Privacy Policy

Waveshare is a marketplace where boat captains offer empty seats on trips they are already making, and passengers book a seat nearby. This policy explains what personal data we collect, why, and your rights over it. It is written for the EU General Data Protection Regulation (GDPR).

Controller: [Legal entity / name], [address], Croatia. Contact for privacy requests: [email protected].

1. What we collect

• Account: your name, email address, and phone number.
• Profile: an optional profile photo you upload.
• Boats & trips: details captains add (boat name, type, capacity; trip origin, destination, time, price).
• Bookings & reviews: the trips you book, and ratings/reviews you and your counterparties leave.
• Location: map locations you choose when searching or posting a trip. We use your device's map only while the app is open.
• Technical: minimal data needed to operate the service (e.g. authentication tokens).

We do not collect payment information — trips are paid in cash on board.

2. How we use it

• To run the marketplace: search, matching, booking, and managing trips.
• To let a captain and passenger coordinate after a booking is confirmed — at that point each side sees the other's phone number so they can arrange the pickup (e.g. via a call or WhatsApp you initiate).
• For safety and trust: mutual reviews, and suspending accounts after repeated no-shows.

Legal bases: performing our contract with you (providing the service), and our legitimate interest in a safe, trustworthy marketplace.

3. Who we share it with

• Your trip counterparty: your name, rating, and — only after a confirmed booking — your phone number.
• Map & location services: Google Maps (map display) and OpenStreetMap/Nominatim (place lookup) process the coordinates you interact with.
• Hosting: our servers and database run on infrastructure in the EU.

We do not sell your personal data.

4. Retention & deletion

We keep your data while your account is active. You can request deletion at any time. When an account is deleted we scrub your personal details (name, email, phone, photo); trip, booking, and review records may be retained in anonymised form to keep other users' history intact and for legal/safety reasons.

5. Your rights

Under the GDPR you can request access, correction, deletion, restriction, objection, and portability of your data. To exercise any of these, email [email protected]. You may also complain to your data protection authority (in Croatia, AZOP).

6. Security

Data is encrypted in transit (HTTPS), access is restricted, and phone numbers are shown only to a confirmed counterparty.

7. Children

Waveshare is not intended for anyone under 16. We do not knowingly collect data from children.

8. Changes

We may update this policy; we'll revise the date above and, for material changes, notify you in the app.