Sirena Seafarer · Effective 27 September 2026 · Replaces the version of 13 July 2026
This policy explains, in plain language and in detail, what data the Sirena Seafarer iOS app ("Sirena", "the app") and the websites sirenaclub.com and sirenaclub.io collect, why, where it is stored, for how long, and what rights you have. This is the same policy linked from the iPhone app. We built Sirena around a simple rule: your position belongs to you. Nothing about your location leaves your device unless you explicitly turn sharing on.
Sirena is operated by Anton Dimitrov, sole developer, Varna, Bulgaria. Contact for anything in this policy: [email protected].
| Data | When | Purpose · Legal basis | Retention |
|---|---|---|---|
| Email, name, boat name, home port; optional MMSI and call sign | When you create an account (email or Sign in with Apple / Google) | Provide the account, fleet identity, recovery on a new device · Contract (GDPR Art. 6(1)(b)) | Until you delete the account |
| Live position, speed (SOG), course (COG) | Only while Position sharing is set to Everyone or Fleet, and only while the app is open | Show your boat on other sailors' charts (anonymously, or with your name to your fleet) · Consent (Art. 6(1)(a)) via the in-app switch | Live entry expires automatically ~1 hour after your last update |
| Track backup (recorded points of your voyage) | Uploaded roughly hourly, only while sharing is on | Restore your track history · Consent | Auto-deleted after 30 days |
| Fleet relationships (invites, member lists) | When you send or accept a fleet invite | Mutual position sharing with people you chose · Contract | Until either side removes the connection or deletes the account |
| Sharing preference (Everyone / Fleet / Off) | When you change the switch | Enforce your choice server-side, including "sees nothing while sharing nothing" · Contract | Until account deletion |
| Purchase entitlement (subscription active: yes/no) | If you buy Sirena Premium | Unlock paid features · Contract | Life of the subscription. Payment itself is processed by Apple; we never see your card. |
| Waitlist / founding-list email | If you join the list on sirenaclub.com, sirenaclub.io, or in the app | One email when the app launches · Consent. News and offers only with the separate marketing box (section 4b) | Until you unsubscribe |
| Diagnostics (crash, freeze, battery and performance reports) | Only if you turn on Diagnostics | Fix crashes and battery drain · Consent (Art. 6(1)(a)). See section 4a. | 90 days |
| Product analytics (anonymous feature-usage events with a random ID) | Only if you turn on Product analytics | Improve the features sailors use · Consent (Art. 6(1)(a)). See section 4a. | 3 months per event; totals without the ID up to 14 months |
| Marketing email choice (yes/no, when, where, wording shown) | Only if you tick "Email me news, new charts and offers" | Send the news and offers you asked for · Consent. See section 4b. | While consent stands; proof of an unsubscribe kept without the address |
| Technical logs (IP address, request metadata, rate-limit counters) | Automatically on any request to our servers | Security, abuse and fraud prevention, keeping the service up · Legitimate interest (Art. 6(1)(f)) | Short-lived (rate-limit counters expire within minutes; infrastructure logs per Cloudflare's standard rotation) |
Sirena works fully without either of these. On first launch the app asks you, with Accept all and Reject all buttons of equal size and a Choose option for each one separately. Both are off until you turn them on, and you can change your mind at any time in the app under Profile, Privacy choices. Nothing optional is collected before you answer.
| Diagnostics | Product analytics | |
|---|---|---|
| What | Apple MetricKit reports that iOS prepares about Sirena at most once a day: crashes and their technical call stacks, freezes, battery and CPU use, launch time, memory, disk writes. Each report also carries the app version, iOS version, device class and the region format. | Counts of which features are used, for example opening the weather, choosing a chart layer, arming the anchor watch, starting a track, opening the paywall or a purchase succeeding or failing. Each event carries the app version and build, iOS version, "iPhone" or "iPad", the region setting of your phone (for example US), your plan (free, trial or Premium), a random ID created only for this purpose and the country that our hosting provider derives from the connection. |
| Never included | Your position or any coordinates, your account, email, name, boat name, MMSI, phone number, IP address, advertising ID (IDFA) or vendor ID (IDFV). Your IP address is not stored with either; free-text fields in crash reports are removed before they are sent. | |
| Why | To find and fix crashes and battery drain, which matter more at sea than anywhere. | To learn which features help sailors and which need work, so we improve the right things. |
| Legal basis | Your consent (GDPR and UK GDPR Art. 6(1)(a); ePrivacy Art. 5(3)). You can withdraw it at any time; withdrawal does not affect what was lawful before it. | |
| Where | Our own storage on Cloudflare R2. | Our own Cloudflare Workers Analytics Engine. |
| Kept for | 90 days, then deleted automatically. | Individual events: deleted automatically after 3 months. We may keep totals that cannot be linked to any installation (for example "weather opened 1,200 times in May") for up to 14 months. |
| Withdraw | Turn the switch off in Profile, Privacy choices. Collection stops at once, and the events still waiting on your phone and the random ID are deleted immediately. Data already sent cannot be linked back to you afterwards and expires on the schedule above. | |
No sale, no sharing, no tracking. This data is not sold, not shared with anyone, not used for advertising, and not combined with data from other companies. We do not track you across other companies' apps or websites, which is why Sirena never shows Apple's "Allow tracking" prompt and never reads the advertising identifier.
We send news, new-chart announcements and offers only if you ask for them, with a separate switch that is always off to begin with: "Email me news, new charts and offers from Sirena Seafarer". It appears where you enter an email address (sign-in and the waiting list) and in Profile, Privacy choices. Signing in, creating an account or joining the waiting list never switches it on, and none of them needs it.
Our servers run on Cloudflare (Workers, KV, R2; EU/US network) under Cloudflare's data processing terms, which include the EU Standard Contractual Clauses for transfers outside the EEA. Charts are served from our own Cloudflare storage. Additional processors, engaged only for their stated function:
This section applies to residents of California (CCPA as amended by the CPRA) and of the other US states with comparable laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Florida, where applicable).
All traffic is encrypted in transit (HTTPS). Credentials live in the iOS Keychain, not in app preferences. Presence storage uses one-way hashed identifiers. Access to production systems is limited to the operator. No system is perfectly secure; if we learn of a breach affecting your personal data we will notify you and the supervisory authority as required by law.
Sirena is not directed at children. Do not create an account if you are under 16; where local law sets a lower digital-consent age, that age applies. We do not knowingly collect children's data and will delete it on notice.
We may update this policy as the app evolves. Material changes appear on this page with a new effective date; the app links here permanently. Previous versions are available on request.