Privacy Policy

1. Information we collect

Information you provide directly:

• Account information. When you sign up, we collect your email address. You also create a username, display name, and optional profile details (bio, date of birth, home port, avatar photo).
• Content you create. Photos, videos, captions, comments, and messages you post or send through the App. This includes posts to the public feed, comments on posts, messages in sailing group chats, direct messages, and discussion threads in community hubs.
• Cruise history. Cruise lines you’ve sailed, ships you’ve been on, and loyalty program tiers you choose to share — all voluntarily entered by you.
• Reports and feedback. If you report content or another user, we collect the category you select and any notes you include.

Information collected automatically:

• Device and usage data. We collect crash reports and basic diagnostic data through Sentry, our error-monitoring service, to identify and fix bugs. This may include your device type, operating system version, and the circumstances of an app crash or error.
• Location (only when you grant permission). If you allow location access, the App uses your approximate position to center the live ship map near you and to suggest which port you may be posting from. We use location only while the App is in the foreground — nothing runs in the background. You can deny or revoke location permission at any time in your device settings, and the App continues to work without it.
• AIS ship position data. The live map displays real-time positions of cruise ships using publicly broadcast Automatic Identification System (AIS) data. This is public maritime data about ships — not about you or your device.

Information we do NOT collect:

• We do not collect precise GPS tracking of your movements.
• We do not run any location services in the background.
• We do not use advertising trackers or sell your data to advertisers.
• We do not use your data to build advertising profiles.

2. How we use your information

We use your information to:

• Operate the App and its features — your feed, profile, messaging, sailing groups, community hubs, the live ship map, and ship/port guides.
• Deliver one-time sign-in codes to your email address (we use email-based authentication, not passwords).
• Display your profile, posts, and cruise history to other users as part of the social community (visibility of your cruise activity is a core part of how Wyke works).
• Moderate content and enforce our community standards, including reviewing reports, filtering prohibited language, and scanning uploaded media for illegal content.
• Send you transactional emails related to your account (sign-in codes, account changes). We do not send marketing emails without your consent.
• Monitor app stability and fix bugs (via Sentry crash reports).
• Comply with legal obligations.

We do not sell your personal information. We do not display ads or share your data with advertisers.

3. Legal bases (for EEA/UK visitors)

Where the GDPR or UK GDPR applies, we rely on your consent (for waitlist and update emails) and our legitimate interests (in operating and securing the Site and measuring interest in Wyke). You may withdraw consent at any time.

4. How we share information

We share information only with trusted service providers who help us operate the App and Site:

• Supabase — database hosting, user authentication, and file storage (your posts, messages, and profile data are stored here).
• Cloudflare — content delivery, DNS, and media scanning for illegal content (CSAM detection on uploaded images).
• Resend — transactional email delivery (sign-in codes).
• Sentry — crash and error reporting.
• Expo / EAS — app builds and over-the-air updates.
• Mapbox — map rendering (the live ship map). Mapbox receives your device’s approximate location only if you have granted location permission, solely to render the map centered near you.
• aisstream.io — source of public AIS ship position data displayed on the live map. No user data is shared with this service.

We may also disclose information if required by law, to protect safety, or to enforce our Terms. We do not sell, rent, or share your information for third-party marketing or advertising.

5. Data retention and account deletion

We keep your account data for as long as your account is active. If you delete your account:

• Your profile is immediately anonymized (username, display name, avatar, bio, and other profile details are removed or replaced).
• Your account enters a 30-day grace period during which you can contact us to cancel the deletion.
• After 30 days, your account and all associated data — including posts, comments, messages, media files, cruise history, and authentication records — are permanently and irreversibly deleted from our systems.

You can delete your account at any time from within the App (Settings → Delete Account) or by visiting getwyke.com/delete-account.

6. Content moderation and safety

Uploaded photos and videos are automatically scanned for known child sexual abuse material (CSAM) using Cloudflare’s scanning tools. If a match is detected, the content is flagged and may be reported to the National Center for Missing & Exploited Children (NCMEC) and law enforcement as required by law.

User-generated text (posts, comments, messages) is checked against a filtered-word list before it can be sent. You can report content or other users directly from the App, and you can block users to prevent further interaction.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. EEA/UK residents have rights under the GDPR/UK GDPR; California residents have rights under the CCPA/CPRA, including the right to know, delete, and opt out of “sale”/“sharing” (we don’t sell or share your data in that sense). To exercise any right — or to unsubscribe — email privacy@getwyke.com or use the unsubscribe link in our emails.

8. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is perfectly secure, but we work to keep your data safe.

9. Children

The Site and Wyke are intended for people aged 17 and older. We do not knowingly collect personal information from children under 17. If you believe a child has provided us information, contact privacy@getwyke.com and we’ll delete it.

10. International transfers

We may process information in countries other than where you live, including the United States. Where required, we put appropriate safeguards in place for international transfers.

11. Changes to this Policy

We may update this Policy from time to time. If changes are material, we’ll update the “Last updated” date and, where appropriate, provide additional notice. Continuing to use the Site after changes means you accept the updated Policy.

12. Contact us

Questions or requests about your privacy: privacy@getwyke.com.