Privacy Policy

Who we are

The controller of your data is Spearo, which runs the site spearo.app from Dubai, UAE. We offer the service to visitors in the European Union, so we handle personal data under the GDPR and you keep every right it gives you, wherever we are based. For any privacy question, or to exercise your rights, write to privacy@spearo.app; we answer within one month, the deadline the GDPR sets.

What data we collect

We collect the minimum needed to run the waitlist and understand how the site is used:

• Waitlist — your email address and, if you choose to add them, your city of interest, the alert types, the channel (WhatsApp or Telegram) and your phone number. Email is required; the rest is optional.
• Saved-spot alerts — when you ask us to notify you about a point on the map, we store your email address, the spot's coordinates, an optional short label you gave it, its point class (a calibrated spot or open water), the city its forecast is scored against, and your language. Nothing else about the spot is kept.
• Technical analytics (first-party) — page visits, device and browser type, language, the referring page, your IP address and an approximate location derived from the IP (country/region).
• Cookies and advertising identifiers — set by Google and Meta to measure visits and how well our advertising performs (see “Cookies” below).
• Hashed email sent to Meta — when you join the waitlist, your email is turned into an irreversible code (a SHA-256 hash) and sent from our server to Meta so your sign-up can be matched to advertising. We also send your IP, user-agent and Meta cookies (_fbp / _fbc).

We do not collect special categories of data (health, etc.) and we do not profile you to make automated decisions with legal effects.

The Spearo mobile apps (iOS and Android)

The iOS and Android forecast apps work without an account or sign-up. They talk to our server only to compute the forecast: the coordinates of the place you pick (a city, a point on the map or a saved point) travel in the request and end up in the server's usual technical logs.

• Anonymous in-app analytics (optional) — which screens are used, the chosen city, the device model, the system language, the timezone, the app version and an anonymous install identifier. No name, no email, no account — we cannot link this data to your identity.
• Coordinates of the spots you save — with analytics on, the app also sends the coordinates of your saved map points, rounded to about 100 m, so we can see which coasts the app is really used on and improve the forecast there. The name you give a point is never sent. Delete a point in the app and it disappears on our side too; to delete everything, write to privacy@spearo.app.
• Device location — the app may ask once for your approximate location, only to pick the nearest spot. It is used in that moment and is neither stored nor sent to analytics.

Feedback — separate from analytics. If you use the in-app form, we receive: the text you write and the kind of report (bug or idea), the platform and app version, the language and the screen you write from, the install identifier and an identifier of the submission attempt, the session identifier, the device model and, if you rate the app with stars, that rating; plus the technical data of the request: IP address, the approximate location derived from it — country, region, city and approximate coordinates — and the internet provider, as well as the user agent. If you leave an email, we use it only to reply to your message; in that case only these fields are handed to our email provider (Resend), solely to deliver the notification to us: the reply address, the message text, the kind, the platform and the app version. Nothing else — no IP, no location, no user agent, no identifiers. We share it with no other third party. All of this is sent only when you tap «Send» yourself — regardless of your analytics setting, because it is your own message to us.

You can switch analytics off at any time in the app (Settings → Privacy). With analytics off, the app sends none of the data in the list above (the feedback you send yourself is not part of that list). There is no advertising and no Google or Meta trackers inside the app — the measurement described above goes only to our own server.

Why we use the data and on what legal basis

• To run the waitlist and to send green-window spot alerts — a daily check of the spots you saved that emails you when a good (green) diving window opens — on the basis of your consent, which you give by submitting your email. You can withdraw it at any time.
• To measure and improve the site (first-party technical analytics) and to measure how well our Google and Meta advertising performs — on the basis of our legitimate interest in maintaining and promoting a free service, proportionately.
• To keep the site secure and working (stopping form abuse and spam) — also on the basis of legitimate interest.
• To handle the feedback you send us and to reply to it when you leave an email — on the basis of our legitimate interest in supporting the people who use the service and in answering the request you made to us.

Who has access (processors and third parties)

We do not sell your data. We share it only with the providers that make the site possible:

• Google — Google tag / Google Ads, to measure visits and advertising conversions.
• Meta Platforms (Facebook/Instagram) — the Meta Pixel in the browser and the Conversions API on the server, to measure and optimise advertising, including the hashed email described above.
• Resend — our email delivery provider. It sends the spot-alert emails to your address on our behalf and delivers to us the notification about your feedback when you leave a reply address. That notification carries only: the reply address, the message text, the kind, the platform and the app version. We do not hand it the IP address, the location, the user agent or any identifiers.
• Our site hosting and infrastructure provider, which processes requests on our behalf.

International transfers

We run spearo.app from Dubai, in the United Arab Emirates: the data described here reaches our servers and our team there. The UAE is not covered by a European Commission adequacy decision, so we hold that data to the standard the GDPR requires ourselves — same purposes, same rights, same security measures.

Google and Meta are US-headquartered companies and may process data outside the European Economic Area. Those transfers rely on the legal mechanisms these providers make available (for example, the European Commission’s Standard Contractual Clauses and the relevant adequacy frameworks).

How long we keep it

We keep your waitlist email and the associated data until you withdraw consent or ask us to delete it — just write to privacy@spearo.app. Technical analytics logs are kept only as long as needed to track the site’s usage and security. Data processed by Google and Meta follows those providers’ own retention policies.

Your rights

Under the GDPR, you can at any time:

• Access the data we hold about you and request a copy.
• Rectify data that is inaccurate or out of date.
• Erase your data (the “right to be forgotten”).
• Object to processing based on legitimate interest and ask us to restrict processing.
• Withdraw consent at any time, without affecting the lawfulness of processing already carried out.
• Request portability of the data you provided to us.

To exercise any of these rights, write to privacy@spearo.app: because we are established outside the European Union, your request comes straight to us rather than through a local office. You also have the right to lodge a complaint with the data-protection supervisory authority of the country where you live — for example the CNIL in France (cnil.fr) or the CNPD in Portugal (cnpd.pt).

How to unsubscribe

Every spot-alert email has a one-click unsubscribe link (and a List-Unsubscribe header) that turns off all your window alerts at once. You can also ask to be removed from the list at any time by writing to privacy@spearo.app.

Cookies and measurement

We use cookies and similar technologies for two purposes: our own first-party technical analytics and advertising measurement through Google and Meta. We do not use a cookie banner; you can control and delete cookies in your browser settings and limit personalised advertising in your Google and Meta settings. Blocking these cookies does not affect the forecast calculation.

Changes to this policy

If we change this policy, we update the “last updated” date at the top of this page. Material changes will be signalled appropriately.

Contact

For any privacy question, or to exercise your rights, contact Spearo at privacy@spearo.app.