Riptyde Privacy Policy

Last updated: June 23, 2026

Riptyde is a surf-forecasting app for iOS. This policy explains what information the app collects, how it is used, who it is shared with, and the choices you have. We collect only what is needed to run the app's features, and we do not sell your data or use it for advertising or cross-app tracking.

Information we collect

You can browse forecasts without an account. If you create an account, we collect and store:

• Account & profile: your email address, display name, and optional profile details (skill level, home region) and profile photo.
• Your surf activity: favorite spots, logged surf sessions (including any notes you add), and forecast-accuracy feedback you submit.
• Secret spots: the map coordinates and names of any custom "secret spot" pins you create.
• Crew (social) data: friend connections you make, spot check-ins you post, and sessions or spots you choose to share with specific friends.

Your AI API key (bring-your-own-key)

AI surf summaries are optional and run only on an API key you choose to link from your own OpenAI or Anthropic account. Your key is stored only in your device's secure Keychain — it is never stored on our servers. When you generate a summary, the forecast data and your key are sent over an encrypted connection to a backend proxy and then to the AI provider you selected (OpenAI or Anthropic) to produce the summary. Those providers process the request under their own privacy policies. You can unlink your key at any time in Profile → Settings → AI Access.

How we use your information

• To provide and personalize the app's features (your home break, favorites, sessions, crew, and secret spots).
• To generate AI surf summaries when you request them, using your linked key.
• To improve forecast quality using the accuracy feedback you choose to submit.

We do not use your information for advertising, and we do not track you across other apps or websites.

Service providers

• Supabase — hosts our database, authentication, and private storage for the data above. Access is restricted per-user by row-level security.
• Cloudflare — hosts the backend proxy that forwards AI summary requests.
• OpenAI / Anthropic — receive AI summary requests only if you link your own key, and only the forecast context for the summary you requested.
• Forecast sources (Open-Meteo, NOAA, NWS) — provide marine, buoy, tide, and weather data. We send only spot coordinates to retrieve forecasts; no personal data is sent.

Data sharing

Your profile, settings, favorites, sessions, and secret spots are private to you by default. Crew features share data only with the specific friends you choose — for example, a spot check-in or a session you explicitly share. We do not sell or rent your personal information.

Data retention & deletion

We keep your data while your account is active. You can delete your account at any time from Profile → Settings → Delete Account. Deleting your account permanently removes your profile, settings, favorites, surf sessions, secret spots, accuracy feedback, crew data, and profile photo from our systems, and clears your linked AI key from your device.

Security

Data is transmitted over encrypted (HTTPS) connections. Account data is protected by per-user row-level security, and your AI key is held only in the iOS Keychain on your device.

Children's privacy

Riptyde is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy or your data? Email michaelzick@gmail.com.