Privacy Policy

Oracle of Surf is a product of Stowcrest Pty Ltd (ABN 17 646 258 380) (“we”, “us”, “our”). This policy explains what personal information we collect when you use the service, how we use it, and what choices you have.

If you have questions about this policy, contact us at surf@stowcrest.com.

We collect only what is necessary to operate the service:

• Account information — your email address and a hashed password, managed by Supabase Auth.
• Surfer profile — age range, sex, weight/height band, skill level, surfing approach, crowd tolerance, focus areas, activity goals, and all-time favourite boards that you choose to enter.
• Surf sessions — date, time, location, break, wave and wind conditions, board used, ratings, wave count, and personal notes you log.
• Surfboard quiver — board type, dimensions, fin setup, and any other board details you enter.
• Home location — your chosen default country, state, region, and area.
• Feedback messages — text you submit via the in-app feedback form, plus your email address so we can reply.

We do not collect payment card details, government IDs, or any sensitive personal information beyond the above.

Oracle of Surf does not send your data to any AI provider. Quiver Whisperer and Location Guide build an export — a block of text containing your surfer profile, quiver, session summary and, for Location Guide, your chosen session details and forecast — directly in your browser. Exports do not include your name, email address or account details.

You decide whether to copy or download an export and paste it into an AI service of your choice (such as Claude, ChatGPT or Gemini). Once you do, that service’s own privacy policy and terms apply to what you share with it.

• To provide the service — your session and profile data power the analytics, Insights dashboard, Quiver Whisperer, and Location Guide features.
• To show community insights — the boards you list as all-time favourites are counted, anonymously and aggregated with other users', in the Popular Boards widget. No names, emails or other profile details are shown.
• To share sessions you choose to share — if you create a share link for a session, anyone with the link can view that session's stats (break, date, board, conditions and ratings) until you revoke it. Shared pages never show your name, email address, notes or account details.
• To respond to feedback — we use your email to reply to support or feedback messages you send.
• To improve the service — we may review aggregated, anonymised usage patterns. We do not sell or share individual data for marketing purposes.

Your data is stored in a cloud database provided by Supabase, hosted on infrastructure in your region. Supabase enforces row-level security so that each user can only read and write their own records.

We take reasonable precautions to protect your information, but no internet-based service can guarantee absolute security. Please use a strong, unique password.

Oracle of Surf uses the following third-party services:

• Supabase — authentication and database (supabase.com).
• Open-Meteo — marine and weather forecasts for Location Guide's live forecast option (open-meteo.com). Only the location and date you choose are sent; no personal information.
• Vercel — hosting and edge delivery (vercel.com).
• Resend — transactional email for feedback replies (resend.com).

Each provider operates under its own privacy policy. We have no control over their data practices.

Your data is retained for as long as your account is active. You may delete your account at any time from the Profile tab → Danger Zone. This permanently removes all of your records — sessions, boards, profile, preferences, and your authentication account. Deletion is irreversible.

Depending on your location, you may have rights to access, correct, or delete your personal information. To exercise these rights, or to request a copy of your data, contact us at surf@stowcrest.com.

Australian users: this service endeavours to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

We use a single authentication cookie to keep you logged in. We do not use tracking, advertising, or analytics cookies.

Oracle of Surf is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will remove it promptly.

We may update this policy from time to time. If the changes are material, we will notify you by updating the effective date at the top of this page. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

Questions or concerns? Email us: surf@stowcrest.com