Boat & Berth — Privacy policy
Draft of 10 November 2026. Not yet in force.
Effective date: [date of first release]
Who we are
Boat & Berth ("the app") is published by Alison Weedall, an individual developer ("we", "us"). Contact: info@boatandberth.com. Postal address: Hala Gardens 3, Gate 1221, Road 2941, Block 529, Al Markh, Bahrain. We are the data controller for the personal data described below.
The short version
- Everything you enter for yourself in the app (your buyer profile, shortlist, viewings, boat details, maintenance log, documents, logbook) is stored only on your device. We cannot see it.
- Boat listings are prepared by us and downloaded by the app from our online service in the European Union. The app does not visit the listing websites from your phone.
- If you advertise your boat, you sign in with your email address and a one-time code. Your ad, with the contact details you choose to show, is public to everyone using the app and our website until you remove it or it ends.
- The app shows no third-party advertising.
- Purchases (the Buying pass, the Owner plan, the Full plan, card packs and ads) are handled by Google Play. We never see your payment details.
- We do not sell personal data. We share it only with the service providers named in this policy, who act on our instructions.
What data the app handles and why
| Data | Where it is stored | Why | Who can see it |
|---|---|---|---|
| Your buyer profile (budget, boat size, preferences, countries) | On your device only | To rank boats for you | Only you |
| Shortlist, dismissed boats, saved viewings, comparisons, notes, ads you add by hand | On your device only | To keep your search in one place | Only you |
| Your boat, engine hours, maintenance log, photos, reminders, logbook | On your device only | The Keep features | Only you |
| Documents vault (photos or PDFs of your boat papers) | On your device only, in the app's private storage | So your papers are to hand | Only you |
| Draft of your boat ad, before you publish it | On your device only | So you can prepare the ad | Only you |
| Listing files (facts and links of boats for sale) | Our service in the EU, then cached on your device | To show and rank boats | Everyone using the app; our service sees an ordinary download request (see below) |
| Your email address and sign-in record, if you advertise | Our service in the EU (Supabase, Ireland) | To let you publish, change and remove your own ads | Us and our hosting provider; never shown to buyers |
| Your published ad: boat facts, price, VAT status, place, description, equipment, photos, the contact you choose to show (email or phone) and, if you give it, a name | Our service in the EU | To show your boat to buyers, as you asked | Everyone using the app and our website, while the ad is live |
| Reports about an ad ("Report this ad"): the reason, any details and, if you give it, your email | Our service in the EU | To deal with illegal or misleading ads (EU Digital Services Act) | Only us; never the advertiser |
| Purchase records | Google Play | To unlock what you bought | Google; we see only that a purchase exists, not who you are or how you paid |
| Suggestions and problem reports you email us | Your email provider and our email inbox | To improve the app | Us |
| Crash and diagnostic data | Google Play (if you have enabled it in your Android settings) | To fix bugs | Google and us, anonymised |
We do not collect your precise location or your contacts. The marina and harbour map uses fixed positions from our data, not where you are.
Listings
We prepare the listing files ourselves, from the facts that boat-sale websites publish (model, year, length, price, location, link), respecting each site's robots rules and without getting round logins or blocks. The app shows facts and a link only; it does not copy listing photos or full descriptions, and the original advert is the only authoritative source. If you run a listing website and want your listings left out, write to info@boatandberth.com; we remove them within seven days. When the app downloads a listing file, our hosting provider receives an ordinary web request from your device, including your IP address; it is used only to deliver the file and to keep the service secure, and is kept in short-lived server logs.
Advertising your boat
To publish an ad you give an email address; we send a one-time sign-in code to it, and you stay signed in on that device until you sign out. The sign-in emails are sent through Google's email service (Gmail) on our behalf.
Your ad is public: anyone using the app or our website can see it, including the contact details you chose to show. Show only what you are happy for strangers to see, and never share bank details in an ad. Ads run for 90 days and can be renewed; you can change or remove your ad at any time, and removing it deletes it and its photos from our service. Each person can have up to three live ads.
We do not check ads before they go live. Buyers can report an ad; three reports hide it until we have looked at it, and we may remove ads that are illegal, misleading or not for a real boat. If we hide or remove your ad, we tell you why: the reason is shown with your ad in the app and sent to the email you signed in with. The full rules are in "Rules for private ads".
The legal basis is the service you ask for (publishing your ad) and, for reports and moderation, our legal obligations and our legitimate interest in keeping the ads honest and safe.
Purchases
Purchases are made through Google Play's billing system. Google processes your payment and holds your purchase history under its own privacy policy. We receive only an anonymous confirmation that the purchase is valid for your Google account on this device.
Service providers and where data is kept
- Supabase (Supabase Inc.) hosts our online service: listing files, sign-in, published ads, ad photos and reports. The data is stored in the European Union (Ireland).
- Google delivers sign-in emails (Gmail) and handles purchases and optional crash reports (Google Play).
These providers may access data from outside the EU for support and security. Where that happens, they rely on the safeguards required by EU law, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
Backups and transfers
If you use Android backup, your app data may be included in your Google account backup under Google's terms. The Owner plan includes an export file that you create and store yourself; we never receive it.
Retention and deletion
- Data on your device: you control it. Deleting an item in the app deletes it; uninstalling the app or clearing its storage removes everything.
- Published ads: deleted, with their photos, when you remove them. Ads that end and are not renewed are deleted within six months.
- Your sign-in (email address): kept while you have an ad with us, and deleted automatically once you have had no ad and not signed in for six months. Write to info@boatandberth.com to have it and all your ads deleted sooner; we do so within 30 days.
- Reports: kept until we have dealt with them, then for up to one year as a record of how we handled them. Reports about an ad are also deleted when the ad is deleted.
- Emails you send us: kept for as long as needed to act on them, then deleted.
Your rights
If you are in the EEA or UK you have rights under the GDPR or UK GDPR to access, correct, delete and port your data and to object to or restrict its processing. For data on your device, you exercise these rights directly in the app. For your sign-in, your ads, reports and emails, write to info@boatandberth.com. You may complain to your national data protection authority (for example, in Greece the Hellenic Data Protection Authority, www.dpa.gr).
Children
The app is intended for adults buying or owning a boat. It is not directed at children under 16, only adults (18 or over) may publish ads, and we do not knowingly collect data from them.
Security
Data on your device is protected by your device's own security (screen lock, encryption); keep your device updated and locked. Our online service uses encrypted connections, and its database rules let each advertiser change only their own ads. No system is perfectly secure; if a breach affected your data, we would tell you and the authorities as the law requires.
Changes
We will update this policy when the app changes and show the date at the top. Material changes will be noted in the app's "What's new" screen.