Privacy Policy

1. Who We Are

Master's Mate ("we", "us", "our") is a yacht management platform operated by Master's Mate LLC. This policy describes how we collect, use, and protect your information when you use our website at mastersmate.com, our Android application, and related services (collectively, the "Service").

2. Information We Collect

Account information. When you create an account, we collect your name, email address, and (if you choose email signup) a password. If you sign in with Google, we receive your Google account name, email, and unique Google ID. We do not receive or store your Google password.

Boat and vessel data. Information you provide about your vessel, including boat name, type, dimensions, equipment, maintenance records, inventory, expenses, checklists, documents, and crew information.

Location data. GPS coordinates from your onboard instruments (via NMEA data feed) for anchor watch, passage tracking, and chart display. Location data is collected only when your instruments are connected and transmitting.

AIS data. Automatic Identification System data from nearby vessels, received through your onboard AIS receiver for collision avoidance and buddy boat tracking.

Device information. When you use our Android app, we collect your Firebase Cloud Messaging (FCM) token for push notification delivery. We also collect basic device identifiers to manage notification subscriptions.

Usage data. An activity log records actions taken within your dashboard (e.g., anchor set/disarm, settings changes) for audit and troubleshooting purposes. This log is visible only to the boat owner.

3. How We Use Your Information

• Provide the Service: Display your boat's position on charts, run anchor watch, deliver alarm notifications, track passages, and manage vessel records.
• Send notifications: Deliver anchor drag alerts, alarm escalations (SMS, voice call via Twilio), welfare checks, reminders, and buddy boat proximity alerts to you and your crew.
• Authentication: Verify your identity when you sign in, manage multi-boat access, and enforce role-based permissions.
• Improve the Service: Diagnose technical issues, monitor system health, and develop new features.

4. Information Sharing

We do not sell, rent, or trade your personal information. We share data only in the following circumstances:

• With your crew: Users you invite to your boat can see vessel data according to their assigned group and permissions (Owner, Crew, Passenger, or Guest).
• Public map: If you enable the public map, your boat's position and basic status are visible without authentication. You can disable this at any time.
• Buddy boats (Pals): If you add another boat as a pal, and they accept, you share position data with each other.
• Service providers: We use Twilio for SMS and voice call escalations, Firebase (Google) for Android push notifications, and Google OAuth for sign-in. These providers process data as necessary to deliver their services, subject to their own privacy policies.
• Legal requirements: We may disclose information if required by law or in response to valid legal process.

5. Data Storage and Security

Your data is stored on our servers. Each boat's data is stored in its own isolated database. We use HTTPS encryption for all data in transit. Passwords are hashed and never stored in plain text.

Push notification tokens (VAPID and FCM) are stored per-user and automatically cleaned up when they become invalid.

6. Data Retention

We retain your account and vessel data for as long as your account is active. If you delete your account, your data is permanently removed from our servers. Anchor session logs, passage tracks, and logbook entries are retained indefinitely as part of your vessel's historical record unless you manually delete them.

7. Your Rights

You can:

• Access all your data through the dashboard at any time.
• Export your logbook entries, maintenance records, and other data.
• Delete individual records (logbook entries, maintenance items, documents, etc.) through the dashboard.
• Disable location tracking by disconnecting your NMEA instruments.
• Disable push notifications through your device settings or the app's notification preferences.
• Request full account deletion by contacting us.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Third-Party Services

• Google OAuth: Used for sign-in. Subject to Google's Privacy Policy.
• Firebase Cloud Messaging: Used for Android push notifications. Subject to Firebase Privacy Policy.
• Twilio: Used for SMS and voice call alarm escalation. Subject to Twilio's Privacy Policy.
• Stripe: Used for payment processing. Subject to Stripe's Privacy Policy. We do not store credit card numbers.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this privacy policy or your data, contact us at:

Email: privacy@mastersmate.com