Privacy Policy
This policy explains how Cafyra GmbH handles personal data on this website (cafyra.de) and in the WayMate app for iPhone and Android.
Who is responsible
Cafyra GmbH
Bei den Rauhen Bergen 18, 22927 Grosshansdorf, Germany
Email: info@cafyra.de
For questions about data protection, write to carsten@cafyra.de.
This website
Hosting and server logs
The website is hosted by Vercel. Its pages are delivered through Vercel's global network; only the handler for the tester sign-up form runs in Vercel's Frankfurt region.
When you open a page, Vercel processes server logs: your IP address, the time, the address of the page and your browser's user agent. We need these to deliver the site and keep it secure. The legal basis is our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
For WayMate's QR and shared links, the address of the page includes the invite or profile code, so Vercel's server logs record that code too. The logs are kept only to run the website and keep it secure.
No cookies, no analytics
The website sets no cookies, uses no analytics or tracking and loads nothing from other companies. Fonts and images come from cafyra.de itself.
Joining the test
If you sign up to test WayMate, we store your email address, the platform you chose (iPhone or Android) and when you agreed. We use them only to send you an invitation to the test and messages about the test. To send the invitation, we give your email address to Apple (TestFlight) or Google (Google Play testing).
Sign-ups are stored with Supabase in the EU (Frankfurt). We delete them after the test phase, or earlier if you ask. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by emailing info@cafyra.de.
The WayMate app
You need to be 16 or older to use WayMate.
Your account
You sign in with Apple or Google. We receive your name, your email address and a sign-in ID from them. WayMate never sees your password and doesn't ask for a phone number. Other people never see your email address.
Profile, boat and what you share
We store your profile and boat details, the photos, posts, comments and likes you add, your chat messages and the photos you send in them, and the groups you belong to. Before a photo is uploaded, the app removes its GPS location data on your phone.
Your position
WayMate stores only your latest position, and only while you share your location. It is shown only to the people your visibility setting allows: everyone, members of the groups you pick, or nobody. Positions are deleted after 24 hours. WayMate keeps no route history, and we never sell location data.
Other data
We also store your visibility settings, the push notification token of your device, feedback you send us, and the reports and blocks you make.
Why we use this data
We use app data to provide WayMate to you under our Terms of Use (Art. 6(1)(b) GDPR). We review reports and blocks to keep the community safe, which is part of the service.
How long we keep it
Positions are deleted after 24 hours. Everything else stays until you delete it or delete your account. What happens when you delete your account is described on Delete your account.
Service providers
These companies process data for us:
- Supabase: the app's database and the tester sign-up list, in the EU (Frankfurt).
- Vercel: hosting for this website, as described above.
- Expo: app updates and delivery of push notifications.
- Apple and Google: sign-in, app distribution (App Store, TestFlight and Google Play) and push notifications.
Map tiles
The app loads its map from OpenFreeMap (the base map) and its sea marks from OpenSeaMap. Your phone requests these map tiles directly, so these services see your IP address and which map area is being loaded. WayMate sends them no account or position data.
Transfers outside the EU
Some of our service providers are companies based in the United States (Vercel, Supabase, Expo, Apple and Google), even where data is stored in the EU. Where personal data may be transferred outside the EU or EEA, we rely on the EU-US Data Privacy Framework for certified providers, or on the European Commission's Standard Contractual Clauses.
Your rights
You have the right to:
- get a copy of the data we hold about you;
- have wrong data corrected;
- have your data deleted;
- have the use of your data restricted;
- receive your data in a portable format, using "Download my data" in the app;
- object to processing based on our legitimate interest;
- withdraw your consent at any time, without affecting processing before the withdrawal.
To use these rights, email info@cafyra.de.
You can also complain to a data protection supervisory authority. The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD).
Deleting your account
You can delete your account in the app or by email. See Delete your account.
Changes to this policy
We update this policy when WayMate or this website changes. The date at the top shows the latest version.