Privacy policy.

The app works without an account. Since version 26.10 you may optionally sign in with Google or Apple (Firebase Authentication) to sync preferences and manage subscriptions across devices.

Account data (if you sign in)

• Email address — including Apple Hide My Email relay addresses when you choose that option.
• First and last name from your provider profile when available.
• Phone number — only if your Google or Apple account includes one; we do not require it separately.

Identifiers

• Firebase Authentication user ID (UID).
• Adapty customer user ID (same as your Firebase UID when signed in).
• Adapty SDK device identifier for subscription and analytics.

Subscriptions (Adapty)

• Purchase and subscription history, product identifiers, and entitlement status.
• Payments are processed by Apple and Google. We do not receive or store card numbers or full payment details.

Usage linked to your account (Adapty profile)

• Sign-in method (Google or Apple).
• Date of your first sign-in (account creation).
• Device timezone.
• Count of saved locations and the name of your main saved location (approximate area — not GPS coordinates sent to Adapty).

Diagnostics (Adapty, automatic)

• App version, operating system version, device model, store country, and language.

Analytics and crash reporting (Firebase)

• Firebase Analytics — aggregated usage events (screens, flows) without selling data to advertisers.
• Firebase Crashlytics — crash logs and technical diagnostics to fix bugs.

We do not request the iOS advertising identifier (IDFA) for tracking or ads.

Without an account

• Technical information: approximate IP (region/timezone), device type, OS, language.
• Locations you choose: place search via a third-party geocoding service. If you tap "Use my current location", GPS is read at that moment with your permission — no background tracking.
• Saved locations and tide cache stay on your device unless you sign in (profile attributes above).

We use data for:

• App functionality — tides, sun/moon, waves, and location features you request.
• Account management — optional sign-in, subscription status, and support.
• Analytics and improvement — understand usage, fix crashes, improve reliability.
• Comply with the law when required by a competent authority.

We do not use your data for third-party advertising or cross-app tracking, we do not sell personal data, and we do not use IDFA for tracking.

Data sent between the app, our processors, and APIs is protected with encryption in transit (HTTPS/TLS).

We use external services to run the app. Key processors (they handle data on our behalf):

• Google / Firebase (Authentication, Analytics, Crashlytics) — Firebase Privacy
• Adapty (subscriptions and related profile data) — Adapty Privacy Policy

Other services for ocean and location data (each with its own policy):

• Mapping and geocoding — location search.
• Marine weather data — waves and swell.
• Open scientific tide models — tide predictions (no personal data).
• App Store and Google Play — distribution and in-app payments.

The mobile app does not use cookies.

The website uses minimal technical cookies (CDN/hosting and anonymous analytics). You can block them in your browser without losing essential functionality.

If you live in the EU or EEA, the GDPR gives you rights over your personal data:

• Access — know what data we have about you.
• Rectification — correct inaccurate data.
• Erasure — ask us to delete your account and associated data. See /delete-account for steps.
• Portability — receive your data in an exportable format.
• Objection — limit how we process it.
• Complaint — contact your local data protection authority (e.g. AEPD in Spain).

The app is intended for general audiences. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal data without parental consent, contact us and we will delete it promptly.

If we update this policy, we change the date in the header and, when changes are significant, we notify you in the app or on the website before they take effect.

Questions about this policy or your data:

• Email: hola@mareasymas.com
• Controller: Andrey Azofeifa Guerrero — Software Engineer / Architect · Uvita, Costa Rica
• Delete account: /delete-account

This policy is governed by the laws of Costa Rica, without prejudice to GDPR rights for EU residents.