What we keep, and why

What we collect

Your email address and a password hash, or, if you continue with Apple or Google, the name and email address they share with us, and the profile picture Google shares. Apple can hide your real address behind a relay one.

What you tell the app: your surf level, your home spot, the spots you follow and when you want to be alerted.

Your conversations with the assistant, so it can pick them up where you left them.

What each answer from the assistant cost and how much text it processed, to count your credit. If you buy credit, the amount and a reference to the payment. Your card details go to Stripe and never reach us.

If you use the microphone, a recording of your voice while you dictate. It is turned into text and the text goes into your message.

If you allow notifications, an identifier for each of your devices, so an alert reaches them, and the alerts we sent you, so the same one is not sent twice.

Why we use it

Only to run Fomology: sign you in, rate the coming sessions for your level and your spots, and answer your questions. We do not sell your data, show ads or track you across other sites.

Who processes it

Supabase stores your account and your data. Vercel hosts the app. Anthropic generates the assistant’s answers from your messages. Langfuse records those exchanges so we can find and fix bad answers. Apple and Google sign you in when you choose them.

Stripe takes the payments for credit, as merchant of record: it receives your email address and your payment details, and keeps the payment records the law requires it to keep.

ElevenLabs turns your dictated voice into text. It keeps the recording and the transcript under its own retention policy, which we cannot switch off, and it processes them outside the European Union. If you would rather it did not, type your message instead of dictating it.

OneSignal delivers notifications to your devices, through Apple’s and Google’s push services. It knows your devices and your account identifier, not your name or email address.

Sentry receives a report when the app or the website runs into an error: what went wrong, the screen or page it happened on, and your device, system and browser. We do not tell it who you are: no name, email address or account identifier goes with the report. It processes the reports in the United States and deletes them after its own retention period.

How long we keep it

As long as your account exists. Delete it from your profile, in the app or on the web, and your profile, your spots, your conversations, your credit, your alerts and your devices registered with OneSignal go with it.

You can also delete a single conversation, from the chat: its messages are erased for good. What stays is the time each of your questions was asked, never what it said, because it is how we limit how many questions one account can ask. It goes with your account.

The copies Langfuse and ElevenLabs keep are not deleted with your account: they follow their own retention. Write to us and we will ask for them to be erased.

Contact

For a copy of your data, a correction or a deletion, write to pamela@fomology.app.