Legal

Privacy Policy

The short version: no account, no ads, no tracking. Only the "Is it on?" reports you give, the spots you suggest to all riders, and the subscription to notifications for your favorites if you turn it on, go through our server — under an anonymous identifier. The full version is below.

Last updated: October 7, 2026

0 accountsNo sign-up, no name, no email.

0 ads, 0 trackingNo advertising or analytics SDK.

Local locationProcessed on-device, never stored or shared.

Your data stays yoursDevice and your personal cloud; anonymous "Is it on?" reports, deleted after 48 h.

1.What we don't collect

Tide It works without a user account. We do not collect, store or sell any personal data: no name, no email, no advertising identifier, no usage profile.

Three optional features go through our own server, described in section 5: "Is it on?" reports, spots suggested to all riders and notifications for your favorites. They only use an anonymous identifier randomly generated by the device — never your name, your email or your location.

2.Location

If you allow it, your location is only used, on-device, to:

find the ports, spots and wind stations nearest to you;
show local weather and marine conditions;
create a custom spot at your location if you ask for it;
check that you are on site (within 10 km of the spot) before you give an "Is it on?" report — the check happens on the device, your location is never sent.

It is never stored or transmitted for identification purposes. You can deny access and pick a port manually — everything works, except "Is it on?" voting.

3.Data stored on your device

your favorites, custom spots and display preferences;
your sports and alerts configuration;
the tide and conditions cache (for offline access);
the device's anonymous identifier, randomly generated, never linked to your identity nor synced.

Sync between your devices goes through your personal iCloud (key-value storage), which we cannot access.

4.Services and data sources

On iPhone, iPad, Mac and Apple Watch, Tide It relies on the following Apple services: WeatherKit (weather), StoreKit (subscriptions), MapKit (map), iCloud (settings sync) and Apple's push notification service (APNs).

On Android: Google Play (subscriptions), the OpenFreeMap map (tiles of the area shown), Apple's weather through our relay (only the spot's coordinates are sent to it, nothing is kept) and Firebase Cloud Messaging (Google), only if you turn on notifications for your favorites — no analytics, no audience measurement, no advertising.

To show wind and marine conditions, the app queries public, read-only sources. Only the coordinates of the spot you are viewing (or your location if you allow it) are sent to them, to fetch local measurements. No personal data, identifier or account is sent, and none of these sources sets a tracker:

Open-Meteo: wind and sea forecasts;
Pioupiou / OpenWindMap: community anemometers (CC-BY license);
winds.mobi: aggregated station network (Holfuy, FFVL, Romma…);
aviationweather.gov (NOAA): airport METAR observations;
NDBC (NOAA): weather and ocean buoys;
Weameter: coastal weather stations.

5."Is it on?", public spots and notifications for your favorites

Reports. When you give your report on site, our server (hosted by Cloudflare) receives: the spot, the report you chose, the time, and a fingerprint of the device's anonymous identifier — a salted hash (SHA-256) from which the identifier cannot be recovered. It is only used to refuse two reports from the same device on the same spot within an hour and to limit abuse. No location, no text, no account. Reports are shown for three hours and deleted after 48 hours. The host sees your IP address for the duration of the request, to limit abuse; we do not keep it.

"When it's on at my favorites" notifications (off by default). If you turn them on, the server keeps: the device's notification token (provided by Apple or Google), the device type, the same anonymous fingerprint (so you are not notified of your own report), the list of spots you follow — your favorites, mapped to the catalog spot that carries their reports, never the name you gave a custom spot — and the date of the last update. Notifications are delivered by Apple (APNs) or Google (Firebase Cloud Messaging), which only receive the token and the content of the notification. Turning the setting off deletes this subscription immediately; with no news from the device for 30 days, it is deleted automatically.

Spots suggested to all riders (an option checked by default when you create a custom spot; uncheck it to keep the spot private). A suggested spot is published: its name, location, tide reference port and time offset are stored on our server and shown to other users of the app — first to those within 10 km (checked on their device), then to everyone once it has been confirmed by "Is it on?" reports from two different devices on site. The server keeps the same anonymous device fingerprint with it, to limit suggestions (five a day) and let you withdraw it — nothing else about you, and never your location. The name goes through a filter: links, addresses, phone numbers and offensive words are refused. While it is only suggested, you can edit it (name, location, tides) or withdraw it from the app; if it has not been confirmed after 90 days, it is deleted. A confirmed spot stays online until it is hidden or deleted by moderation.

Reporting a spot. Anyone can report a spot suggested by another rider, from its details: it disappears from their device at once; the server keeps the report (the spot, the same anonymous fingerprint, the time) and stops showing the spot once three devices have reported it. Withdrawing a spot: deleting your custom spot withdraws the suggested spot as long as it is not confirmed; after that, write to us to have it deleted. Moderation: we can restore a spot hidden by mistake, and hide or delete an abusive spot.

This data is not sold, shared or used for any other purpose.

6.Tracking and advertising

No tracking, third-party analytics, audience measurement or advertising tool is built in. The app contains no ads. This website uses no audience measurement or advertising cookies. Its host, Cloudflare, may run a bot-detection script on it, which may set a technical security cookie.

7.Calendar

Calendar access is only requested if you choose to export tide times to it. No event is read. On Android, the app only reads the list of your calendars, to pick the one where tides are added.

8.Notifications

Notifications are used exclusively for the alerts you set up (tides, GO windows, wind settling in) and, if you turn it on, to tell you when it's on at your favorites. No promotional notifications.

9.Security

Your data stays on your device, except for what is described in section 5. All network communication is encrypted (TLS).

10.Your rights

disable location: iOS Settings ▸ Privacy ▸ Location Services ▸ Tide It (Android: Settings ▸ Apps ▸ Tide It ▸ Permissions);
revoke calendar access: iOS Settings ▸ Privacy ▸ Calendars (Android: same path as location);
stop notifications for your favorites and delete their subscription: turn off "When it's on at my favorites" in the app's settings;
your "Is it on?" reports delete themselves after 48 hours;
withdraw a spot you suggested: delete your custom spot in the app (as long as it is not confirmed) or ask us to delete it;
delete all data on the device: uninstalling the app is enough.

For any question or deletion request about your data (GDPR): support@tideit.app.

11.Contact

Questions about this policy: support@tideit.app — or via the support page.