Nofo
Back

Privacy Policy

Last updated: December 26, 2024

Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

  • Account information (email address, password)
  • Phone numbers for SMS notifications
  • Location preferences for forecasts
  • Billing information for premium subscriptions
  • Usage data and preferences
  • Device information and identifiers when using our mobile apps

2. How We Use Your Information

We use the information we collect to:

  • Provide ocean forecast services
  • Send SMS notifications when requested
  • Process payments for premium features
  • Improve our services and user experience
  • Communicate with you about your account
  • Comply with legal obligations
  • Generate AI-powered analysis of ocean conditions

3. Third-Party Services

We work with trusted third-party service providers to operate our platform. These providers have access to your information only to perform services on our behalf and are obligated to protect your data:

  • Stripe - Payment processing. Stripe processes your payment information securely and is PCI-DSS compliant. We do not store your full credit card details.
  • Twilio - SMS messaging services. Twilio delivers our forecast notifications to your phone number.
  • Supabase - Database and authentication services. Supabase securely stores your account information and preferences.
  • Ollama - AI analysis services. We use AI models hosted by Ollama to generate personalized ocean condition summaries. Your location data may be processed to provide these insights.
  • Amazon Web Services (AWS) - Cloud infrastructure and data processing. AWS hosts our backend services and processes ocean forecast data.

Each of these providers maintains their own privacy policies and security practices.

4. SMS Communications

When you opt in to SMS notifications:

  • We store your phone number securely
  • We send forecast messages to your phone via Twilio
  • We record consent timestamps and IP addresses for compliance
  • We honor opt-out requests immediately
  • We never share your phone number with third parties for marketing

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy:

  • Account data - Retained while your account is active and for 30 days after account deletion to allow for recovery
  • Forecast and analysis data - Retained for 30 days to support historical reference and service improvement
  • SMS consent records - Retained for 5 years as required by telecommunications regulations
  • Payment records - Retained for 7 years as required by financial regulations
  • Usage logs - Retained for 30 days for security and troubleshooting purposes

After the retention period, data is securely deleted or anonymized.

6. Information Sharing

We may share your information in limited circumstances:

  • With service providers who assist in our operations (as listed above)
  • When required by law or legal process
  • To protect our rights or the safety of others
  • In connection with a business transfer or sale

We never sell your personal information to third parties.

7. Data Security

We implement appropriate security measures to protect your information:

  • Encryption of sensitive data in transit (TLS/SSL) and at rest
  • Regular security audits and updates
  • Limited access to personal information on a need-to-know basis
  • Secure payment processing through PCI-DSS compliant providers
  • Multi-factor authentication for administrative access

8. Your Rights and Choices

You have the right to:

  • Access and update your account information
  • Opt out of SMS notifications at any time by replying STOP
  • Delete your account and associated data
  • Request a copy of your personal information
  • Correct inaccurate information
  • Withdraw consent for data processing

To exercise these rights, contact us at privacy@nofo.app or use the account settings in our application.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know - You may request information about the categories and specific pieces of personal information we have collected about you.
  • Right to Delete - You may request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out - We do not sell personal information, so this right does not apply.
  • Right to Non-Discrimination - We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email privacy@nofo.app with the subject "CCPA Request".

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal Basis - We process your data based on: (a) your consent, (b) performance of a contract, (c) compliance with legal obligations, or (d) our legitimate business interests.
  • Right to Access - You may request a copy of your personal data.
  • Right to Rectification - You may request correction of inaccurate data.
  • Right to Erasure - You may request deletion of your data ("right to be forgotten").
  • Right to Restrict Processing - You may request limitation of data processing.
  • Right to Data Portability - You may request your data in a structured, machine-readable format.
  • Right to Object - You may object to processing based on legitimate interests.
  • Right to Lodge a Complaint - You may file a complaint with your local data protection authority.

For GDPR-related inquiries, contact privacy@nofo.app with the subject "GDPR Request".

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place, including:

  • Standard contractual clauses approved by regulatory authorities
  • Data processing agreements with our service providers
  • Encryption of data in transit and at rest

12. Cookies and Tracking

We use cookies and similar technologies to:

  • Remember your preferences and settings
  • Maintain your authenticated session
  • Analyze usage patterns to improve our service
  • Provide personalized content and recommendations

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our service.

13. Children's Privacy

Our service is not intended for children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly. Parents or guardians who believe their child has provided us with personal information should contact us at privacy@nofo.app.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new policy on this page with an updated revision date
  • Sending an email notification for significant changes
  • Displaying a prominent notice in our application

Your continued use of the service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: privacy@nofo.app
Website: https://nofo.app

We aim to respond to all privacy-related inquiries within 30 days.