Tight Ship · Legal
Tight Ship Privacy Policy
This Privacy Policy explains how The Life Warriors, LLC, a Colorado limited liability company doing business as Sailing Life Warriors ("we", "us", "our"), collects, uses, shares and protects personal information when you use the Tight Ship app on iPhone, iPad and Android, and the Tight Ship website and web app at mytightship.com (together, the "Service").
We are the "controller" (or "business") responsible for your personal information under the laws that apply to it.
The short version
- No ads. We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not track you across other companies' apps or websites.
- On the free Deckhand plan, your boat data stays on your device. You don't need an account, and we don't receive your boat data.
- On paid plans (Captain, Admiral and Founding Crew), your data is synced to our cloud so you can use it across devices, and your photos are stored there too.
- AI features: On Admiral, questions you ask the built-in AI or voice assistant, and the boat data needed to answer them, are sent to third-party AI service providers. We choose providers that do not use your data to train their models. On supported iPhones, offline help uses AI that runs on your device.
- You can delete your account and cloud data from inside the app at any time, or at https://mytightship.com/delete-account.
- Questions: [email protected].
1. Who we are and how to contact us
The Life Warriors, LLC (dba Sailing Life Warriors)
Colorado, USA
Email: [email protected]
2. What the Service does
Tight Ship helps cruising sailors who live aboard run their boat. It includes maintenance logs and service schedules, a printable service sheet (Print/PDF), safety-gear expiry tracking, a provisions and stores inventory (lockers, shopping list and passage shortfall), owner's manuals stored offline or linked, a boat map, an offline help and troubleshooting guide, a budget and cost-to-run tracker, checklists (including the Skipper checklist), crew, and support for multiple boats.
Some features are planned and not yet available: GPS position and underway tracking, arrival reminders, voice entry, photo identification ("photo-to-list"), a "connect your own AI" connector, and a Victron VRM / Cerbo GX energy-data integration. Where this policy describes a planned feature, it applies when that feature is released. If a feature ends up working differently from what is described here, we will update this policy before releasing it.
3. What we collect, by plan
3.1 Deckhand (free, no account)
- Your boat data stays on your device. Everything you enter, including boats, maintenance logs, schedules, inventory, budgets, checklists, crew details, notes, photos and manuals, is stored locally on your device. We do not receive it.
- No account is required, so we do not collect your name or email address.
- Device backups. If your device's own backup is turned on (for example iCloud Backup or Google backup), your device platform may back up app data under its own privacy terms. We do not control or have access to those backups.
- App store information. Apple and Google may share limited, aggregated or de-identified information with us, such as download numbers, crash reports and app performance, if you have agreed to share it with app developers in your device settings.
- No third-party analytics or advertising tools. The app does not include third-party analytics, advertising or tracking software.
3.2 Captain, Admiral and Founding Crew (paid, with an account)
In addition to the above, if you create an account and subscribe we collect:
| Category | Examples | Why |
|---|---|---|
| Account details | Email address, a display name if you add one, account ID, and your sign-in credentials (passwords are stored only in hashed form; if you sign in with Apple or Google, we receive an identifier and the email address they provide) | To create and secure your account and contact you about it |
| Boat and user content | Everything you enter in the app: boats, maintenance logs, service schedules, safety-gear dates, inventory, shopping lists, budgets and costs, checklists, notes, manuals or links to manuals, boat map | To sync and back up your data across your devices |
| Photos and files | Photos you take or choose, and files you upload (for example manuals and receipts) | To store them in the cloud and show them on your devices |
| Crew information | Names, roles and contact details you choose to enter for crew members | To provide crew features (Admiral) |
| Subscription information | Your plan, trial status, renewal and expiry dates, store transaction identifiers, and country or region | To unlock the features you paid for and manage your subscription |
| Support communications | Emails you send us and our replies | To help you |
| Technical data | IP address, device type, operating system, app version, timestamps and error logs | To run, secure and fix the Service |
Payments: Subscriptions are sold through the Apple App Store and Google Play. Apple and Google process your payment. We never receive your card or bank details. We receive confirmation of your purchase and your subscription status.
3.3 Admiral: built-in AI and voice assistant
If you use the built-in AI ("Ask") or the voice assistant, we process:
- Your questions and instructions, typed or spoken.
- Your voice, while you are using a voice feature. Speech is converted to text on your device where your device supports it. Otherwise, the audio is sent to a third-party AI service provider to be converted to text. We do not keep audio recordings after they have been converted to text.
- The relevant boat data needed to answer you, such as your engine model, maintenance history or inventory.
- The AI's responses.
This information is sent to third-party AI service providers so they can produce an answer (see Section 5).
Heavy AI use is subject to a fair-use allowance, so we keep a count of AI requests for each account.
3.4 Location data (planned feature)
When GPS position and underway tracking and arrival reminders are released:
- We will only collect your device's precise location if you allow it through your device's location permission. You can turn this off at any time in your device settings, and the rest of the app will keep working.
- Location is collected in the background only while underway tracking is turned on by you. When you turn underway tracking off, background collection stops. At other times, location is used only while the app is open and you are using a location feature.
- Deckhand: location data stays on your device.
- Paid plans: location data (such as positions, tracks, passages and arrival times) is synced to our cloud so you can see it on your other devices.
- We use location only to provide position logging, underway tracking and arrival reminders. We do not use it for advertising, and we do not sell or share it.
- If you ask the built-in AI a question that involves your position or passage, your location may be included in what is sent to the AI service provider.
Under some laws, such as California's, precise geolocation is "sensitive personal information". We use it only to provide the feature you asked for.
3.5 Photos, camera and microphone
- We access your camera or photo library only when you choose to add a photo, and only with your permission.
- We access your microphone only when you use voice entry or the voice assistant, and only with your permission.
- We remove location metadata (GPS coordinates stored inside the image file) from photos before they are uploaded to our cloud, unless you choose to keep it.
- Photo identification / photo-to-list (planned, Admiral): when you use this feature, the photo is sent to a third-party AI service provider to identify items and build a list.
- Photos can show things you did not intend to share, such as people or documents. Please check before you upload.
3.6 Connect your own AI (planned, Captain and above)
This planned connector, which uses the Model Context Protocol ("MCP"), lets you authorise your own AI assistant, such as ChatGPT, Claude or Grok, to read your Tight Ship data.
- It only works if you turn it on and authorise it.
- Once you do, the AI provider you chose will receive the Tight Ship data it requests through the connector. That provider's own privacy policy and terms apply to what it does with that data. We do not control it.
- You can disconnect it at any time in the app's Settings.
3.7 Victron VRM / Cerbo GX integration (planned)
If you choose to connect a Victron VRM account or Cerbo GX device, we will collect the energy data you authorise (such as battery state of charge, voltage, solar yield and consumption) and an access token so the app can fetch it. We do not store your Victron password. Victron's own privacy policy applies to your Victron account. You can disconnect at any time in the app's Settings.
3.8 Website, waitlist and email
- Waitlist. If you join our waitlist on mytightship.com, we collect your email address and, if you choose to give them, your boat and where you are cruising. We also record which page you signed up from, the referring web page, and your approximate country (worked out from your IP address). We use your IP address briefly to prevent abuse of the sign-up form. This information is stored with Cloudflare only. Joining the waitlist does not add you to our MailerLite newsletter list.
- Newsletter. We use our email provider, MailerLite, only if you subscribe to our newsletter. If you do, MailerLite holds your email address (and any details you give when you subscribe) and sends the newsletter for us. Newsletter emails may use standard open and click tracking so we can see what is useful. You can unsubscribe at any time using the link in any email.
- Account and service emails (such as sign-in links, confirmations and important notices) are sent through Resend.
- Cookies. Our website does not use advertising or third-party tracking cookies. It may use strictly necessary storage (for example, to keep you signed in to the web app).
3.9 On-device AI (iPhone)
On supported iPhones, the offline help and troubleshooting feature uses AI that runs on your device. What you ask it is processed on your device and is not sent to us or to any third-party AI service provider.
3.10 Information about other people
If you enter information about other people, such as crew members, please make sure you are allowed to do so and that they know about it. Please do not enter sensitive information, such as health, passport or financial details, unless you need to. On paid plans it will be stored in our cloud.
4. How we use your information
We use personal information to:
- Provide the Service and the features of your plan, including sync, backup and photo storage.
- Create and manage your account and subscription, including free trials, Founding Crew pricing and offer codes.
- Provide the AI and voice features you choose to use, and apply the fair-use allowance.
- Send service messages, such as sign-in emails, security alerts, and notices about changes to our terms.
- Send waitlist updates and product news if you signed up for them. You can unsubscribe at any time.
- Respond to support requests.
- Keep the Service secure, prevent fraud and abuse, and fix problems.
- Comply with the law and enforce our Terms of Use.
We do not use your personal information for advertising, we do not sell it, and we do not build advertising profiles. We do not use your content to train AI models.
Legal bases (EEA and UK users)
- Contract: to provide the Service and your subscription (points 1 to 4, and 6).
- Consent: for marketing emails and the waitlist, location, camera, microphone, and connecting third-party services such as your own AI or Victron. You can withdraw consent at any time.
- Legitimate interests: to keep the Service secure, prevent abuse and improve it (point 7), where those interests are not overridden by your rights.
- Legal obligation: for tax, accounting and legal requests (point 8).
5. AI processing by third parties
When you use the Admiral built-in AI or voice assistant, or photo identification, your question, any voice input or photo, and the relevant boat data are sent to a third-party AI service provider to produce an answer.
- We send only what is reasonably needed to answer your request.
- We choose AI service providers that do not use your data to train their models, and we require this in our agreements with them. Providers may keep data for a limited time under their business terms, for example to detect abuse, and then delete it.
- AI service providers may be located in the United States or other countries (see Section 10).
- AI answers can be wrong. Please read our Safety & Navigation Disclaimer at https://mytightship.com/safety.
6. How we share information
We share personal information only:
- With service providers (processors) who help us run the Service, under contracts that limit their use of your information to providing services to us (see Section 7).
- With Apple and Google, to process subscriptions, trials, refunds and offer codes.
- With third parties you connect, such as your own AI assistant through the connector, or Victron VRM. They handle data under their own policies.
- For legal reasons, if required by law, or to protect the rights, safety or property of our users, the public or us.
- In a business transfer: if we are involved in a merger, acquisition or sale of assets, your information may be transferred, subject to this policy or one at least as protective, and we will tell you.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
7. Our service providers
| Provider | What they do for us | Data involved | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, database, cloud sync, and photo and file storage (Cloudflare Workers, KV, D1 and R2); website waitlist storage | Account data, boat data, photos and files, waitlist data, technical data | United States and Cloudflare's global network |
| Apple Inc. | App Store subscriptions and payments; Sign in with Apple (if you use it); on-device AI on supported iPhones | Purchase and subscription status; sign-in identifier | United States and worldwide |
| Google LLC | Google Play subscriptions and payments; Sign in with Google (if you use it) | Purchase and subscription status; sign-in identifier | United States and worldwide |
| MailerLite | Newsletter emails, only if you subscribe to our newsletter | Email address and any details you give when you subscribe | European Union and United States |
| Resend | Account and service emails | Email address and email content | United States |
| Third-party AI service providers | Built-in AI, voice assistant, speech-to-text and photo identification (Admiral) | Your prompts, voice input or photos, relevant boat data, and AI responses | United States and other countries |
| Victron Energy (planned, only if you connect it) | Energy-data integration | Energy data and access token | Victron's own systems |
We keep this list up to date in this policy.
8. How long we keep information
| Data | How long |
|---|---|
| Deckhand data | On your device until you delete it or delete the app. We never hold it. |
| Account and cloud data (paid plans) | While your account is active. |
| If you move from a paid plan to Deckhand | Your cloud copy is kept for 90 days so you can resubscribe without losing anything, then deleted. The copy on your device is not affected. |
| After you delete your account | Deleted from our live systems within 30 days, and purged from backups within 90 days. |
| AI request logs | Up to 30 days, for troubleshooting and fair-use counting. Answers you save in the app stay until you delete them. |
| Voice recordings | Not kept after they have been converted to text. |
| Support emails | Up to 3 years after our last contact with you. |
| Subscription and transaction records | Up to 7 years, as required for tax and accounting. |
| Waitlist and newsletter | Until you unsubscribe or ask us to delete it. |
| Server and security logs | Up to 30 days. |
9. Deleting your data and your account
- In the app: go to Settings > Account > Delete Account to delete your account and all of your cloud data. This is permanent.
- Without the app: visit https://mytightship.com/delete-account, or email [email protected] with the subject "Delete my account" from the email address on your account.
- We delete your data from our live systems within 30 days and from backups within 90 days.
- Deleting your account does not cancel your subscription. Subscriptions are billed by Apple or Google, so cancel in your App Store or Google Play subscription settings.
- Deckhand data is on your device. Delete it in the app or by uninstalling the app.
- We may keep limited records where the law requires, such as transaction records (see Section 8).
10. International transfers
We are based in the United States, and our service providers store and process data in the United States and other countries. If you use the Service from outside the United States, including from the EEA, UK, Switzerland, Australia or New Zealand, your personal information will be transferred to and processed in the United States and other countries whose data-protection laws may differ from yours.
Where the law requires, we protect these transfers with appropriate safeguards, such as the European Commission's Standard Contractual Clauses (with the UK Addendum), or our providers' certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. For Australian users, we take reasonable steps to make sure overseas recipients handle your information consistently with the Australian Privacy Principles. For New Zealand users, we take steps to make sure comparable safeguards apply, in line with the Privacy Act 2020.
11. Security
We use reasonable technical and organisational measures to protect your information, including encryption in transit (TLS), encryption at rest provided by our hosting provider, access controls, and limiting who can access data. No system is perfectly secure. Keep your device and account secure, and contact us straight away if you think your account has been compromised. If a data breach affects you, we will notify you and the relevant authorities where the law requires.
12. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy;
- correct inaccurate information;
- delete your information;
- export your data in a portable, machine-readable format;
- object to or restrict certain processing;
- withdraw consent at any time (this does not affect processing that happened before you withdrew it); and
- not be discriminated against for exercising your rights.
To exercise these rights, use the tools in the app or email [email protected]. We may need to verify your identity. We will respond within the time the law requires: for example, one month under the GDPR, 45 days under California law, and 30 days under Australian law. Where the law allows, you may use an authorised agent.
EEA, UK and Switzerland
You can complain to your local data-protection authority. In the UK, that is the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to resolve your concern first.
California
In the last 12 months we have collected these categories of personal information: identifiers (such as email address, account ID and IP address); commercial information (subscription records); internet or other electronic activity (technical and usage data); geolocation data (if you turn on location features); audio and visual information (photos and voice input); and other information you choose to enter. We collect it from you, your device, and Apple or Google, for the business purposes described in Section 4. We disclose it only to the service providers in Section 7 and to third parties you choose to connect.
- We do not sell or share personal information, as those terms are defined in California law, and we have not done so in the last 12 months.
- We use sensitive personal information (precise geolocation and account sign-in details) only to provide the Service you asked for, as the law permits. We do not use it to infer characteristics about you.
- We do not knowingly sell or share the personal information of consumers under 16.
- You have the right to know, delete and correct your information, and the right to non-discrimination. Contact us as described above.
Other US states
Residents of other states with consumer privacy laws, such as Colorado, Virginia and Connecticut, have similar rights. If we deny your request, you can appeal by emailing [email protected] with the subject "Privacy appeal". We honour Global Privacy Control signals as an opt-out of sale and sharing, although we do not sell or share personal information in the first place.
Australia
We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you are not satisfied with our response to a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
New Zealand
We handle personal information in line with the Privacy Act 2020. You can contact the Office of the Privacy Commissioner (privacy.org.nz).
13. Children
The Service is for people aged 16 and over. It is not directed to children, and we do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it. Information about minors who sail as crew should only be entered by a parent or guardian.
14. Permissions and controls on your device
You control location, camera, photos, microphone, speech recognition and notifications through your device settings, and you can change them at any time. Turning a permission off disables only the feature that needs it.
15. Changes to this policy
We may update this policy. If we make a material change, we will tell you in the app or by email before it takes effect, and we will update the "Last updated" date. Where the law requires your consent to a change, we will ask for it.
16. Contact
The Life Warriors, LLC (dba Sailing Life Warriors)
Colorado, USA
[email protected]
Related: Terms of Use (https://mytightship.com/terms) · Safety & Navigation Disclaimer (https://mytightship.com/safety)