Itchy Tiller is operated by Otter Technologies Ltd, a company registered in England & Wales (company number 16995690). We are the “data controller” for the personal data described in this policy — meaning we decide what data we collect and why.

If you have any question about this policy or how we handle your data, contact us at privacy@itchytiller.com.

What we collect depends on how you use the app:

• Account details — your email address and, if you sign in with Google, Apple, Facebook or GitLab, the basic profile information those providers share with us (typically your name and email).
• Boat and profile details — anything you choose to add, such as your boat name, colour preference, and dimensions (beam, draught, headroom) used to filter routes.
• Moorings and cruising record — locations you save, arrival/departure times, stay-limit tracking, ratings, notes and any photos you upload.
• Route plans and jobs — routes you plan or save, and boat maintenance jobs/logs you record.
• Feedback and map corrections — the details of any report you submit, and, if you allow it, your device location and a snapshot of the relevant map data at the time.
• Payment and subscription status — which plan you’re on and your subscription status. We never see or store your card details — payments are handled entirely by Stripe.
• Messages to Windy, our AI assistant — sent to our AI provider to generate a reply. We record token usage for billing purposes but do not otherwise store the content of your conversations.
• Location you actively share — if you tap something like “Near you” or “Use my location”, your browser asks your permission and shares your coordinates for that one request. We don’t track your location in the background.
• Emails we send you — sign-in links, stoppage alerts and move-on reminders, and their delivery status (sent, delivered, bounced).
• Technical data — standard web request data (like IP address and browser type), and, only if you consent, aggregated and cookieless usage/performance metrics. See our Cookie Policy.

• To provide the app — your account, moorings, routes and jobs exist because you asked us to store them. This is necessary to perform our contract with you.
• To process payments and manage your subscription — necessary to perform our contract with you, and to meet our accounting and tax obligations.
• To send reminder emails you’ve turned on — based on your consent, which you can withdraw at any time from the relevant mooring or your profile settings.
• To respond to feedback and map reports — our legitimate interest in keeping the map and app accurate.
• To keep the service secure and prevent abuse — our legitimate interest in protecting the app and its users.
• To understand and improve the app — using aggregated, non-identifying usage trends, where you’ve consented to analytics cookies.

We don’t sell your personal data. We share it only with the services that help us run Itchy Tiller, each acting under their own privacy policy and, where required, a data processing agreement with us:

• Supabase — our database, authentication and file storage provider.
• Stripe — payment processing for subscriptions.
• Resend — delivery of transactional emails.
• Vercel — hosting, and the AI Gateway that routes your messages to Windy to a third-party AI model provider (the specific provider may change; none of them are permitted to use your messages to train their models on our behalf).
• Google, Apple, Facebook or GitLab — only if you choose to sign in with one of them.
• OpenStreetMap (Nominatim) — when you search for nearby shops, the search location is sent to this open-data service; no account information is included.

Canal & River Trust and CanalPlan.uk supply the underlying waterway, lock, bridge and mooring data shown on the map — they don’t receive any of your personal data from us.

Some of the providers above may process data outside the UK and European Economic Area, including in the United States. Where that happens, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

We keep your account data for as long as your account is active. You can delete your account at any time from Profile → Delete account. Doing so permanently removes your profile, moorings, route plans, jobs, photos and feedback, cancels any live Stripe subscription, and deletes your files from storage — this cannot be undone. Email delivery logs and aggregated, non-identifying analytics may be kept for a limited period afterwards for accounting and security purposes.

Under UK GDPR, you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data (or do it yourself from Profile → Delete account);
• ask us to restrict how we use your data;
• receive a copy of your data in a portable format;
• object to processing based on our legitimate interests;
• withdraw consent at any time, where we rely on it; and
• complain to the Information Commissioner’s Office (ico.org.uk) if you think we’ve got something wrong.

To exercise any of these, email privacy@itchytiller.com.

Itchy Tiller isn’t directed at, or intended for, children under 16, and we don’t knowingly collect their data.

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), database-level access controls that restrict each account to its own data, and restricted administrator access. No system is completely secure, but we work to keep yours as safe as we reasonably can.

We use a minimal set of cookies — see our Cookie Policy for the full list and how to manage your preferences.

We may update this policy from time to time — for example, if we add a new feature or change a provider. We’ll update the “last updated” date above, and, for significant changes, let you know in the app.

Otter Technologies Ltd — privacy@itchytiller.com