Privacy Policy

This Privacy Policy explains how GetSuppy Ltd (“GetSuppy”, “we”, “us”, or “our”) collects, uses, and shares personal information when you use getsuppy.com, the GetSuppy mobile app, and related services (the “Services”).

GetSuppy Ltd is the data controller for personal information processed under this Policy. Our postal address is GetSuppy, Fareham Innovation Centre, Merlin House, 4 Meteor Way, Lee-on-the-Solent, PO13 9FU, United Kingdom. Contact: admin@getsuppy.com.

Please also read our Terms of Service.

Account information. Email address, username, and authentication credentials (passwords are handled by our auth provider and are not stored by us in plain text).

Profile information. Optional details you add, such as avatar, bio, and board details (make, model, type, length).

Adventure and activity data. Titles, dates, water type, distance, duration, notes, public/private setting, solo/group setting, routes (including GPS tracks and related diagnostics such as timestamps and accuracy where recorded), and GPX uploads.

Photos. Images you upload, and location metadata if present in the file (for example EXIF GPS) when we extract it for map pins.

Social information. Follows, likes, comments, and group paddle participant tags (including pending/confirmed status).

Tester feedback. If you use the Tester Log, answers and progress you submit in that survey.

Technical information. Basic logs and device/browser information generated when you use the Services (for example IP address, approximate location derived by hosts, and error logs), as processed by our infrastructure providers.

We do not currently operate advertising networks, payment processing, or health-sensor integrations (such as heart rate).

We use personal information to:

• create and manage your account;
• provide journaling, mapping, discovery, and social features;
• show public content according to your settings;
• secure the Services and prevent abuse;
• respond to support requests and product feedback;
• improve and develop the Services; and
• comply with law and enforce our Terms.

Where UK GDPR applies, we rely on:

• Contract — to provide the Services you request;
• Legitimate interests — such as securing the Services, understanding usage at a high level, and improving product quality, balanced against your rights;
• Consent — where required, for example device permissions for precise location or camera/photo access; and
• Legal obligation — where we must retain or disclose information to comply with law.

We share personal information with service providers who process it on our behalf, including:

• Supabase (authentication, database, file storage);
• Vercel (website hosting);
• Expo / EAS (mobile builds and related infrastructure); and
• map providers (map tiles and, on some devices, Apple Maps or Google Maps components).

Other users may see information you make public (for example public adventures, profile details you publish, likes, and comments).

We do not sell your personal information. We do not use a third-party advertising network in the Services today.

We may disclose information if required by law or to protect rights, safety, or the integrity of the Services.

We keep personal information while your account is active and as needed to provide the Services. When you ask us to delete your account (or when we terminate it), we delete or anonymise associated personal data from our systems, subject to backups and any legal retention needs.

Account deletion is currently handled on request: email admin@getsuppy.com from your account email. We will verify the request, remove account data (including cascading adventure-related records where applicable), and clear associated storage files where feasible.

Our providers may process data in the United Kingdom, European Economic Area, United States, or other countries. Where required, we rely on appropriate safeguards offered by those providers (such as standard contractual clauses) for transfers of personal data outside the UK/EEA.

Depending on applicable law (including UK GDPR), you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. You may also withdraw consent where processing is consent-based (without affecting prior lawful processing).

To exercise these rights, contact admin@getsuppy.com. You can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

On the website we use essential cookies and similar storage needed for authentication and security (for example session cookies). We do not currently run a separate marketing analytics or advertising cookie stack. You can control cookies through your browser settings; disabling essential cookies may prevent sign-in from working.

We may update this Privacy Policy from time to time. We will post the revised Policy on this page and update the effective date. Where changes are material, we may provide additional notice.

For privacy questions or requests: admin@getsuppy.com.

GetSuppy Ltd, Fareham Innovation Centre, Merlin House, 4 Meteor Way, Lee-on-the-Solent, PO13 9FU, United Kingdom.