Privacy Policy

Last updated 1 November 2026

This policy explains what personal data MyCustomLogBook ("we", "us") collects, why, and what you can do about it. The short version: we collect what we need to run your log books, we never sell it, and we never share your email or your data for marketing.

1. What we collect

• Account details: your name, email address and password. Passwords are stored only in hashed form; we cannot read them.
• Vessel details: the vessel's name, type, flag, official or IMO number and length, if entered.
• Crew and roles: who belongs to which vessel, their role, and invitations sent (including the invited person's email address).
• Log book content: layouts, entries, corrections, voyages and notes, with the name of the person who made each one and the time it was saved.
• Billing: the plan, payment status and receipts. Card details are handled by our payment provider and never reach us.
• Technical data: IP address, browser and request logs that our hosting and database providers record to run and protect the service, and the time zone of your device so the log opens on the right day.

We do not use advertising or tracking tools, and we do not build profiles of you.

2. Why we use it

• to provide the service you signed up for: sign-in, log books, crew access, exports (contract);
• to send emails the service needs: confirmations, invitations, password resets, billing notices and important changes (contract);
• to keep the service secure, prevent abuse and fix problems (legitimate interest);
• to keep billing and tax records (legal obligation).

We do not send marketing emails unless you ask to receive them.

3. Who we share it with

We never sell personal data or share it with anyone for their own purposes. We use a few providers who process it for us, under contracts that require them to protect it:

• Supabase — database and sign-in (servers in the EU, Ireland);
• Vercel — website hosting;
• Resend — sending the service's emails;
• our payment provider — subscriptions and receipts, once payments are open.

Some of these providers are based in the United States; transfers there are covered by their data protection terms, including the EU Standard Contractual Clauses. We will also disclose data if the law requires it.

Inside a vessel's account, crew see each other's names and the entries they are allowed to see under their role. That is part of how a shared log book works.

4. The vessel's log and your entries

A vessel's log book is the vessel's record. For the personal data in it — such as crew names on entries — the vessel (its owner or operator, acting through its admins) decides what is recorded and why, and we store it on their behalf. Because log entries are append-only (see the Terms), an entry and the name on it cannot be removed while the vessel keeps its log, even after you leave the vessel. Questions about that record are best raised with the vessel first; we will help where we can.

5. How long we keep it

• Account and vessel data: while the account is open.
• When a vessel's account is closed: deleted within 30 days, except billing records we must keep for tax purposes (usually up to 7 years).
• If you ask us to delete your account: your profile and sign-in are removed; your name stays on entries you made in a vessel's log, as explained above.
• Server logs: kept by our providers for a short period, usually days to weeks.

6. Cookies

We use only cookies the service needs to work: to keep you signed in, to remember your device's time zone, and briefly during a password reset. No advertising or analytics cookies, so there is no cookie banner.

7. Security

Data is sent over encrypted connections (HTTPS) and stored with access limited by role. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

8. Your rights

Depending on where you live (for example under the GDPR in the EU and UK), you can ask to see the personal data we hold about you, correct it, receive a copy, object to or restrict its use, or have it deleted, subject to the limits on log records above. You can change your name and password yourself in Settings. For anything else, email us; we answer within 30 days. You may also complain to your data protection authority.

9. Children

The service is not meant for anyone under 16, and we do not knowingly collect their data.

10. Changes

If we change this policy in a way that matters, we will tell account admins by email or in the app before it takes effect.

11. Contact

Privacy questions or requests: [add email].