Skip to content

Privacy Policy

Version 3

Privacy Policy

KLABBY — Last updated: 2026-10-17

1. Data Controller

The controller of your personal data is Fabrizio Giuliani, Via della Costituzione 2, 10040 Piobesi Torinese (TO), Italy, VAT no. 12346490019, who provides KLABBY (the mobile app, the web app and the klabby.app website). Contact: privacy@klabby.app.

2. Data We Collect

  • Account data: email address, display name, and the data you add to your profile (e.g. phone, photo). If you sign in with Apple or Google, we receive the email and name they share with us.
  • Boat data: boat specifications, maintenance records, documents and photos you upload, expenses, bookings, inventory, crew and logbook entries.
  • Location data: GPS coordinates during a navigation you start yourself, and the boat's position used for weather forecasts.
  • Usage data: app interactions and feature usage, via Google Analytics for Firebase, only if you opt in (see section 6).
  • Diagnostics: crash reports and stability data via Firebase Crashlytics.
  • Push token: a notification identifier (Firebase Cloud Messaging).
  • Subscription and payment data: plan, status, billing dates, and the country of your billing address. Card details are entered on Stripe's payment page and never reach us.
  • Purchases inside the iOS app (EU): the purchase tokens that Apple's system gives the app, linked to your account, and your iOS version.
  • Acceptance records: which version of these documents you accepted, and when.
  • Contact form: name, email address, topic and message, and the IP address of the request.
  • Technical logs: our servers record requests and errors; the contact form lines include the IP address.
  • Age range: on iOS, the age range shared through Apple's Declared Age Range feature is used only on your device, to hide purchases from minors. It is not sent to us.

3. Purposes and Legal Bases (GDPR)

  • Providing the service, notifications about deadlines, account and subscription management, payments: performance of the contract.
  • Usage analytics: consent, which you can withdraw at any time (see section 6).
  • Crash diagnostics, service security, abuse prevention on the contact form, technical logs: legitimate interest in keeping the service secure and working.
  • Reports to Apple on purchases made inside the iOS app: legitimate interest in meeting our obligations under Apple's developer terms.
  • Accounting and tax records: legal obligation.
  • Proof of your acceptance of these documents: legitimate interest and legal obligations on consumer contracts.

4. Who Processes Your Data

We do not sell your personal data. Data is processed by:

  • Supabase (authentication, database and file storage; servers in Ireland)
  • Render (our application servers, in Frankfurt, Germany)
  • Google / Firebase (analytics, crash reporting, push notifications) and Google Fonts (the app downloads its fonts from Google, which sees your device's IP address)
  • Stripe (payment processing, on the website and inside the iOS app)
  • Apple (for purchases made inside the iOS app in the EU, Apple's terms require us to report each transaction: purchase token, product, amounts, tax country and dates, without your name or email)
  • Resend (sending emails)
  • Cloudflare (spam protection on the contact form and cookie-free statistics on klabby.app)
  • OpenStreetMap Foundation (the app loads map tiles from its servers, which see your device's IP address and the map area)
  • Open-Meteo (weather forecasts: we send only coordinates, without any identifier)
  • Boat co-owners (shared boat data visible to all members)

5. International Transfers

Some of these providers are based in the United States or may process data there. These transfers rely on the EU-US Data Privacy Framework for certified companies, or on the Standard Contractual Clauses adopted by the European Commission.

6. Your Choices

  • Analytics: off by default. Enable or disable it any time in More -> My Profile -> Privacy.
  • Crash reports: on by default (legitimate interest); you can opt out in More -> My Profile -> Privacy.

7. Data Retention

  • Account and boat data: while your account is active. In-app account deletion wipes your data end-to-end.
  • Technical logs: 7 days at our hosting provider.
  • Contact form messages: as long as needed to handle your request.
  • Subscription, payment and Apple report records: for the period required by tax and accounting law, and at least 3 years after each report to Apple, as Apple's terms require.

8. Your Rights (GDPR)

You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing. Write to privacy@klabby.app. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority of your EU country.

9. Required Data and Automated Decisions

An email address is needed to create an account; without it we cannot provide the service. The other data depends on the features you use. We make no decisions based solely on automated processing.

10. Contact

For privacy inquiries: privacy@klabby.app