Privacy Policy

Last updated: 8 June 2026

Who we are

GNRLY is operated from the UK. We are the data controller of any personal data you give us. Contact: hello@gnrly.surf.

What we collect

• Account info: email address and (if you use email/password) a hashed password.
• Profile: surfing ability, home base, focus areas, saved spots, and quiver.
• Usage: which spots and chats you interact with, anonymised analytics.
• Billing (Premium only): name, billing address and partial card info via our payment provider. We do not see or store your full card number.

How we use it

• To run the app and personalise your forecasts and chat advice.
• To send you transactional emails (welcome, onboarding tips, trial reminders, re-engagement nudges, billing receipts).
• To improve the product.

Processors

We use these third parties to run the service: Supabase (database and auth), Cloudflare (hosting), Stripe (payments), Anthropic (Bodhi's responses, no personally-identifying data sent), Stormglass and Open-Meteo (forecast data), and an email service provider for transactional email.

Cookies

We use cookies and local storage to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

Retention

We keep your data for as long as your account is active. Delete your account by emailing us, and we'll remove personal data within 30 days.

Your rights

You have the right to access, correct, export and delete your data, and to object to certain processing. Email us to exercise any of these rights.

Changes

We'll update this policy as the app evolves. Material changes will be flagged in-app.