Legal
Privacy Policy
GoneAshore is a digital IN / OUT gangway board for superyacht crew. It replaces the wipe-clean board at the passerelle: each crew member marks whether they are aboard or ashore, and the bridge sees a live tally.
This policy explains what personal data the app handles, why, where it is stored and what rights you have over it. It is written to be read, not to be survived.
1. Who is responsible
The service is operated by Flavio Baldi, an individual developer established in the European Union, acting as the provider of GoneAshore ("we", "us"). You can reach us at support@goneashore.com.
Two different roles
GoneAshore is sold to vessels, not to individuals, and this splits our responsibilities in two:
- For crew data — names, ranks, presence, duty roster, muster records — the vessel (or the company operating it) decides who is added to the board, what is recorded and for how long. The vessel is the data controller; we act as a data processor on its instructions.
- For account and service data — the login credentials, the subscription, the technical records we need to keep the service running and secure — we are the data controller.
If you are a crew member and want your data on the board changed or removed, the fastest route is your bridge or the person managing crew on your vessel. You can always write to us as well, and we will act with the vessel.
2. What we handle
- Account
- Email address and an encrypted password. Handled by our authentication provider; we never see or store your password in readable form.
- Crew profile
- Full name, department, rank, rank insignia, profile photo (if you upload one) and the colour assigned to your row on the board.
- Presence and rotation
- Whether you are marked aboard or ashore, and whether you are on active rotation or on leave, with the time each change was made.
- Duty and swaps
- The days you are assigned to watch, the swap requests you propose or accept, and who approved them. Swap history is kept: the roster is never silently overwritten.
- Notices
- Messages you post to the crew notice board, with author and timestamps. Reports made about a notice, and the moderation action taken.
- Muster and safety
- When an alarm is raised: who raised it, whether you marked yourself safe or were marked safe by someone with authority, when, and by whom. Also your assigned station and action for each emergency scenario.
- Vessel data
- Vessel name, home port, logo, cover photo and identifiers (IMO, call sign, MMSI, flag), entered by the bridge. Port and safety contacts saved by the crew.
- Push notifications
- A notification token for each device you sign in on, its platform (iOS or Android) and the device name, so that a muster alarm reaches you.
What we do not do. GoneAshore contains no analytics SDK, no advertising SDK and no third-party tracker of any kind. We do not profile you, we do not build an advertising identity, and we do not sell or rent personal data to anyone. There is nothing in the app watching how you use it.
3. Why we handle it, and on what legal basis
- To provide the service under the agreement with your vessel (GDPR Art. 6(1)(b) and 6(1)(f)) — the board, the roster, the notices, the muster.
- For safety and accountability at sea (Art. 6(1)(f), legitimate interest) — knowing who is aboard is the reason the app exists, and muster records need to remain intact after the event.
- To send you muster alarms and service notifications — on the device permission you grant, which you can withdraw at any time in your device settings.
- To keep the service secure and working (Art. 6(1)(f)) — technical logs, abuse prevention, backups.
4. Where your data is stored
All application data is stored on Supabase infrastructure in the eu-central-1 region — Frankfurt, Germany, inside the European Union. Images you upload (avatars, vessel logo and cover photo) are stored in the same region.
The vessel your account belongs to is enforced at the database level: crew of one vessel cannot read the data of another, and this is checked on the server, not only in the app.
5. Who else is involved
We use a small number of providers to run the service. They process data on our instructions only.
- Supabase — database, authentication, file storage and realtime updates. Data hosted in the EU (Frankfurt).
- Expo — the push notification service that delivers muster alarms. Your device notification token is passed to it.
- Apple (APNs) and Google (FCM) — the operating-system services that actually deliver a notification to your phone.
- Vercel — hosting of this website. The website itself sets no cookies and runs no analytics.
Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses.
6. How long we keep it
This is the part worth reading carefully, because GoneAshore deliberately does not delete some records.
Crew members are archived, not deleted. When someone leaves the vessel, their row is archived: they disappear from the board, but the historical record of who was aboard, who was on watch and who was accounted for at a muster stays intact. Gangway watch and muster records are the kind of thing that may need to be reconstructed after an incident, and a board that quietly rewrites its own past is worse than no board at all.
In practice:
- Account and profile — while your account is active, and archived afterwards as described above.
- Presence, duty, swaps, muster records — retained as vessel safety records, under the vessel's own retention policy.
- Notices — until deleted by you or by a moderator.
- Notification tokens — removed when you sign out or when the token stops being valid.
If you ask us to erase your personal data, we will do so except where a record must be kept for the safety and accountability reasons above. In that case we will minimise what remains and tell you what we kept and why.
7. Your rights
Under the GDPR you can ask to access your data, correct it, erase it, restrict or object to how it is handled, and receive a copy in a portable format. Write to support@goneashore.com and we will answer within one month.
You also have the right to complain to a data protection supervisory authority in the EU country where you live or work.
8. Children
GoneAshore is a professional tool for working crew. It is not intended for, and must not be used by, anyone under 16.
9. Changes to this policy
If we change how data is handled in a way that affects you, we will update this page and change the date at the top. Material changes will also be announced in the app.
10. Contact
Flavio Baldi — support@goneashore.com