Version 1.6 · 7 October 2026 · v1.6 removes Google Drive from the list below: the app never sends your data to it.
DSM Mallorca SL, trading as OceanLog, is the data controller for the personal data described here. Registered office: Pons i Gallarza 3A, 7B, 07004 Palma de Mallorca, Spain.
Contact for anything in this policy, including privacy requests: privacy@oceanlogapp.com. Security disclosures: security@oceanlogapp.com (see security.txt).
We have not appointed a Data Protection Officer; we are not required to.
| Data | Why | Legal basis |
|---|---|---|
| Account — email, and anything you choose to add: name, preferred name, pronouns, sports, home base, language, units. | To create your account, sign you in and run the service. | Performance of a contract (Art. 6(1)(b)). |
| Sessions you log — date, duration, spot, conditions, gear, wave counts, your written notes and reflections. | This is the logbook. It is the service. | Performance of a contract (Art. 6(1)(b)). |
| Health data — heart rate, heart-rate variability, effort, calories,
and any body or wellbeing figures you enter or import from a watch. Precise location — spot coordinates and GPS tracks. |
To show your session on a map, to compute distance, speed and effort, and to write your reports. These are special-category data (Art. 9). | Your explicit consent (Art. 9(2)(a)), given through separate switches in the app — for example, whether heart data is used in your AI reports (off by default). You can change or withdraw each one at any time — see Your rights. |
| Photos you attach to a session or a board. | To show them back to you. We strip EXIF/GPS metadata on upload, so a photo cannot leak where you surf. | Performance of a contract (Art. 6(1)(b)). |
| Accessibility and adaptive-sport information, if you choose to provide it. | To adapt the app and the coaching voice to you. | Your explicit consent (Art. 9(2)(a)). |
| Technical — sign-in tokens, device/browser basics, error reports. | To keep the service working and secure. | Legitimate interests (Art. 6(1)(f)): running a service that functions. |
Providing account data is necessary to have an account. Everything else is optional — the app works without health data, without location and without photos, and says so where it asks.
OceanLog uses AI, and we tell you where. Your session reports and the in-app assistant (I.A.N.) are generated by an AI system. Every generated report carries a notice saying it was written by AI. The assistant identifies itself as artificial.
| Processor | What for | Where |
|---|---|---|
| Supabase | Database, authentication, file storage | EU |
| Vercel | Hosting and delivery of the app | EU/US |
| Anthropic | Generating your AI reports and assistant replies | US |
| Resend | Transactional email (sign-in, reminders, invites) | EU/US |
| Open-Meteo | Weather, marine and tide data for a spot | EU |
| Google Workspace (Gmail) | Our email: anything you write to us, and our replies | EU/US |
| Esri | Satellite map tiles on session maps — contacted by your browser | US |
| Instituto Geográfico Nacional (IGN, Spain) | Aerial photos on maps of Spanish spots, and on the session card — contacted by your browser | ES |
| OpenStreetMap Foundation (Nominatim) | Turning a place you type into coordinates, and back again — contacted by your browser | UK |
| Lemon Squeezy | Taking payment, only when you subscribe | US |
Some of these are contacted by your device, not by our servers, and the difference matters to you. When a map tile or a place lookup is fetched by your browser, that company receives your IP address and — from what you asked for — roughly where you are looking, which in this app is usually where you surfed. The rows above say which ones those are. Where we fetch something for you from our own servers, such as sea-floor depth or terrain, your IP address never reaches the provider at all.
Where a processor is outside the EEA, transfers rely on the European Commission's Standard Contractual Clauses together with the safeguards in that provider's own data-processing terms.
We do not sell your data, and we do not use it for advertising. There is no advertising in OceanLog.
Nothing is shared unless you share it. If you link a coach, they see the sessions and reports you have shared with them — including special-category data where you have specifically allowed that. Each sharing switch is separate, you control it, and you can stop it at any time. Health, body and mobility data stay yours alone unless you explicitly approve sharing.
Any session or spot you mark secret is location-hidden: never shown to a coach or a friend, never surfaced by the AI, never named in any public total, and its photos never carry the location.
During the beta, the operator may review logged sessions and generated reports in order to test and improve the service. You consent to this at sign-up, it is limited to improving OceanLog, and it will end when the beta does. It has never included, and will never include, selling or advertising.
You can access, correct, export, delete or restrict your data, object to processing, and withdraw consent at any time — in the app, or by emailing us. Withdrawing consent does not affect processing that already happened. Export is built in: your sessions and photos are yours and you can take them with you. Your AI reports stay readable inside the app.
If you think we have got this wrong, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos — aepd.es — or to the authority where you live.
Your logbook database is stored in the EU with per-user row-level security, so one rider's data is not reachable by another. AI reports are generated by Anthropic in the US, under the Standard Contractual Clauses described above. Sign-in supports two-factor authentication. We publish a security contact and respond to disclosures.
OceanLog is for adults (18 and over) for now. Accounts for younger riders will only open once a parent or guardian consent process is in place, and this policy will be updated before that happens.
If we change this policy we will update the version and date above, and tell you in the app when the change is material.
What changed in v1.5 (28 September 2026): the Security section now says that it is your logbook database that is stored in the EU, and repeats that AI reports are generated by Anthropic in the US under Standard Contractual Clauses, as the processor table above already stated.
What changed in v1.4 (28 September 2026): we made clear that OceanLog is for adults for now, that heart data only reaches the AI if you switch it on, how to switch AI off, and that AI reports stay inside the app.
What changed in v1.3 (26 September 2026): we added the Instituto Geográfico Nacional (IGN), Spain's national mapping agency, to the list above. Maps of spots in Spain now show its aerial photos when you zoom in to the coast, so your browser contacts IGN's servers, as it already does Esri's. IGN receives your IP address and the map area you are looking at, nothing else.
What changed in v1.2 (15 September 2026): we removed Stadia Maps from the list above. We had listed them because we were trying them out as a second satellite map provider; we decided not to use them, so your browser never contacts them and there is no reason for them to be named here. Nothing else changed, and the list of people who receive your data is now shorter rather than longer.
v1.6 · 7 Oct 2026 · © 2026 DSM Mallorca SL, trading as OceanLog