1) Who processes your data

The data controller is [pendiente de publicar], tax ID [pendiente de publicar], with address at [pendiente de publicar]. For any question about your data, write to alpachemi@gmail.com.

There is one important exception: when a club processes its athletes' data inside SailIQ, the club is the controller and we act on its behalf. Section 7 explains this.

SailIQ processes data needed to provide navigation, sessions, events and (when applicable) live streaming. We do not sell your data.

2) Data we may collect

Account: email, display name.
Location: during a session or event (routes, metrics, tracking).
Telemetry: speed/heading (SOG/COG) and timestamps tied to the session.
Health and fitness: if you connect compatible sources or grant device permissions, we may process metrics such as heart rate and activity data related to the session.
Device: push token if you enable notifications.
Purchases and subscription: transaction identifiers and subscription status to activate your plan when you buy through Apple, Google Play or Stripe.
Support: messages you send (subject, content and useful metadata like app version).

Note: data availability depends on what you enable (for example, location/notification permissions).

3) What we use them for, and on what legal basis

Creating and maintaining your account, recording sessions and enabling participation in events: performance of the contract you accept when you register.
Location and telemetry during a session: performance of the contract, since they are the very subject of the service. You can revoke the device permission at any time, losing the corresponding function.
Health and fitness data: your explicit consent, given when you connect the source or grant the permission, and which you can withdraw.
Push notifications: your consent, which you withdraw by turning them off.
Purchases and subscriptions: performance of the contract and compliance with tax and accounting obligations.
Support, security, abuse prevention and reliability: our legitimate interest in keeping the service working and in it not being used to harm anyone.
Marketing messages, if we ever send any: only with your prior consent and with an unsubscribe link in every message.

4) How long we keep them

Account, sessions and content: for as long as the account remains active. When you delete it, they are erased or anonymised within a maximum of 30 days, except for what we must keep by law.
Billing data: for the years required by tax and commercial law.
Support messages: up to three years from the last interaction, so that an issue can be followed through.
Technical and security logs: short periods, aimed at diagnosing incidents.
Clubs that request closure: a retention period during which the closure can be undone and the data exported; after that, permanent deletion.

5) Who we share them with

We do not sell data or hand it over for advertising purposes. We work with providers that process it on our behalf and only in order to provide you with the service:

Hosting and service infrastructure.
Sending transactional email (verification, notices, invitations).
Payments and subscriptions, through Apple, Google Play and Stripe depending on the purchase channel.
Push notifications, through Apple's and Google's services.
Sign-in with Apple or Google, if you choose that route.
Error diagnosis and application stability.
Strava, only if you connect your account and only for what you authorise in that connection.

We also share what you decide to share: the club you belong to sees your activity within the club, and a live event shows your position while it is running.

6) Transfers outside the European Economic Area

Some of those providers are established outside the EEA or process data from there. In those cases the transfer relies on an adequacy decision of the European Commission or on standard contractual clauses, with any additional measures required. If you want the detail for a specific provider, ask us and we will give it to you.

7) Club accounts

A club account belongs to the organisation, not to the person who manages it. When a club registers you, invites you to an activity or looks at your sessions, it is the club that decides what those data are used for: the club is the data controller and SailIQ processes the data on its behalf, following its instructions and this policy.

What a club sees about you: the data that follow from your relationship with it, that is, your basic profile and the activity you carry out within the club — training, entries and results of its events. It does not see your private sessions outside the club, nor the activity you do with another club.

Your personal account stays yours: belonging to a club does not transfer it, and if you stop belonging you keep your data and your sessions. Removing someone from a club takes away their access to the club; it does not delete their personal data.

If the club closes its account, it stops being public and stops taking entries. We keep its data for a retention period so that it can export them or undo the closure; after that period, SailIQ carries out the final deletion. Your personal account is not closed with it.

If you want to exercise your rights over the data a particular club processes, you can approach that club; you can also write to us and we will tell you who should handle your request.

8) Minors

To open an account by yourself you must be at least 14 years old. Below that age, an athlete may only appear on SailIQ if their club registers them as part of the club's activity, and it is the club that must hold the consent of whoever exercises parental responsibility or guardianship.

If we become aware of an account opened by a minor without that cover, we suspend it and delete their data. If you think this affects a minor in your care, write to us and we will sort it out.

9) Events and streaming

If you participate in an event with streaming enabled, your position may be visible to organizers and/or spectators while the event is live, depending on organizer settings.

10) Your rights

You can ask us to access your data, rectify it, erase it, restrict or object to its processing, and receive it in a portable format. You can also withdraw at any time the consents you have given, without affecting processing carried out beforehand.

To exercise them, write to alpachemi@gmail.com from your account address or tell us how to verify you. We reply within the legal period of one month.

If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the supervisory authority in your country.

View account and data deletion

11) Automated decisions and security

We do not make automated decisions with legal effects on you, nor do we build profiles of that kind. The metrics and analysis you see are calculations on your own activity.

We apply reasonable technical and organisational measures to protect the data: encryption in transit, role-based access control and logging of sensitive operations. No system is infallible; were a breach to occur that significantly affects you, we would tell you.

12) Cookies and local storage

We use strictly necessary first-party cookies: the session cookie that keeps you signed in, the security cookie against request forgery, and the one that remembers your language. We do not use advertising or third-party cookies to follow you across other websites.

The mobile apps store technical data and a cache of your activity on the device so that they work offline; they are removed when you uninstall the app.

13) Payments and third parties

Subscription payments and renewals are processed through the Apple App Store, Google Play or Stripe, depending on the purchase channel. SailIQ does not store full card numbers in the app.

14) Changes to this policy

If we change this policy in a material way, we will tell you by email or inside the product before it takes effect. The version in force is always shown above.

15) Contact

For any questions, use the Contact page.

See the terms of use