so you can log surf sessions privately. We collect only what we need to make the app work.

1. Information we collect

Account information

When you create an account, we store your email address and a salted, hashed password.

Session and spot data

The data you log inside the app: surf spots you create, sessions and wave checks (date, time, duration, rating, conditions, notes, board), and any photos you attach.

Location

If you grant location permission, we use your device's location to:

• Center the map on your current position
• Pre-fill the location of new surf spots you create
• Fetch local weather and swell conditions

We do not track your location in the background.

Conditions data

When you log a session, we fetch historical weather and swell data for that time and location from Open-Meteo. We send the spot's coordinates and the session timestamp to Open-Meteo to make this request.

Diagnostics

We collect usage diagnostics (which screens are opened, app version) linked to your account so we can debug issues you report. We use PostHog (EU region) for this.

2. How we use it

• To provide the core features of the app — logging, mapping, statistics
• To diagnose and fix problems
• To respond when you contact support

We do not use your data for advertising. We do not sell your data.

3. When we share data

We only share data with the following service providers, and only what is needed for them to perform their function:

• Supabase (EU region) — hosts your account, session, and spot data on our behalf
• Open-Meteo — to fetch weather and swell data for your sessions
• PostHog (EU region) — to collect product diagnostics linked to your account
• Apple App Store / Google Play — for billing and app delivery

We may use other service providers in the future to operate or improve unnur. Any new provider will be bound by data protection terms equivalent to those above.

We may disclose information if required by law or to protect the rights, property or safety of unnur, our users, or the public.

4. Storage and security

Your data is stored on servers in the European Union. We use industry-standard encryption in transit (TLS) and at rest. Photos and notes are encrypted at rest.

No method of transmission over the internet is 100% secure. We do our best, but cannot guarantee absolute security.

5. Your rights

You can, at any time:

• Access and export your data — email unnursurf@unnursurf.com and we'll send you a copy within 30 days
• Correct any data — by editing it in the app
• Delete your account and all associated data — Settings → Account → Delete account
• Withdraw consent for location tracking in your device settings

If you are in the EU, you have rights under the GDPR including the right to lodge a complaint with your supervisory authority.

6. Children

unnur is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, please contact us and we will delete it.

7. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll give you reasonable notice — for example through an in-app message, email, or a notice on our website — before they take effect.

8. Contact

Questions about this policy? Email unnursurf@unnursurf.com.