Privacy Policy

Oracle of Surf is a product of Stowcrest Pty Ltd (ABN 17 646 258 380) (“we”, “us”, “our”). This policy explains what personal information we collect when you use the service, how we use it, and what choices you have.

If you have questions about this policy, contact us at surf@stowcrest.com.

We collect only what is necessary to operate the service:

• Account information — your email address and a hashed password, managed by Supabase Auth.
• Surfer profile — age range, sex, weight/height band, skill level, surfing approach, crowd tolerance, and surfing goals that you choose to enter.
• Surf sessions — date, time, location, break, wave and wind conditions, board used, ratings, wave count, and personal notes you log.
• Surfboard quiver — board type, dimensions, fin setup, and any other board details you enter.
• Home location — your chosen default country, state, region, and area.
• AI feature usage — token counts and cost estimates for shared-key AI users (Super/Admin tier), used solely to enforce monthly spending caps.
• Feedback messages — text you submit via the in-app feedback form, plus your email address so we can reply.

We do not collect payment card details, government IDs, or any sensitive personal information beyond the above.

If you use the General tier, you may optionally enter your own AI provider API key to enable AI features. That key is stored only in your browser’s local storage on your device — it is never transmitted to or stored on our servers.

• To provide the service — your session and profile data power the analytics, Insights dashboard, Quiver Whisperer, and Location Guide features.
• To enforce fair-use limits — AI usage data is used only to apply and display your monthly spending cap.
• To respond to feedback — we use your email to reply to support or feedback messages you send.
• To improve the service — we may review aggregated, anonymised usage patterns. We do not sell or share individual data for marketing purposes.

Your data is stored in a cloud database provided by Supabase, hosted on infrastructure in your region. Supabase enforces row-level security so that each user can only read and write their own records.

We take reasonable precautions to protect your information, but no internet-based service can guarantee absolute security. Please use a strong, unique password.

Oracle of Surf uses the following third-party services:

• Supabase — authentication and database (supabase.com).
• Anthropic — AI inference for the Auto-fill Conditions, Quiver Whisperer, and Location Guide features (anthropic.com). Session context is sent to Anthropic only when you actively trigger an AI feature.
• Vercel — hosting and edge delivery (vercel.com).
• Resend — transactional email for feedback replies (resend.com).

Each provider operates under its own privacy policy. We have no control over their data practices.

Your data is retained for as long as your account is active. You may delete your account at any time from the Profile tab → Danger Zone. This permanently removes all of your records — sessions, boards, profile, preferences, and your authentication account. Deletion is irreversible.

Depending on your location, you may have rights to access, correct, or delete your personal information. To exercise these rights, or to request a copy of your data, contact us at surf@stowcrest.com.

Australian users: this service endeavours to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

We use a single authentication cookie to keep you logged in. We do not use tracking, advertising, or analytics cookies.

Oracle of Surf is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will remove it promptly.

We may update this policy from time to time. If the changes are material, we will notify you by updating the effective date at the top of this page. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

Questions or concerns? Email us: surf@stowcrest.com