California — Notice at Collection (CCPA/CPRA)
Provided to California residents at or before the point of collection, as required by Cal. Civ. Code §§ 1798.100(a) and 1798.130(a)(5)(A). Read the full Seaworthy Privacy Policy in the app. Website: https://digitalfreedom.co.za.
Categories collected in the past 12 months:
| Category (CCPA § 1798.140(v)) | Examples we collect | Purpose | Disclosed for business purpose? | Sold or shared? |
|---|---|---|---|---|
| A. Identifiers | Email address and name if you contact us; IP address and normal request information for model downloads or support; Apple transaction identifiers | Support, security and purchases | Civo/Migadu for the services described in § 6; Apple for its platform processing | No |
| B. Customer records (Cal. Civ. Code § 1798.80(e)) | Contact details you provide to support; purchase entitlement | Support and providing purchased features | As described in § 6 | No |
| C. Characteristics of protected classifications | None requested | — | — | No |
| D. Commercial information | Seaworthy Pro purchase and entitlement information | Purchase administration and feature access | Apple processes purchases; no separate entitlement service | No |
| E. Biometric information | None | — | — | No |
| F. Internet / electronic network activity | Model-download and support-portal requests; no in-app usage analytics | Delivering downloads and support; security | Civo for hosting | No |
| G. Geolocation | No device-location permission; a home marina or other location you type is private logbook content; IP addresses occur in the network requests above | Logbook and network delivery | Apple only for optional private iCloud; request data as in category A | No |
| H. Sensory information | Photos you select or capture and store in the logbook; attachments only if you send them to support | Local recognition and logbook; optional support | No inference upload; Apple for optional private iCloud; Civo/Migadu only for material you submit to support | No |
| I. Professional / employment information | None requested | — | — | No |
| J. Education information | None requested | — | — | No |
| K. Inferences from the above | Local equipment classifications and maintenance suggestions; no behavioural profile | Logbook assistance | No inference processor; saved results may sync to private iCloud | No |
| L. Sensitive personal information (CCPA § 1798.140(ae)) | No account credentials, precise-location or health data requested; user-selected files or support messages may contain information the user chooses to include | The requested local feature or support request | Only the storage and support routes in § 6, where you enable or use them | No |
We have not sold or shared personal information of California residents in the past 12 months and do not intend to. The opt-out of sale or sharing therefore has no operative effect — but is available on request.
Retention per category: local logbook content and saved inferences (H, K and any voluntarily included content) — until you delete them; private iCloud copies and backups are subject to your Apple storage controls. Support records and submitted attachments (A, B, H and any voluntarily supplied L) — 3 years from closure; operational logs (A, F) — 30 days hot and 90 days cold; applicable billing records (D) — 7 years under the Controller’s applicable retention duties. Uncollected categories have no retention period. Apple sets retention for its platform records. See Privacy Policy § 8 for deletion and legally required extensions.
Sensitive personal information — limit of use (§ 1798.121). We use sensitive personal information only for the purposes permitted under CPRA Regs § 7027(m) — performing the services, security, fraud prevention, service quality. Not for inferring characteristics, not for targeted advertising. The opt-out therefore has no operative effect — but is available on request.
Your CCPA/CPRA rights:
| Right | How to exercise |
|---|---|
| Know | Email mailto:data-protection@digitalfreedom.co.za, subject “CCPA Right to Know” |
| Delete | Same address, or the in-app deletion route |
| Correct | Edit in-app or email the same address |
| Opt out of sale/sharing | Not applicable (we do neither) — confirmation on request |
| Limit sensitive-PI use | Not applicable (use is already limited) — confirmation on request |
| Non-discrimination | We do not discriminate for exercising rights |
| Portability | Included in the Right-to-Know response, machine-readable |
| Authorized agent | Accepted with proof of authorisation and your written permission |
We verify requests proportionate to sensitivity and risk (CCPA Regs §§ 7060–7063) and respond within 45 days, extendable once by 45 with notice.
Shine the Light (§ 1798.83): we disclose no personal information to third parties for their direct-marketing purposes; the annual response is “none disclosed”.
Global Privacy Control: Seaworthy does not sell or share personal information or perform cross-context behavioural advertising, regardless of browser signals. The native app has no browser-signal detection control; you can also send any privacy preference to the contact above.
Complaints: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834 — https://cppa.ca.gov/webapplications/complaint — or the California Attorney General.