Privacy Policy for SurfWeather

Effective date: 12 October 2026

SurfWeather provides weather, wind and wave information and lets you share surfing experiences with other users. This policy explains which personal data the app processes and the choices available to you.

1. Who is responsible?

Optoton ApS, Denmark, is the data controller for SurfWeather.
Address: Julius Posselts Vej 3A, 19.2, 9400 Noerresundby, Denmark
Contact: surfweather@holtzekjaer.com
Website: https://leasureweather.online

2. Account and surf profile

When you sign in with Apple, we receive an account identifier and the information made available during sign-in, such as your name and email address. We do not receive your Apple Account password.

We process the information you enter in your surf profile, including your name or nickname, email, country and city, date of birth and age confirmation, profile picture, weight, surfing experience, equipment, preferred spots, language and other settings. This information is used to administer your account and personalize the app’s features and recommendations.

3. Location and spot activity

With your location permission, the app uses device location for local forecasts and nearby spots. You can also select spots manually without GPS access.

Participation in spot activity is optional and requires an explicit manual check-in each time. There are no automatic check-ins. A check-in contributes for up to four hours; you can withdraw it at any time using Check Out.

The server stores only combined counts per spot and expiry interval. It stores no account IDs, device IDs or individual check-in records for this feature. Activity requests contain no account token or device GPS position. Your active contribution is kept locally in the app so that you can check out. The activity indicator is an estimate: without identifying contributors, we cannot reliably prevent the same person contributing from several devices.

Other users receive only a colour category at the spot’s fixed location: light grey for 0 active check-ins, orange for 1–5, yellow for 6–10 and green for more than 10. They do not receive individual check-in records, identities, positions or exact counts. The indicator represents participating SurfWeather users, not everyone at the beach. Small groups and changes in activity should not be regarded as a guarantee of anonymity in every situation.

Contributions expire in groups at 15-minute intervals, no later than four hours after check-in. Checking out reduces the relevant total. Expired groups are regularly deleted. No personal location history is created by this activity feature.

4. Chat, images and other content

Messages, comments, images and videos you share in the app may be shown to other users with associated information, such as your displayed name, surf spot and any location. Avoid sharing information you do not want others to see.

Content reports, blocks and relevant account information may be processed by the app’s administrators to handle abuse and support.

5. Subscriptions and payment

Subscriptions are purchased and managed through Apple. We process subscription status, product and transaction identifiers, and purchase and expiry dates to provide access to purchased features. SurfWeather does not receive your payment card information from Apple.

Deleting your SurfWeather account does not replace cancelling your subscription. Manage or cancel it in your Apple Account subscription settings.

6. Operations and service providers

We process operational, error and event information, such as sign-ins and profile changes, for operations, support and handling abuse. This information may be linked to your account. Spot activity does not create account-linked check-in or location events.

We use Apple for sign-in and purchases, and Google Firebase for services including account operations, databases and storage of user content. Weather and map services process the requests and coordinates needed to provide their features. Information you choose to share with other users is displayed as described above.

7. Legal basis for processing

Account, profile and subscription access data is processed where necessary to provide the agreed service. Necessary security, troubleshooting and prevention of abuse may be based on a documented legitimate interest.

8. Retention and deletion

Profile information is retained as part of operating your account. You can request account deletion in Surf profile under “Delete my account” or contact us. Account and content deletion is handled through the app’s backend.

Contributions expire in groups at 15-minute intervals, no later than four hours after check-in. Checking out reduces the relevant total. Expired groups are regularly deleted. No personal location history is created by this activity feature.

9. Your rights

Depending on the rules and the particular processing, you may request access, rectification, deletion, restriction and a copy of your information, and object to processing. Where processing is based on consent, you may withdraw that consent. Contact surfweather@holtzekjaer.com.

You may complain to the Danish Data Protection Agency: https://www.datatilsynet.dk. See also https://www.datatilsynet.dk/borger/hvad-er-dine-rettigheder.

10. Age and changes

SurfWeather requires users to be at least 13 years old. The app uses age confirmation during registration.

We update this policy when processing changes. The current version must be available both in the app and at https://leasureweather.online/privacy.html. Significant changes must be communicated to users appropriately.

11. Moderation and technical retention

Community posts are checked automatically using Google Cloud before publication. The text, images, video and audio necessary for moderation are processed by Google; speech may be transcribed and text translated for this purpose. Flagged content is held for manual review. Ordinary swimwear and surfing images are permitted.

Each account may start up to five video uploads per calendar day, with a maximum duration of 30 seconds each, across chat and spot posts. The day resets at midnight Europe/Copenhagen time. Started uploads count even if interrupted or rejected.

Upload reservations and daily counters are retained for up to eight days plus the periodic cleanup interval, or deleted earlier with the account. Pending submissions and temporary uploads expire after seven days and are removed by periodic cleanup. Reports of abuse expire after 90 days and are removed by periodic cleanup, or are deleted earlier with the associated account. Login diagnostics expire after 48 hours and are removed by periodic cleanup or account deletion. Cleanup intervals or failures can delay physical deletion.

Ordinary technical request logs, including IP addresses, are retained for 30 days. Required administrative and system audit logs have a separate 400-day retention period. The app requests location while in use; email in the profile is optional.