Who we are
The Buoy is a mobile app for checking marine buoy data, wave observations, and forecasts useful to surfers and other ocean users.
The data controller is Thomas Cailhol, based in France.
What we process and why
- Location while the app is in use: if you allow it, the app uses your position to find nearby buoys. Coordinates may be sent to our API to return relevant data. We do not store them long term or tie them to your identity.
- Random on-device identifier: the app may create a random UUID to operate the API, limit abuse, and recognize supporters. This identifier does not contain your name, email address, advertising ID, or contact details. It may reset if app data is cleared.
- Purchases and subscriptions: Apple App Store or Google Play handle payment. We receive only the transaction identifiers needed to verify and manage the subscription. We never receive your card details.
- Optional supporter name and Instagram handle: we process these only if you choose to appear on the thank-you wall. You can request removal at any time.
- Photos: the app only saves images that you export yourself. We do not read your photo library and we do not upload it to our servers.
What we do not do
The mobile app does not show ads, include third-party analytics or advertising tracking SDKs, sell data, require an account, or perform cross-app tracking.
Processors and third parties
- Apple App Store and Google Play: process purchases, subscriptions, refunds, and receipts under their own terms.
- Our backend and hosting providers: help us operate the API, serve buoy data, and secure the service.
- Expo: may be used to deliver app updates.
- Buoy data sources: are public feeds we read from. They are not recipients of user data.
Retention and GDPR rights
We keep data only for as long as needed for the purposes described above. Location is not stored long term. Transaction identifiers are kept as needed to manage subscriptions, support, and legal obligations. Optional thank-you wall information is kept until removal, your deletion request, or the end of that feature.
If the GDPR applies to you, you can request access to your data, correction, deletion, restriction, objection, portability where applicable, and withdrawal of consent for optional processing.
To exercise your rights, email thomas@labouee.app with enough information to identify the relevant request. You may also lodge a complaint with the CNIL if you believe your rights are not respected.
Children
The app is not directed at children. If you believe a child sent us optional information, contact us so we can delete it.