## Who we are

ShadowFleet is provided by Raween. This publisher is the controller responsible for personal data processed through ShadowFleet. For questions or privacy requests, use the contact button on top.

ShadowFleet lets a mothership and support boats share live speed and position within a private fleet.

## Data we process

- **Technical user identity:** an automatically created user ID and information needed to remember your access. The app does not require a name, email address or password. This identity is pseudonymous: it can be associated with your location, vessel names and purchases.
- **Fleet information:** vessel names and colours, fleet name, owner, members, vessel assignments, invitations and session start and end times. Names you enter may contain personal information.
- **Location while sharing:** GPS coordinates, speed, course, accuracy, measurement time and technical sequence information, associated with your selected vessel and session.
- **Device and use:** a random installation ID, operating system family such as iOS or Android, native app or browser use, first and last registration times and trial time used.
- **Subscription:** product, store, validity, renewal status and purchase verification. RevenueCat also processes purchase receipts or purchase tokens and technical device information for its service. Apple or Google handles payment; ShadowFleet does not receive full payment card details. See [RevenueCat's privacy policy](https://www.revenuecat.com/privacy-policy).
- **Connection information:** our hosting and map services receive your IP address and technical request information when you connect. The map service receives the requested map tiles, which can reveal the area being viewed.
- **Contact:** if you email us, we process your email address and the information you send to respond to you.

The camera is used only if you choose to scan an invitation code. ShadowFleet does not upload or retain camera images for this purpose. The current app contains no advertising SDK and does not use your GPS data for advertising.

## Why we use data

We use your location to share speed and position with your fleet. Our legal basis is your consent, given after you select a vessel and press **Agree & share my location**. Your device's location permission is also required. You can stop through **Pause my location sharing** or by revoking permission in your device settings. Withdrawal does not affect the lawfulness of earlier processing. Without location permission, you cannot share your own position.

During an active sharing session, location processing may continue when you open another app or lock the screen, as allowed by your device and permissions. Android uses a visible service notification; iOS uses a background location indicator. Pausing stops the collection of new GPS positions.

We use your technical identity, fleet information and necessary subscription information to provide the app service you request and verify Pro access. Our legal basis is performance of the agreement for your use of ShadowFleet.

We also use installation registration, limited usage information and technical security information to prevent conflicting transmitters, abuse and unauthorised access. We rely on our legitimate interest in providing a reliable and secure service. Where administrative records must be retained by law, we rely on a legal obligation. We use contact information to handle your request, based on performance of the agreement or our legitimate interest in answering enquiries.

RevenueCat also provides purchase overviews and subscription analytics to help us manage the subscription service. For this administration, we rely on our legitimate interest in understanding how subscriptions function. See [RevenueCat's explanation of purchase data](https://www.revenuecat.com/docs/platform-resources/apple-platform-resources/apple-app-privacy).

## Who receives data

**Members of your fleet** can view shared speed, position and vessel information. The owner can also view your user ID, role, vessel assignment, operating system and Pro status. Share invitation codes only with people you want to give access. Recipients can copy, export or capture information themselves.

**Supabase** provides authentication, storage and live messaging. The app database is configured in Ireland. Authorised administrators may access data when necessary for administration, support or security.

**RevenueCat and Apple or Google** process purchases and subscription verification. ShadowFleet sends its technical user ID to RevenueCat for this purpose; the app does not send GPS positions to RevenueCat.

**OpenStreetMap Foundation** supplies map images in the current configuration. The map service receives your IP address, technical request information and requested map tiles. See the [OpenStreetMap Foundation privacy policy](https://osmfoundation.org/wiki/Privacy_Policy). We will update this policy if we change the map service.

Data may also be disclosed when required by law. We do not sell your personal data.

## Processing outside the European Economic Area

A database in Ireland does not mean all processing takes place within the EEA. Service providers and their subcontractors may process data outside it.

## How long data remains
The app stores the latest position for each vessel and session, replacing the previous position. Positions not updated for 24 hours are deleted at the next cleanup run. This means a saved position may remain for up to 25 hours after the last server update.

For live sharing, the app also uses technical messages sent through Supabase database broadcasts. These messages include position data and are retained for three days by default. This is separate from the latest position in the app database. See the [Supabase documentation](https://supabase.com/docs/guides/realtime/broadcast).

An invitation to join a fleet expires after one hour. The next cleanup run removes expired invitations. Records of the latest join attempt, used to limit abuse, are removed at the next cleanup run after 24 hours.

Fleet information, vessels, members and session information remain until the owner deletes the fleet or data is removed following a valid erasure request. There is currently no automatic deletion of inactive fleets.

ShadowFleet does not offer a route archive or route playback. The temporary storage of live messages described above still applies.

On your device, we store access information, the installation ID, preferences and, when needed, the latest position awaiting transmission. The app does not reuse an outdated position. Normal transmission or pausing clears the buffer; after an unexpected shutdown, a local copy may remain until the app clears it or you clear app data. Restarting the app does not automatically resume location sharing.
## Your controls and rights

Press and hold the live screen to open session controls. You can pause sharing, use **Erase my saved positions** to remove saved positions associated with your vessel assignments in the selected fleet, and use **Export fleet data** to export available fleet information. The owner can use **Delete fleet**. Pausing does not automatically delete previous server records. These controls also do not automatically delete live messages, backups or copies made by other participants.

The current version has no button that deletes your entire technical account and all associated data. Request this through the contact button on top. Uninstalling the app or clearing local app data does not delete server data and may cause you to lose access to your existing identity.

Under the GDPR, where applicable, you may request access, correction, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests and withdraw consent. We may verify that a request comes from the correct person and will normally respond within one month. The limited fleet export does not replace these rights. See the Dutch data protection authority's information on [using your privacy rights](https://autoriteitpersoonsgegevens.nl/nl/onderwerpen/algemene-informatie-avg/rechten-van-betrokkenen).

You may complain to the [Dutch data protection authority](https://www.autoriteitpersoonsgegevens.nl/) or the competent supervisory authority where you live or work.

## Security and changes

We use encrypted connections and access controls based on fleet membership. Administrative permissions are restricted to authorised systems and administrators. The current app does not use personal data for automated decisions with legal or similarly significant effects; technical checks do determine whether trial or Pro access is active.

We will update this policy when the app or its data processing changes. The date above identifies the latest version. If a change requires new consent, we will request it before beginning that processing.