Privacy Policy

Who we are

The controller of your data is Spearo, which operates the site spearo.app. For any privacy question, or to exercise your rights, contact us at privacy@spearo.app.

What data we collect

We collect the minimum needed to run the waitlist and understand how the site is used:

• Waitlist — your email address and, if you choose to add them, your city of interest, the alert types, the channel (WhatsApp or Telegram) and your phone number. Email is required; the rest is optional.
• Saved-spot alerts — when you ask us to notify you about a point on the map, we store your email address, the spot's coordinates, an optional short label you gave it, its point class (a calibrated spot or open water), the city its forecast is scored against, and your language. Nothing else about the spot is kept.
• Technical analytics (first-party) — page visits, device and browser type, language, the referring page, your IP address and an approximate location derived from the IP (country/region).
• Cookies and advertising identifiers — set by Google and Meta to measure visits and how well our advertising performs (see “Cookies” below).
• Hashed email sent to Meta — when you join the waitlist, your email is turned into an irreversible code (a SHA-256 hash) and sent from our server to Meta so your sign-up can be matched to advertising. We also send your IP, user-agent and Meta cookies (_fbp / _fbc).

We do not collect special categories of data (health, etc.) and we do not profile you to make automated decisions with legal effects.

The Spearo Android app

The Android forecast app works without an account or sign-up. It talks to our server only to compute the forecast: the coordinates of the place you pick (a city, a point on the map or a saved point) travel in the request and end up in the server's usual technical logs.

• Anonymous in-app analytics (optional) — which screens are used, the chosen city, the device model, the system language, the timezone, the app version and an anonymous install identifier. No name, no email, no account — we cannot link this data to your identity.
• Coordinates of the spots you save — with analytics on, the app also sends the coordinates of your saved map points, rounded to about 100 m, so we can see which coasts the app is really used on and improve the forecast there. The name you give a point is never sent. Delete a point in the app and it disappears on our side too; to delete everything, write to privacy@spearo.app.
• Device location — the app may ask once for your approximate location, only to pick the nearest spot. It is used in that moment and is neither stored nor sent to analytics.
• Feedback — if you use the in-app form, we receive the text you write, the app version and the device model.

You can switch analytics off at any time in the app (Settings → Privacy). With analytics off, the app sends none of this data. There is no advertising and no Google or Meta trackers inside the app — the measurement described above goes only to our own server.

Why we use the data and on what legal basis

• To run the waitlist and to send green-window spot alerts — a daily check of the spots you saved that emails you when a good (green) diving window opens — on the basis of your consent, which you give by submitting your email. You can withdraw it at any time.
• To measure and improve the site (first-party technical analytics) and to measure how well our Google and Meta advertising performs — on the basis of our legitimate interest in maintaining and promoting a free service, proportionately.
• To keep the site secure and working (stopping form abuse and spam) — also on the basis of legitimate interest.

Who has access (processors and third parties)

We do not sell your data. We share it only with the providers that make the site possible:

• Google — Google tag / Google Ads, to measure visits and advertising conversions.
• Meta Platforms (Facebook/Instagram) — the Meta Pixel in the browser and the Conversions API on the server, to measure and optimise advertising, including the hashed email described above.
• Resend — our email delivery provider, which sends the spot-alert emails to your address on our behalf.
• Our site hosting and infrastructure provider, which processes requests on our behalf.

International transfers

Google and Meta are US-headquartered companies and may process data outside the European Economic Area. Those transfers rely on the legal mechanisms these providers make available (for example, the European Commission’s Standard Contractual Clauses and the relevant adequacy frameworks).

How long we keep it

We keep your waitlist email and the associated data until you withdraw consent or ask us to delete it — just write to privacy@spearo.app. Technical analytics logs are kept only as long as needed to track the site’s usage and security. Data processed by Google and Meta follows those providers’ own retention policies.

Your rights

Under the GDPR, you can at any time:

• Access the data we hold about you and request a copy.
• Rectify data that is inaccurate or out of date.
• Erase your data (the “right to be forgotten”).
• Object to processing based on legitimate interest and ask us to restrict processing.
• Withdraw consent at any time, without affecting the lawfulness of processing already carried out.
• Request portability of the data you provided to us.

To exercise any of these rights, write to privacy@spearo.app. You also have the right to lodge a complaint with a supervisory authority: in Portugal, the Comissão Nacional de Proteção de Dados (CNPD, cnpd.pt).

How to unsubscribe

Every spot-alert email has a one-click unsubscribe link (and a List-Unsubscribe header) that turns off all your window alerts at once. You can also ask to be removed from the list at any time by writing to privacy@spearo.app.

Cookies and measurement

We use cookies and similar technologies for two purposes: our own first-party technical analytics and advertising measurement through Google and Meta. We do not use a cookie banner; you can control and delete cookies in your browser settings and limit personalised advertising in your Google and Meta settings. Blocking these cookies does not affect the forecast calculation.

Changes to this policy

If we change this policy, we update the “last updated” date at the top of this page. Material changes will be signalled appropriately.

Contact

For any privacy question, or to exercise your rights, contact Spearo at privacy@spearo.app.