Privacy policy

• Account data: email address, password hash, and optional display name.
• Profile data: home break, skill level, preferred unit system, language, avatar photo, and onboarding status.
• Spot data: names, regions, notes, and precise GPS coordinates for your My spots and any public spots you copy.
• Session data: start time, duration, rating, notes, board used, wave and weather observations, and hourly condition mixtures.
• Crew data: crew names, descriptions, invite codes, your role, and shared spot or session shares.
• Billing data: Stripe customer and subscription IDs. We do not store payment card details.

We process data to provide the Kookbook service: to log sessions, build personal and crew forecasts, manage subscriptions, and communicate about your account. The legal basis is performance of our contract with you and, where required, your consent.

Most processing is necessary to provide the service you requested. Analytics and non-essential cookies rely on your consent, which you can withdraw at any time.

We keep your data while your account is active. When you delete your account, we remove profile, spots, sessions, boards, crew memberships, and subscription metadata. Some data may remain in encrypted backups for a short period before automatic deletion.

• Hosting: Lovable Cloud (Supabase) in the AWS us-west region.
• Payments: Stripe for subscription management.
• Authentication: Google sign-in, if you choose it.
• Maps and forecast: map tiles and marine forecast providers receive spot or session coordinates to render maps and fetch conditions.
• Analytics: Google Analytics, only after you consent in regulated regions.

• Access: use the Download my data button on your Profile page.
• Rectification: update your profile, spots, sessions, and boards in the app.
• Erasure: delete your account from the Profile page. This also cancels any active paid subscription.
• Objection: change your privacy settings to disable Google Analytics at any time.
• Withdraw consent: you can withdraw consent for analytics and privacy policy acceptance through the Profile page.

Kookbook stores only strictly necessary data: your authentication session and language preference. Google Analytics cookies are loaded only after you consent in the EU, EEA, UK, and similar regions. You can change this choice from the footer or Profile page.

Kookbook is not directed at children under 13 (or 16 where local law requires). If you believe a child has provided personal data, contact us to request deletion.

We may update this policy. We will note the latest revision date at the top of the page.

To exercise your rights or ask questions, contact us at kookbook@nico-data.com.