← SpotBuddy
Privacy Policy
Last updated: May 2026
What we collect
- Account info: email address (via Supabase Auth)
- Profile info: display name, profile photo, nationality, skill level
- Session data: check-ins, planned sessions, spot ratings
- Location: only when you use Check in or Suggest a spot — never stored continuously
- Messages: direct messages and group chats within the app
- Push notification token: to send you activity alerts
How we use it
Your data is used solely to operate SpotBuddy:
- Show who is at a spot and when
- Enable session planning and buddy connections
- Send push notifications for buddy activity
- Display your profile to other riders
We do not sell your data. We do not use it for advertising.
Who can see your data
- Other SpotBuddy users can see your display name, profile photo, nationality, skill level, and sessions.
- Direct messages are only visible to you and the recipient.
- Your email address is never shown to other users.
Data storage
Your data is stored on Supabase (supabase.com), hosted in the EU. Supabase is GDPR-compliant. Wind data is fetched from Open-Meteo (open-meteo.com) and is not stored per user.
Your rights (GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate data (via your profile in the app)
- Delete your account and all associated data (via Profile → Delete account)
- Object to processing
- Lodge a complaint with the Dutch DPA (Autoriteit Persoonsgegevens)
To exercise any right, contact us at spotbuddynl@gmail.com
Data retention
Your data is kept for as long as your account is active. When you delete your account, all personal data is permanently removed from our systems within 30 days.
Contact
SpotBuddy is operated by an individual developer based in the Netherlands.
Email: spotbuddynl@gmail.com