Privacy Policy

1. Data controller

The controller is Breukers Willem Albertus E.E., Valaoritou 1, 106 71 Athens, Greece (Γ.Ε.ΜΗ. 186520701000, VAT EL802973201). For any privacy request, contact us at [email protected]. We have not appointed a Data Protection Officer, as we are not required to; the contact above handles all data-protection matters.

2. Privacy at a glance

• No account required — we do not ask for your name, email or a login to use the app.
• Your data stays on your device — favourites and preferences are stored locally, not on our servers.
• Location is used only to find nearby beaches — with your permission, and never sold.
• Ads can be turned off — a one-time purchase removes advertising entirely.
• You are in control — you can withdraw consent and exercise your rights at any time.

3. What data we process and why

4. How we handle location

Location access is optional and only requested when you use features that need it. When granted, your coordinates are used to find nearby beaches and to request weather, marine and points-of-interest data for that area. We do not build location-history profiles about you and we do not sell location data. You can turn location off at any time in your device settings; the app remains usable, for example by searching for a place by name.

5. Advertising and consent

Unless you buy the ad-free upgrade, we show advertising via Google AdMob. In the EEA and Greece, we ask for your consent before any non-essential access to information on your device or personalised advertising, in line with the ePrivacy rules (Greek Law 3471/2006) and the GDPR. You can change or withdraw your advertising consent at any time in the app, and through your device's ad-tracking controls (Apple's App Tracking Transparency, or Google's Ads settings). Withdrawing consent does not affect the lawfulness of processing before withdrawal.

6. Who we share data with (processors and recipients)

We do not sell your personal data. We share it only with service providers who process it on our behalf under data-processing agreements, or where it is technically necessary to deliver a feature you use:

We may also disclose data where required by law or to protect our legal rights.

7. International transfers

Some recipients are located outside the European Economic Area. Where that is the case, transfers are protected by an appropriate safeguard under Chapter V of the GDPR — an adequacy decision (including certification under the EU–US Data Privacy Framework, where applicable) or the European Commission's Standard Contractual Clauses. You can request a copy of the relevant safeguards using the contact details above.

8. How long we keep data

• On-device preferences and favourites remain until you delete them or uninstall the app.
• Cached technical/forecast data is short-lived and refreshed or expired automatically.
• Purchase records are kept as long as needed to provide the entitlement and to meet accounting/tax obligations (generally up to the statutory retention period under Greek law).
• Support correspondence is kept only as long as needed to handle your request and for a reasonable period afterwards.

9. Your rights

Under the GDPR and Greek Law 4624/2019 you have the right to:

• access your personal data and obtain a copy;
• rectify inaccurate data and complete incomplete data;
• erase your data ("right to be forgotten");
• restrict or object to processing based on legitimate interests;
• data portability for data you provided, where applicable;
• withdraw consent at any time, without affecting prior processing.

To exercise any right, email us at [email protected]. We respond within one month. Because much of your data lives only on your device, you can also exercise many of these rights directly — for example by clearing app data, revoking location permission, or uninstalling the app.

10. Right to lodge a complaint

If you believe we have not handled your data properly, you may lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα): 1-3 Kifissias Avenue, 115 23 Athens, Greece, tel. +30 210 6475600, [email protected], https://www.dpa.gr. You may also complain to the supervisory authority in your EU country of residence.

11. Children's privacy

The Service is not directed to children and we do not knowingly collect data from anyone under the age of 15. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Automated decision-making

We do not carry out automated decision-making that produces legal or similarly significant effects concerning you. The Suitability Score ranks beaches by conditions and preferences; it is not a profiling decision about you as an individual.

13. Security

We use appropriate technical and organisational measures to protect data, including encryption in transit (HTTPS), minimisation (keeping data on your device where possible), access controls and short-lived caching. No method of transmission or storage is completely secure, but we work to protect your information and to detect and address incidents.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will change the "Last updated" date and, for material changes, provide a more prominent notice in the app. Please review it periodically.