Privacy Policy

When you create an account, we collect your name and email address. These are used for login, identification within your boat partnership, and to send you important notifications about your boat.

You can upload photos and videos to your boat's shared gallery. These files are stored in our database and are visible to other partners on the same boat. You choose what to upload — we do not access your camera roll without your permission.

If you grant permission, photos may include location metadata (GPS coordinates) for tagging where they were taken. Location access is optional and can be disabled in your device settings at any time.

When you submit cruise logs or boat reports, the information you provide (dates, engine hours, notes, issues) is stored to maintain a shared record for your partnership.

If you choose to link a bank account, we collect bank account names, account types, balances, and transaction history through Plaid. We do not collect or store your bank login credentials. See Section 5 for full details.

Messages and forum posts you create through the app are stored so they can be delivered and displayed to your boat partners.

We collect basic usage analytics to understand how the app is used and to improve it. This may include screen views, feature usage, and crash reports. We may also collect data related to ad impressions if ads are displayed in the app.

We use Plaid Inc. ("Plaid") to securely connect your bank account to Boat Partner. Plaid is a financial-services company that specializes in linking bank accounts to third-party apps. When you choose to connect a bank account, Plaid (not Boat Partner) handles the login to your bank, and Plaid returns account and transaction information to us so we can display and categorize it inside Boat Partner.

Plaid is a separate company with its own privacy practices. Plaid's own privacy policy applies to your use of Plaid in addition to ours. You can read it here: https://plaid.com/legal/#end-user-privacy-policy.

We use the Plaid Transactions product. This gives us:

• The names and types of the bank accounts you connect (for example, "Bank of America Business Checking — ...4321")
• The current balance of those accounts
• The history of transactions on those accounts (date, amount, description, merchant, category)

We do not use Plaid to move money, initiate payments, verify your identity for KYC, or pull credit reports.

The purpose is internal financial management of the yacht-partnership LLCs that operate boats on Boat Partner. Importing transactions lets boat managers see income and expenses, allocate costs to partners, and produce statements without retyping data from a bank website.

1. You choose to connect a bank account in the app.
2. Plaid opens its own secure login screen. You enter your bank credentials directly into Plaid — Boat Partner never sees, stores, or has access to your bank username or password.
3. After you authorize the link, Plaid gives Boat Partner an "access token." We store this token in our database in encrypted form (AES-256-GCM).
4. Boat Partner uses the access token to ask Plaid for account information and transactions. Plaid returns the data, and we store it alongside the other records in your boat's partnership.
5. Banking data is visible only to people on that boat's partnership who have permission to see financial records (typically the boat manager and designated partners). It is never shared with other boats, sold, or used for advertising.

Financial transaction records are kept for at least seven (7) years after the transaction date. This is a US recordkeeping practice for business tax records and is longer than the retention period we apply to other personal data.

The Plaid access token itself is treated differently: it is encrypted at rest and is destroyed immediately when you disconnect a bank account inside Boat Partner, when your account is deleted, or when an LLC ends its use of Boat Partner. Once the access token is destroyed, Boat Partner can no longer reach your bank through Plaid and no further data is imported.

• Disconnect at any time. You can remove a linked bank account from inside Boat Partner. This destroys the Plaid access token and stops all future syncs. Past transactions that were already imported remain in our records for the retention period above, because they are part of the LLC's financial history.
• Delete your Boat Partner account. When you request account deletion (see Section 8, "Your Rights"), the Plaid access token associated with your account is destroyed and future syncs stop. Historical financial records belonging to a partnership LLC may be retained by that LLC for tax and recordkeeping purposes.
• Ask Plaid directly. Plaid offers its own end-user portal at https://my.plaid.com where you can see and manage every app you have connected to Plaid, including Boat Partner, and revoke access there as well.

The Plaid access token is encrypted at rest using AES-256-GCM with a key that is never stored in our codebase. The connection between Boat Partner and Plaid uses TLS. Banking data inside our database is protected by the same row-level security and authentication that protects all other partnership data.