Surf Reader

01 The short version

• The App is local-first. Your surf sessions, reviews, plans, beach maps and settings are stored on your device. There are no accounts, logins, or a cloud database that mirrors your content.
• We do not sell or rent your personal information, and we do not track you across other apps or websites for advertising.
• We collect a small amount of technical data (crash and diagnostic reports) to keep the App working, through Sentry.
• Some features hand data to your device’s operating system or to third parties only when you choose to use them — voice dictation, sharing/printing, and in-app training videos.
• You can delete everything at any time using the in-app “wipe all data” option or by uninstalling the App.

02 Information we collect

2.1  Information you create and store on your device

When you use the App you can create surf sessions, reviews and ratings, plans, beach maps and drawings or screenshots of those maps, along with app preferences such as your chosen language and display settings. This content is stored locally on your device — in an on-device database, key–value store, and app file storage.

We do not transmit this content to us or to any server. It stays on your device unless you choose to share or print it (see 2.4). If you dictate text by voice, see 2.3.

2.2  Crash and diagnostic data (Sentry)

To detect and fix crashes and errors, the App uses Sentry (a product of Functional Software, Inc.). When the App encounters an error, it may send a diagnostic report that can include:

• the type of error and a technical stack trace;
• device and environment information such as device model, operating-system version, and App version;
• a trail of recent, non-identifying in-app events (“breadcrumbs”) — for example that a share action was attempted, together with technical identifiers such as a share type or a random content identifier.

We have not enabled personal-identifier collection in Sentry: reports are not linked to your name, email, or a user account (the App has none). Sentry may process the IP address used to transmit a report as part of delivering the service; we do not use it to identify you. Breadcrumb events are scrubbed against a strict allow-list in the App so that free-form text you type (such as notes or place names) is not included. We use this data solely to diagnose stability and quality issues.

2.3  Voice dictation (optional)

Some screens let you enter text by voice instead of typing. If you tap the microphone and grant permission, your device’s operating system converts your speech to text using Apple’s (iOS) or Google’s / your device’s (Android) speech-recognition service. Depending on your device and its settings, this processing may happen on-device or on the provider’s servers, under their privacy policies.

We do not record, store, or transmit the audio ourselves. We receive only the transcribed text, which you can review and edit before you save it. If you don’t use voice dictation, no audio is ever accessed. You can revoke microphone access at any time in your device settings.

2.4  Sharing and printing (optional, user-initiated)

When you choose to share or print a plan, session, or beach map, the App generates an image or PDF and passes it to your device’s standard share or print sheet. You choose the destination — messages, email, another app, a printer. Once shared, the content leaves the App and is handled by the destination you selected and its provider, outside our control.

2.5  In-app training content (embedded web view)

The App includes a screen that loads training content from esurfr.com and plays videos via the Vimeo player inside an in-app browser view. We request “do not track” for embedded Vimeo playback, but Vimeo and esurfr.com may still process technical data (such as IP address, device/browser information, and playback events) under their privacy policies to deliver and measure the content.

2.6  App updates

The App uses Expo / EAS Update to deliver over-the-air updates. When it checks for or downloads an update, your device contacts Expo’s update servers, which may process technical request metadata (such as IP address, App/runtime version, and device platform) to deliver the correct update.

2.7  App stores and platforms

We distribute the App through the Apple App Store and Google Play. When you download, install, or update the App — or contact the stores — Apple and Google collect and process information under their privacy policies, including aggregate download, performance, and (where you opt in) crash statistics. We may see this only in aggregated, de-identified form.

03 What we don’t collect

• No accounts. There is no sign-up, login, or password.
• No location. The App does not request or access your device location.
• No camera or photo-library access.
• No advertising. We use no advertising identifiers (no IDFA/AAID), ad networks, or third-party advertising or marketing analytics SDKs.
• No cross-app or cross-site tracking. The App’s Apple privacy manifest declares NSPrivacyTracking = false.
• No selling or renting of personal information.

04 How we use information

We use the limited information described above only to:

• provide, maintain, and operate the App and its features;
• diagnose crashes, fix bugs, and improve stability and performance;
• deliver in-app training content and App updates you request; and
• comply with legal obligations.

We do not use your information for advertising, profiling, or automated decision-making that produces legal or similarly significant effects.

05 Legal bases (EU/UK users)

Where the GDPR or UK GDPR applies, we rely on:

• Legitimate interests (Art. 6(1)(f)) — to keep the App secure, stable, and functional (crash/diagnostic data), balanced against your privacy;
• Consent (Art. 6(1)(a)) — for optional features you actively enable, such as microphone/voice dictation; and
• Provision of the service (Art. 6(1)(b)) — to deliver App updates and content you request.

You may withdraw consent at any time (for example, by revoking microphone permission) without affecting processing already carried out.

06 Disclosure and third-party services

We do not sell your personal information and we do not share it, except with the service providers that make the App work, and only for the purposes above:

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, or property of our users or others.

07 International data transfers

We are based in Australia. Some of the service providers above (for example Sentry, Apple, Google, Vimeo, and Expo) may store or process data on servers outside your country, including in the United States. Where required, these transfers are protected by appropriate safeguards such as the providers’ Standard Contractual Clauses or equivalent mechanisms. By using the App you understand that limited technical data may be processed in those locations.

08 Data security

Content you create is stored within your device’s app sandbox, protected by your device’s operating-system security and any passcode or biometric lock you have set. Diagnostic data in transit to Sentry is encrypted using HTTPS/TLS. No method of storage or transmission is completely secure, but we take reasonable steps to protect the limited information involved. Because your content lives on your device, keeping your device secure and backed up matters — we cannot recover on-device content you delete or lose.

09 Data retention and deletion

• Your on-device content is retained until you delete it — via the App’s “wipe all data” option, by deleting individual items, or by uninstalling the App (which removes its local data).
• Crash/diagnostic data in Sentry is retained for Sentry’s standard retention period and then deleted or aggregated. Because these reports are not linked to your identity, we generally cannot single out or retrieve an individual user’s reports.
• App store and provider data is retained by those providers under their own policies.

10 Children’s privacy

The App is a surf-training tool intended for a general audience and is not directed at children under 13 (nor under 16 in jurisdictions that set that threshold). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App, contact us and we will address it.

11 Your privacy rights

Because the App is local-first and holds no account for you, the fastest way to access, correct, or delete the content you create is directly in the App on your device. For the limited data described in this policy, you also have the following rights.

11.1  Australia (Australian Privacy Principles)

You may request access to and correction of the personal information we hold about you, and you may complain about how we handle it. We will respond within a reasonable time. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11.2  EU / UK (GDPR)

You have the rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You may also lodge a complaint with your local supervisory authority.

11.3  California (CCPA/CPRA)

You have the rights to know what personal information is collected and how it is used, to delete and correct it, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information, and we do not knowingly process the personal information of consumers under 16 for such purposes. We will not discriminate against you for exercising your rights.

11.4  How to exercise your rights

Send requests to info@martindunn.com.au. We may need to verify your request. Because we hold little or no information that identifies you, we may be unable to associate a request with a specific individual; where that is the case we will explain why. You may use an authorised agent where the law permits.

12 Changes to this policy

We may update this policy from time to time. When we do, we will change the “Updated” date above and, for material changes, provide a more prominent notice (for example, in the App or in the store listing). Your continued use of the App after an update means you accept the revised policy.

13 Governing law

This policy is governed by the laws of Australia and the state or territory in which we are established, without regard to conflict-of-laws principles. Nothing in this policy limits rights you have under mandatory local law (including the GDPR, UK GDPR, CCPA/CPRA, or your local consumer and privacy laws).

14 Contact us

If you have a question or concern about your privacy or this policy, contact us and we’ll do our best to resolve it.