Privacy Policy

Last updated: November 7, 2026

This Privacy Policy describes how Techlogic Advisors, LLC ("VesselFile", "we", "us", or "our") collects, uses, and shares information when you use the VesselFile mobile application and related web services (collectively, the "Service"). VesselFile is a logbook for recreational power-boat owners to track maintenance, equipment, contacts, and reminders.

Techlogic Advisors, LLC is the data controller for the personal information described here. If you are in the European Economic Area or the United Kingdom, sections 3, 6 and 9 are written for you in particular.

The short version: we only collect the data you give us so we can store and sync it across your devices. We don't sell your data and we don't train AI on it. You can download everything we hold, or delete your account and all associated data, from inside the app at any time.

1. Information we collect

Account information

When you create an account, we collect your email address, a password (stored as a salted hash by our auth provider), and any profile details you choose to add (first name, last name, mobile phone number, profile photo).

Vessel and maintenance content you create

The Service exists to store the records you choose to enter, including:

Vessel details (name, year, make, model, hull type, HIN)
Engine details and hour readings
Equipment and electronics records
Maintenance log entries, notes, and dates
Photos you upload to entries, equipment, and vessel profiles
Reminders and checklists you create
Contacts you add manually or import from your device

Optional device data (only with your permission)

Photo library access — only when you tap to attach a photo. We do not scan your photo library.
Contacts access — only when you tap "Import from phone contacts". You select the contacts to import; we do not upload your full address book.

Usage and diagnostic data

We may collect basic technical information automatically (device type, operating system version, crash logs, error messages) to keep the Service reliable.

The VesselFile app itself contains no advertising or behavioral tracking. Nothing you log about your boat — maintenance records, photos, receipts, documents, contacts, or reminders — is ever used for advertising or shared with advertising networks. The advertising cookies described in section 3a apply only to the marketing pages on vesselfile.com, and only where you have allowed them.

2. How we use information

Provide, maintain, and improve the Service
Sync your records across your devices
Send maintenance reminders you've set up
Respond to support requests
Detect, prevent, and address abuse or technical problems
Comply with applicable law

We do not sell your personal information, and we do not use your content to train machine-learning or AI models.

Our legal basis for processing (EEA and UK)

If you are in the EEA or the UK, we rely on the following legal bases under the GDPR and UK GDPR:

What we do	Legal basis
Create and maintain your account; store and sync the records you enter	Performance of a contract (Art. 6(1)(b))
Send the maintenance reminders you set up	Performance of a contract (Art. 6(1)(b))
Take payment and provide a subscription	Performance of a contract (Art. 6(1)(b))
Respond to support requests	Performance of a contract, or our legitimate interest in supporting our users (Art. 6(1)(f))
Keep the Service reliable and secure — crash logs, error messages, abuse prevention	Legitimate interests (Art. 6(1)(f)): running a service that works and is not abused
Advertising cookies on the vesselfile.com marketing pages	Consent (Art. 6(1)(a)), which you may withdraw at any time — see section 3a
Retain transaction records for tax and accounting	Legal obligation (Art. 6(1)(c))

We do not carry out profiling or automated decision-making that produces legal or similarly significant effects.

3. How information is stored and shared

Your data is stored on infrastructure operated by Supabase, which hosts the database, authentication, and file storage for the Service in the United States (Ohio). Supabase processes data on our behalf as a sub-processor.

Sub-processors

These are the third parties that process personal information on our behalf in order to run the Service. They may not use your data for any purpose other than providing their service to us.

Provider	What it does	Where
Supabase	Database, authentication, file storage	United States
Cloudflare	Hosting and delivery of the web app and marketing site	Global edge network
Resend	Transactional email — sign-in, reminders, invitations	United States
Stripe	Payments and subscriptions purchased on the web	United States and Ireland
Expo	Delivery of push notifications to your device	United States
Apple, Google	App distribution, and in-app purchases made on iOS or Android	Global

Apple, Google and Meta act as independent controllers for the information they collect in their own right — purchases made through the App Store or Google Play, and the advertising cookies described in section 3a. Their own privacy policies govern that processing.

We will post changes to this list here before a new sub-processor begins processing your data.

International transfers

We are based in the United States and our infrastructure is located there. If you use the Service from the EEA or the UK, your personal information is transferred to the United States.

Those transfers are made under the Standard Contractual Clauses adopted by the European Commission in Implementing Decision (EU) 2021/914, and the UK International Data Transfer Addendum where the UK GDPR applies. Supabase, which holds the bulk of your data, incorporates those Clauses in its Data Processing Addendum and publishes a Transfer Impact Assessment covering them. Where a sub-processor is certified under the EU–US Data Privacy Framework, we may rely on that certification instead.

You can ask us for more detail about these safeguards using the contact details in section 11.

When we share data

Beyond those sub-processors, we share data only as follows:

With other people you choose to share with — for example, a co-owner you invite to access a vessel, or a repair shop you hand a boat to. You control these, and you can revoke them.
To comply with law or in response to a valid legal request, when we have a good-faith belief that disclosure is required.
In a business transfer, such as a merger or acquisition, in which case we will give notice before your data is transferred and becomes subject to a different policy.

3a. Cookies and advertising on vesselfile.com

This section applies only to the public marketing pages on vesselfile.com. It does not apply to the VesselFile app or to the web app at app.vesselfile.com, neither of which carries advertising tracking of any kind.

We advertise VesselFile on Facebook and Instagram. To find out whether those ads actually reach boat owners, our marketing pages can load the Meta Pixel, a piece of code from Meta Platforms, Inc. When it is active it tells Meta that a browser visited a page, along with the usual technical details a web request carries — page address, referring page, browser and device type, and IP address — and it stores cookies used to recognise the browser. Meta acts as an independent controller of that information under its own privacy policy.

We do not send Meta your name, email address, or anything you have logged about your boat.

Your choices

In the EU, UK, and EEA, nothing loads until you choose "Allow". Decline and no advertising code runs at all.
Elsewhere the pixel runs by default, and you can turn it off at any time with the Cookie choices link in the footer of any page. Your choice is remembered in your browser.
We honour the Global Privacy Control signal. If your browser sends it, we treat it as an opt-out and load nothing — including for California residents, for whom this constitutes a request not to share personal information for targeted advertising.
Browser-level cookie blocking and tracker blocking also prevent it, and we do nothing to work around them.

4. Data retention

We retain your data while your account is active. When you delete your account, we delete your records from our database. Backups containing deleted data are purged on our backup-retention cycle (currently 30 days).

What	How long we keep it
Your account, vessels, logbook entries, photos and documents	Until you delete your account, then purged from backups within 30 days
Record of your agreement to these policies	For as long as needed to show which version you agreed to, and when
Transaction and invoice records	As required by tax and accounting law, typically seven years, even after account deletion
Email suppression list (addresses that unsubscribed)	Kept indefinitely, precisely so we do not email you again
Crash logs and diagnostic data	Up to 90 days

5. How to delete your account

You can delete your account and all of your data from inside the app:

Open the VesselFile app and go to Profile.
Scroll to Delete account.
Type DELETE to confirm and tap Delete forever.

This permanently removes your profile, vessels, engines, logbook entries, photos, equipment, contacts, reminders, and shares. The action cannot be undone.

You do not need the app installed. The same controls are in the web app at app.vesselfile.com under Profile, which is the route to use if you have already removed VesselFile from your phone.

If you cannot sign in at all, email [email protected] from the address on file and we will delete your account within 30 days.

Our account-deletion page sets out each route step by step, exactly what is removed, and the few things that outlive the account and why.

6. Your rights

Depending on where you live — including residents of California, the EEA, the UK, and other jurisdictions — you have the following rights over your personal information. Most of them you can exercise yourself, immediately, without asking us.

Right	How to use it
Access — get a copy of what we hold	Profile → Download my data. You get the complete archive, including your files and photos.
Portability — take it elsewhere	The same export, in structured, machine-readable form.
Rectification — correct what is wrong	Edit any record directly in the app or web app.
Erasure — delete it	Profile → Delete account, as described in section 5. Or email us.
Restriction and objection — stop or limit processing based on legitimate interests	Email [email protected].
Withdraw consent	For advertising cookies, the Cookie choices link in the footer of any marketing page. Withdrawing consent does not affect processing already carried out.

We respond to requests within one month, as the GDPR requires, and we will not charge you or discriminate against you for making one. If a request is unusually complex we may extend that period and will tell you why.

7. Children

The Service is not directed to children under 13 (or 16 where applicable under local law). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Security

We use industry-standard safeguards including TLS in transit, encryption at rest, and row-level security to ensure each user can only access their own records. No system is perfectly secure.

If we discover a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of it where the GDPR or UK GDPR requires, and we will notify you directly without undue delay where the breach is likely to result in a high risk to your rights and freedoms.

9. If you are in the EEA or the UK

Controller. Techlogic Advisors, LLC is the controller of your personal information. Contact details are in section 11.

Complaints. You have the right to lodge a complaint with your local data protection supervisory authority. In the UK that is the Information Commissioner's Office; in the EEA it is the authority for the country where you live or work. We would rather you came to us first, but you are not obliged to.

Transfers. See section 3 for the safeguards that apply when your data travels to the United States.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a new "Last updated" date, and we will notify you by email and in the app before they take effect, so that you have a reasonable opportunity to review them.

11. Contact us

Techlogic Advisors, LLC
Email: [email protected]
Web: vesselfile.com