Privacy policy

• Data controller

The operator and data controller of Compass 2050 is Jakub Lewandowski, developer. Privacy contact: admin@apiservice.pl.

• What data we process
• Location (GPS/GNSS) — compass, map, tracks, weather, sun position, alarms, deck log, calendar.
• Sensor data (accelerometer, magnetometer, barometer, step counter) — yacht heel, altimeter, compass.
• Photos and files — yacht documentation, boat documents (PDF), GPX export.
• Audio recordings — deck log voice entries (microphone), sound signals (playback).
• Camera — yacht documentation photos, signal lamp torch.
• Emergency contacts — phone and WhatsApp numbers you enter in MOB, VHF phrasebook, and crew lists.
• Purchase identifiers — optional donations via Google Play Billing (no card data — payment handled by Google).
• Optional Strava — after OAuth consent (token and activity ID stored locally).

• Where data is processed

Most data stays on your device (Room database, local files). We do not sell personal data.

• Third-party services
• MET Norway (api.met.no) — coordinates to fetch weather (CC BY 4.0).
• Strava (strava.com) — only after connecting your account and exporting a track.
• OpenStreetMap (osmdroid) — map tiles downloaded without user identification.
• Google Play Services Location — device location per Android permissions.
• Google Play Billing — optional donations (Google privacy policy applies).

• Android permissions

• The app may request

• Location (fine and coarse) — navigation, tracks, weather, GPS alarms.
• Internet — weather, maps, optional Strava.
• Notifications — alarms, track recording, reminders.
• Foreground service — background GPS monitoring (anchor watch, track, alarms).
• Camera — yacht documentation, signal lamp.
• Microphone — deck log voice entries.
• Activity recognition — GPS track optimisation.
• Exact alarms — calendar reminders.
• Boot completed — resume alarms after restart.
• Vibration, wake screen, full-screen intents — safety alarms.
• Storage (older Android) — GPX file export.

Permissions are used only for features you use.

• Sharing data

You share data yourself when using position sharing, SMS, WhatsApp, GPX export, or Strava.

• Retention and deletion

Delete local data via Android app settings or by uninstalling. Remove the Strava token by disconnecting in the app.

• Children

The app is not directed at children under 13 and does not knowingly collect their data.

• Policy changes

Updates appear in the app and at this public URL (required by Google Play).

• Legal basis (EU/GDPR)

Location and sensor processing is based on providing the service (Art. 6(1)(b) GDPR) and your consent via system permissions (Art. 6(1)(a) GDPR) where required.