Privacy Policy

All Goodah! Mobile Application

All Goodah! (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our maritime safety reporting mobile application.

Information We Collect

Personal Information

• Safety Reports: Observations, causes, actions taken, position, location, ship information
• Device Information: Push notification tokens, device type, operating system version, and the time zone set on the device
• Usage Data: App interaction patterns, feature usage, error logs

Automatically Collected Information

• Device Data: Device model, operating system, unique device identifiers
• Usage Analytics: App performance, crash reports, feature usage statistics
• Location Data: Only when you submit safety reports (with your permission)

How We Use Your Information

We use the collected information to:

• Provide Services: Process and store maritime safety reports
• Improve App: Analyze usage patterns to enhance functionality
• Send Notifications: Deliver safety reminders and important updates. If you confirm your ship in the app, your device's notification token is linked to that ship so the ship's shore team can send it reminders; they only see how many devices are linked, never who they belong to. Logging out of the ship in the app removes the link. The time zone your device sends with its notification token is used only to work out the ship's local time (for example, to send reminders at a sensible hour); it is kept with the token, never with a report, and the shore team sees one time zone per ship, not per device.
• Compliance: Meet maritime safety reporting requirements
• Support: Provide technical assistance and respond to inquiries

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information only in these circumstances:

Legal Requirements

• Maritime Authorities: When required by maritime safety regulations
• Legal Compliance: When required by law or legal process
• Safety Emergencies: To protect safety and prevent harm

Service Providers (Sub-processors)

We use the following providers to run MarinerMind. Each receives only the data listed. The same list, with certifications and transfer basis, is published on our Security page.

• Clerk (authentication): name, email address and role of shore-side accounts only; crew members never have accounts
• Render (database and backend hosting, Frankfurt, EU): all application data, including reports
• Vercel (website and dashboard hosting): request logs and IP addresses
• Expo (push notifications): device push tokens, never linked to a report
• Google Cloud Translation: report text (observations, cause, action taken) when submitted in a language other than English, so it can be read on the shore-side dashboard; no identity is sent
• Resend (email): email address and invitation or notification content
• Sentry (error monitoring): technical error data, which may include an IP address or a shore-side user id
• Upstash (rate limiting): a request identifier (IP address or user id), kept for minutes to prevent abuse

Data Security

We implement appropriate security measures to protect your information:

• Encryption: Data encrypted in transit and at rest
• Access Controls: Limited access to authorized personnel only
• Regular Audits: Security assessments and updates
• Secure Infrastructure: Industry-standard security practices

Data Retention

Safety Reports

• Active Reports: Retained while part of your organisation's active safety management review
• Closed Reports: Retained for up to 7 years to support ISM Code compliance and safety audits, unless your organisation's Data Processing Agreement specifies a different period

User Data

• Device Data: Push notification tokens are removed when the app is uninstalled or the token is no longer valid

We do not currently run automatic redaction or anonymisation of report content on a fixed schedule; this is on our roadmap (see the Security page). Deletion ahead of the periods above is available on request - see Data Control below.

Your Rights and Choices

Notification Preferences

• Push Notifications: Enable/disable safety reminders and updates
• Daily Reminders: Customize timing and frequency

Data Control

• Access: Request information about your data
• Correction: Update or correct your information
• Deletion: Request deletion of your data (subject to legal requirements)

International Data Transfers

Our primary database is hosted in Frankfurt, Germany (EU). Some of the providers listed under Service Providers are US companies; transfers to them rely on the EU Standard Contractual Clauses and the safeguards described on our Security page. No data is transferred to any other third country.

Children's Privacy

All Goodah! is designed for professional maritime use and is not intended for children under 13. We do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through:

• App Updates: Notification within the app
• Website: Updated policy posted on our website
• Email: Direct notification for significant changes

Contact Information

For questions about this Privacy Policy or our data practices:

Data Protection Officer

For EU users with privacy concerns, you may contact our Data Protection Officer at: team@marinermind.com

Cookie Policy

MarinerMind Tech uses cookies to enhance your browsing experience and provide essential functionality.

Essential Cookies

These cookies are necessary for the website to function properly. They enable basic functions like page navigation, access to secure areas, and user authentication (set by Clerk, our authentication provider). The website cannot function properly without these cookies, so they are not subject to the consent choice below.

Analytics Cookies

With your consent, we use Vercel Analytics to understand how visitors interact with our website, so we can improve the service. These cookies only load after you accept them in the cookie banner, collect information anonymously, and are never set if you decline. You can accept, decline, or change your choice at any time via "Cookie Settings" in the footer.

Web Platform Data Collection

We collect information that you provide directly to us, such as when you create an account, submit reports, or contact us for support.

Information We Collect

• Account information (name, email, role)
• Maritime reports and safety data
• Fleet and vessel information
• Communication records
• Usage analytics and performance data

How We Use Your Data

We use the information we collect to provide, maintain, and improve our services, communicate with you, and ensure the security of our platform.

Primary Uses

• Providing maritime reporting and safety management services
• Managing user accounts and access permissions
• Analyzing usage patterns to improve our platform
• Responding to support requests and inquiries
• Ensuring platform security and preventing fraud

Web Platform Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Security Measures

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure hosting infrastructure
• Regular backups and disaster recovery procedures

Your Rights

You have the right to access, correct, or delete your personal information. You can also withdraw your consent for certain data processing activities.

How to Exercise Your Rights

• Contact us at team@marinermind.com
• Use the account settings in your dashboard
• Submit a formal data request through our support system

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: