Privacy policy for the YachtPassage app
YachtPassage plans your passages on your device: no user account, no advertising, no tracking. For weather, sea state and tides the app requests forecasts for the area of your route. Data only reaches Navismare if you send a harbour report yourself. This policy describes which data the app processes, which external services it uses and on what legal basis.
1. Controller
NAVISMARE Yachtlogistic
Apartado 5019
8200-427 Guia/Portugal
Email:
2. Principle: your data stays on your device
YachtPassage requires no user account and no registration. What you create in the app – boat profiles (e.g. type, dimensions, consumption, your limits for gusts and waves), start and destination, calculated routes, your own places and notes, your own harbour details and settings – is stored locally on your device. There is no synchronisation via iCloud or any other service. None of this data is transferred to Navismare or third parties; the only exception is a harbour report that you send yourself (section 5).
YachtPassage uses no advertising networks, no analytics or tracking services and no profiling.
3. Location
The app only requests your device's location when you tap the arrow next to the start field: once, to set the starting marina. The location is not stored and not transferred to Navismare. The legal basis is Art. 6(1)(b) GDPR (the function you chose). You can revoke location access at any time in your device's settings; you then choose the start via the search.
4. External services (online functions)
For planning, the app retrieves data from external providers. For technical reasons your IP address and the coordinates of the requested area or place are transmitted to the respective provider. No names, contact details, boat data or other app content are transmitted. The requests arise when you start a plan or use the map.
Weather and sea state (Open-Meteo)
The app requests the weather through a relay on navismare.com. The relay forwards only the coordinates of the area around the planned route, the values requested (wind, gusts, sea state, current) and the forecast period to Open-Meteo. It does not pass on your IP address; Open-Meteo only sees the relay's request.
- Recipient: the relay on navismare.com (hosted by Hostinger, see below) and OpenMeteo GmbH, Hintere Schilligmatte 6, 6463 Bürglen (UR), Switzerland (open-meteo.com).
- Data: at the relay, your IP address (as on any web server); to Open-Meteo, the coordinates of the area around the planned route and the forecast period. The relay stores neither coordinates nor responses; it only counts per month how many requests and places it has forwarded, without any link to you. To limit abusive requests (at most 60 per minute) it stores a checksum of your IP address, formed with a secret key, and the minute of the last request in a temporary file. Without the key, which exists only on the server, the checksum can no longer be assigned to an IP address; as a precaution we still treat it as personal data.
- Purpose: retrieving forecasts for wind, gusts and sea state, from which the app calculates the route and departure windows; protecting the service against abuse and uncontrolled costs.
- Legal basis: Art. 6(1)(b) GDPR (the request) and Art. 6(1)(f) GDPR (legitimate interest in protecting the service against abuse). You may object to processing under point (f) (section 9).
- Location: the relay runs on the navismare.com server in Frankfurt am Main (Germany). Open-Meteo is based in Switzerland; the European Commission has recognised Switzerland as providing an adequate level of data protection (Art. 45 GDPR).
- Retention: the file with the checksum is deleted once it is 24 hours old; deletion takes place the next time the relay is called.
The app caches forecasts already loaded on the device so that they do not have to be reloaded for every calculation.
Tides (WorldTides)
The app requests tides through a relay on navismare.com. The relay forwards only the coordinates of the requested place and the period to WorldTides (worldtides.info, Brainware LLC, USA). It does not pass on your IP address; WorldTides only sees the relay's request.
- Recipient: the relay on navismare.com (hosted by Hostinger, see below) and WorldTides.
- Data: at the relay, your IP address (as on any web server). The relay caches WorldTides responses for up to 12 hours, per place and period and without any link to your IP address, so that the same request is not sent to WorldTides again. To limit abusive requests (at most 30 per minute) it keeps a keyed checksum of your IP address (HMAC with a secret key) and the minute of the last request in a temporary file. Without the key, which exists only on the server, the checksum cannot be traced back to an IP address; as a precaution we still treat it as personal data.
- Purpose: retrieving the tide prediction; protecting the service against abuse and uncontrolled costs.
- Legal basis: Art. 6(1)(b) GDPR (the request) and Art. 6(1)(f) GDPR (legitimate interest in protecting the service against abuse). You may object to processing under point (f) (section 9).
- Retention: the file with the checksum is deleted once it is 24 hours old; deletion takes place the next time the relay is called.
Hosting: navismare.com is hosted by Hostinger (Hostinger International Limited, 61 Lordou Vironos Str., 6023 Larnaca, Cyprus). Hostinger processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR (Hostinger's data processing addendum). The server on which navismare.com is located is in Frankfurt am Main, Germany. The request may first pass through Hostinger's content delivery network (CDN), whose nodes are located in several countries. Where Hostinger uses sub-processors outside the European Economic Area, the transfer is safeguarded by the European Commission's standard contractual clauses. As with any website, server log files arise when the relay is called; see the privacy policy of navismare.com (German).
Map and harbour search (Apple Maps)
The app displays the map with Apple's map framework (MapKit); the operating system loads map material from Apple Maps for this. If you look for a harbour or place using the search, the search term and the approximate map area are sent to Apple. For technical reasons Apple also receives your IP address. Apple's privacy policy applies. The legal basis is Art. 6(1)(b) GDPR.
5. Harbour reports to Navismare
In the harbour info you can add missing or changed harbour details under “Angaben ergänzen” (add details). With “In meiner App sichern” (save in my app) they stay on your device only. Only “An NAVISMARE senden” (send to NAVISMARE) opens a pre-filled email to in your mail app. It is only sent if you tap Send there. Sending is voluntary; the app works fully without it.
- Content of the report: the harbour (name, the app's identifier, position), your details (fuel station, shopping within walking distance, berths, maximum length, draught, position of the berth, harbour closed, note of up to 300 characters), the month and year you were there, the time of sending, the app version and a random identifier of the app installation. The details appear as text in the email and also in an attached file (JSON).
- About the identifier: it is generated randomly on your device and contains neither your name, nor the device name, nor any Apple device identifier. It is only used to count at most two reports per harbour and installation when reports are read in, and to recognise duplicates.
- What the email also contains: your sender address, the display name of your mail account and the usual technical headers of an email. Please do not write personal data (names, phone numbers) in the note.
- Purpose: we check the details and add correct harbour information to the next app update so that all users benefit. We only use your email address to ask about your report if needed – not for advertising or newsletters.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in correct harbour information for all users and in limiting abuse). You may object (section 9); we will then delete your report.
- Recipients: Navismare's mailbox is hosted by Hostinger (see section 4, Hosting), which processes the email on our behalf. Sending is handled by your own mail provider under its terms. The report is not passed on to third parties.
- What goes into the app: only the checked harbour details with the note “Skipper-Meldung, vor Ort MM/JJJJ, geprüft Navismare” (skipper report, on site MM/YYYY, checked by Navismare) – without name, email address or identifier.
- Retention: the email, its attachment and any working files created from it are deleted after the check, at the latest three months after receipt.
How many reports for a harbour have already been sent from your device is remembered by the app on your device only.
6. Purchase and ratings
You buy YachtPassage in the App Store. Purchase, payment and refunds are handled by Apple (in the European Economic Area, Apple Distribution International Ltd., Ireland); Apple's privacy policy applies. Navismare receives no payment data and no names of buyers, only aggregated sales reports from Apple. Occasionally the app asks for a rating via Apple's standard dialog; whether and how you rate runs entirely through Apple.
7. PDF/GPX export and sharing by you
From a planned route you can create a passage plan as PDF and a GPX file. These files are created locally on your device. Whether and with whom you share them (email, AirDrop, printing, other apps) is entirely your decision.
8. Retention and deletion
All app data remains on your device until you delete it in the app; you delete your own harbour details in the harbour info. Uninstalling the app removes the locally stored data. Navismare has no access to your app content and can neither view nor restore it.
Harbour reports are deleted after the check, at the latest three months after receipt (section 5). For the external services (section 4) the retention periods of the respective providers apply; the files with the checksum of your IP address at the weather relay and the tide relay are deleted once they are 24 hours old.
9. Your rights and complaints
You have the rights under Art. 15–21 GDPR: access, rectification, erasure, restriction of processing, data portability and objection. Where we base processing on legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. There is no automated decision-making, including profiling.
If you sent a harbour report, we can find it via your sender address or the harbour and the date of sending. The few data that arise at the weather and tide relays and at the host can only be assigned to a person by Navismare if you give us your IP address and the period (Art. 11 GDPR). Send requests to .
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for Navismare is the Portuguese Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1200-651 Lisboa, Portugal, www.cnpd.pt. You may also contact the supervisory authority of your place of residence or stay.
10. Languages and changes
This policy is available in German and English (selection above). We adapt it when new functions are added. The current version is always available at navismare.com/en/apps/yachtpassage/privacy.
Last updated: 14 November 2026