Privacy Policy

Last updated: August 12, 2026

This policy describes what data Surfbreak collects, why, and the choices you have. The short version: your sessions are recorded and stored on your own devices, an account is optional, health data never leaves your iPhone and Apple Watch, and there is no advertising or tracking of any kind in this app.

Overview

Surfbreak does two things: it shows a surf forecast for a catalogue of spots, and it records surf sessions on your Apple Watch. Both work without an account. Every session, wave and track is written to a local database on your device first, and the app functions with the radio off. Cloud features — signing in and backing your sessions up — activate only when you choose to use them.

What we collect

Depending on how you use the app, we process the following categories of data:

• Account information. If you sign in with Apple or Google, our backend provider (Supabase) stores your email address, display name and avatar so we can identify your account across devices. Apple and Google act only as identity providers — we receive an identity token from them, never your password.
• Sessions you choose to back up. While you are signed in, your surf sessions sync to your account: the summary and per-wave figures, and a compressed copy of the session's GPS track stored in a folder that only your account can read. This is what brings your history back on a new phone.
• Profile settings. The display name and avatar shown on your profile, if you set them.

We do not run analytics, crash reporting, advertising or attribution SDKs in Surfbreak. There is no third-party tracking in the app, we do not build a profile of you, and we never sell any data to anyone.

Location

Surfbreak asks for location access for two reasons: to sort the spot catalogue by how close each break is to you, and — on the Apple Watch, during a session you started — to record the track that the wave detection is computed from. Location updates continue while a session is running with your wrist down and the screen dark; that is what makes the recording usable at all, and it stops when the session does.

Your position is used on your device. It is not sent to us in real time, and it is not shared with third parties. The track of a recorded session leaves your device only if you are signed in and it is backed up to your own account, or if you deliberately export it yourself. You can revoke location access at any time in the iOS or watchOS Settings app — the forecast half of the app keeps working.

Health data

With your explicit permission, Surfbreak reads and writes workout and heart rate data through Apple HealthKit — to record your surf sessions as workouts in the Health app and to show heart rate on a session. Health data is processed on your device only: it is never sent to our servers, never used for advertising or analytics, and never sold or shared with third parties. You can revoke HealthKit access at any time in the Settings app.

The Apple Watch also reads its motion sensors while a session is running. Those samples are stored with the session on your device and are used to improve wave detection.

Forecast data

Forecast and tide figures come from third-party marine data services (Open-Meteo and WorldTides). When you open a spot, the app requests the forecast for that spot's coordinates — the coordinates of the break, not your own position — and caches the answer on your device.

Guest mode

You can use all of Surfbreak without creating an account. As a guest, your sessions, waves, tracks and favourites stay on your device and nothing is uploaded — there is no account for them to belong to. The trade-off is that a lost or replaced phone takes the history with it.

Data deletion

You can delete your account and everything stored with it at any time in the app: open Profile → Delete account. Deletion takes effect immediately and removes your synced sessions, their tracks, your avatar and your profile from our servers. Deleting a single session in the app removes it from the cloud too. If you would rather we did it for you, email apps.gexik@gmail.com.

Third-party services

Surfbreak relies on a small set of providers, each limited to the purpose described:

• Supabase — authentication, the spot catalogue, and cloud storage for the sessions you back up.
• Apple — Sign in with Apple and HealthKit.
• Google — Sign in with Google, if you choose it.
• Open-Meteo and WorldTides — marine forecast and tide data for spot coordinates.

Each provider processes data under its own privacy policy and only receives what is necessary to provide its service.

Children

Surfbreak is not directed at children under 13, and we do not knowingly collect personal data from them.

Changes to this policy

If we make material changes to this policy, we will update this page and revise the “Last updated” date above. Continued use of the app after a change means you accept the updated policy.

Contact

Questions about privacy or your data? Email apps.gexik@gmail.com — happy to help.