Riptyde Privacy Policy

Last updated: August 29, 2026

Riptyde is a surf-forecasting app for iOS. This policy explains what information the app collects, how it is used, who it is shared with, and the choices you have. We collect only what is needed to run the app's features, and we do not sell your data or use it for advertising or cross-app tracking.

Information we collect

You can browse forecasts without an account. If you create an account, we collect and store:

• Account & profile: your email address, display name, and optional profile details (skill level, home region) and profile photo.
• Your surf activity: favorite spots, logged surf sessions (including any notes you add), and forecast-accuracy feedback you submit.
• Secret spots: the map coordinates and names of any custom "secret spot" pins you create.
• Crew (social) data: friend connections you make, spot check-ins you post, and sessions or spots you choose to share with specific friends.

AI summaries & your AI API key (bring-your-own-key)

AI surf summaries are optional and run only on an API key you choose to link from your own OpenAI or Anthropic account. Your key is stored only in your device's secure Keychain — it is never stored on our servers. Before your first AI request, the app shows an in-app disclosure and asks for your permission; nothing is sent to an AI provider until you allow it and tap generate. Each AI summary request contains exactly:

• The name and region of the spot you are viewing — including the name and region you gave any custom "secret spot" you created, and that spot's internal identifier.
• The selected day's forecast and ocean conditions: wave height, ranked swells (height, period, direction), wind, tide, and water/air temperatures.
• The same readings hour by hour for that day.
• The spot's surf characteristics (break type, ideal swell window, period and size bands, tide preference, wind sensitivity) and the app's computed best surf window.
• Your API key, used only to run the request on your own provider account.

The request travels over an encrypted connection to Riptyde's backend proxy (hosted on Cloudflare) and then to the AI provider your key belongs to (OpenAI or Anthropic) to produce the summary. Those providers process the request under their own privacy policies (OpenAI, Anthropic). No email address, account identity, or device location is included in the AI request. You can unlink your key at any time in Profile → Settings → AI Access, and you can re-read the in-app disclosure from the "What's shared" link beside any AI feature.

How we use your information

• To provide and personalize the app's features (your home break, favorites, sessions, crew, and secret spots).
• To generate AI surf summaries when you request them, using your linked key.
• To improve forecast quality using the accuracy feedback you choose to submit.

We do not use your information for advertising, and we do not track you across other apps or websites.

Service providers

• Supabase — hosts our database, authentication, and private storage for the data above. Access is restricted per-user by row-level security.
• Cloudflare — hosts the backend proxy that forwards AI summary requests.
• OpenAI / Anthropic — receive AI summary requests only if you link your own key and grant the in-app permission, and only the data listed in the AI summaries section above: the spot's name and region (including any custom secret-spot name you created), the selected day's forecast and hourly conditions, the spot's surf characteristics and computed best window, and your API key.
• Forecast sources (Open-Meteo, NOAA, NWS) — provide marine, buoy, tide, and weather data. We send only spot coordinates to retrieve forecasts; no personal data is sent.

Data sharing

Your profile, settings, favorites, sessions, and secret spots are private to you by default. Crew features share data only with the specific friends you choose — for example, a spot check-in or a session you explicitly share. We do not sell or rent your personal information.

Data retention & deletion

We keep your data while your account is active. You can delete your account at any time from Profile → Settings → Delete Account. Deleting your account permanently removes your profile, settings, favorites, surf sessions, secret spots, accuracy feedback, crew data, and profile photo from our systems, and clears your linked AI key from your device.

Security

Data is transmitted over encrypted (HTTPS) connections. Account data is protected by per-user row-level security, and your AI key is held only in the iOS Keychain on your device.

Children's privacy

Riptyde is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy or your data? Email michaelzick@gmail.com.