Privacy
Privacy policy
Marejada is a training planner for surfers, run from Nicaragua. This page says what we collect, why, who handles it on our behalf, and how to get it deleted. It is written to be read, not to cover every eventuality, so if something is unclear, ask. Marejada is in beta. A lawyer has not reviewed this policy or our Terms of Use yet. See “Our terms” near the end.
What we collect
Account details
When you sign in, we receive your email address and, if you sign in with Google, the name and profile picture on your Google account. We use them to identify your account and to send you sign-in codes. Sign-in is handled by Clerk, an authentication service, which holds these details for us. We also keep a copy of your email, name and picture in our own database, so the app knows who you are.
Your training profile
To build a plan we ask about your name, your goals, the equipment and facilities you can train with, when you are available and how long your sessions can be, your surfing background, the wave sizes you like to surf, and the surf spot you want forecasts for. You give us this during onboarding and can change it later. You can also choose whether the app shows feet or metres.
We do not ask for your height, weight or age. Early accounts may still hold answers to questions we have since stopped asking, and deleting your account removes them.
Your time zone
We store your time zone so that “today” turns over at your midnight, not ours. It comes from your chosen spot or, if the spot does not give one, from your browser. Your browser also keeps it in a small cookie called planning_tz for a year.
Injuries and physical condition
If you tell us about an injury, a niggle, or how a part of your body is feeling, we store it and use it to adjust your plan and to track whether things are getting better. That includes the body area, which side, how bad it is, how long it has been going on, your notes, and your later check-ins. We add each check-in to a history instead of overwriting the old one, so we can see the trend. When you log a session, we also record whether something held you back and where. This is health-related information. We collect it only because you enter it, and only to do that job. We never sell it or share it for advertising. We leave health details out of error reports.
What you do in the app
We record the sessions you complete, the surfs you log (date, length, how hard it felt, whether you cut it short), exercises you choose to skip and, if you give one, why, notes you add, any trip or dry-land stretch you set up, and how your training load builds up over time. That history is what the plan is built from. We also record when you agreed to our Terms and which version.
Notes and requests you send us
If you send feedback from Settings, we store your note, what kind it is (bug, idea or plan felt off), the screen you sent it from and the app version. Your name and email are not saved on the note. If you ask for local help (“Local pros near you”), we store what you picked and anything you wrote. We read these ourselves, and they trigger the phone alerts described below.
Surf forecasts and location
We fetch swell, wind, and tide forecasts for your chosen spot. The forecast request names the beach, not you. The spot is a beach, not your location; we do not track where you are.
To help you choose a spot, the app can suggest the nearest beaches. If you allow it, your phone or browser works out where you are and the app uses that on your device to find nearby beaches. We do not receive it and we do not store it. If your device cannot say where it is, the app asks our host, Vercel, for the rough place your internet connection comes from, such as a city, and uses that to suggest beaches. We do not store or log it. You can say no to both and pick a beach from a list.
Usage analytics
We use PostHog to see which parts of this website and the app get used, so we can tell what is working. On this website it counts page views, clicks on the request-access buttons, and whether you scrolled down to the About section, along with technical details such as browser type. It runs without cookies and without storing anything in your browser.
In the app it only counts the steps of onboarding: which step you saw and which you finished. It does not record your screen, your taps or what you type, and it is not told who you are. PostHog may keep a random identifier in your browser to tell one visit from another. We do not use it for advertising.
Error reports
When something breaks in the app, it sends a report to PostHog’s error tracking so we can fix it. Before it leaves, we remove email addresses and anything after a question mark in a web address, and we leave out health details. The report has no account id on it, so it is not tied to you.
Alerts to our phone
Some things in the app send a short alert to our phone, so we can reply quickly. The alerts go through ntfy.sh, a public push service. It is not a private channel: the alert passes through ntfy’s servers, and anyone who learned the secret name of our channel could read it. We keep that name long and private. This is what each alert contains:
- Someone joins the waitlist: the time. Never a name or email.
- You send feedback: your note (shortened if it is long), your name, your email, the screen, the app version and your account id.
- You ask for local help: your name, what you picked, anything you wrote, your chosen beach, whether you asked in onboarding or later, and your account id. No email.
- You have skipped five or more exercises: your name, how many, the latest exercise, the reason you gave and your account id. No email.
Deleting your account does not unsend an alert that has already gone out.
What we do not do
- We do not sell your information.
- We do not show ads or share your data with advertisers.
- We do not read your Google contacts, calendar, or anything beyond your name, email, and profile picture.
- We do not track your physical location. The nearest-beach suggestion described above is the only time the app asks where you are, and we do not keep the answer.
Who handles your data for us
A few services run parts of Marejada. Each one only gets what it needs.
- Clerk handles sign-in and holds your account details. It also holds the waitlist.
- Google is involved only if you choose to sign in with Google.
- Turso hosts the database where your profile, injuries, and training history live. Its servers are in the United States.
- Vercel hosts the app and this website. It also tells the app the rough place a connection comes from, if you ask the app to suggest beaches.
- PostHog provides the usage analytics and the error reports described above.
- ntfy.sh, a public push service, carries the phone alerts described above.
- YouTube shows the exercise demo videos. When a demo video is shown, it loads from YouTube’s privacy-enhanced address, and YouTube sees that request.
Some of these services run in the United States, so your data may be stored or processed there.
How long we keep it, and deleting your account
We keep your data while you have an account.
You can delete your account yourself. Go to the bottom of Settings, tap Delete account, and type DELETE. This cannot be undone. It deletes your profile, plans, training and surf history, injuries and check-ins, skipped exercises, the notes you sent us, and your saved onboarding answers. Then it closes your sign-in with Clerk. If the sign-in cannot be closed, the app tells you your data is gone and asks you to contact us so we can finish. Emailing us works too.
What deleting does not reach:
- Backups. Our database provider keeps point-in-time backups for 10 days. Your deleted data can sit in those until they expire. We keep them only so we can recover from a mistake.
- Reports and counts. Usage counts and error reports in PostHog are not tied to your account, so they are not deleted with it.
- Alerts already sent. We cannot pull back a phone alert that has gone out.
- Clerk’s own records. Clerk removes your login. How long it keeps anything else is covered by Clerk’s privacy policy.
Your choices
You can see and change your profile inside the app. You can delete your account there too, at the bottom of Settings. To get a copy of your data, correct something you cannot change yourself, or delete your account by email instead, email us at hello@marejada.app from the address on your account. We will reply and act on it.
Our terms
Our Terms of Use sit alongside this policy. We wrote both ourselves, in plain language, for a free beta. A lawyer has not reviewed either one. They may change when one does, and if they change in a way that matters, we will tell you as described below.
Changes
If this policy changes in a way that matters, we will update the date at the top and tell people with accounts by email.
Contact
Questions about any of this: hello@marejada.app.