Privacy Policy

Effective October 1, 2026 · Last updated 2026-10-02

This explains what NautFix collects, who can see it, who helps us run it, and the choices you have. We don't sell your personal information and we don't show ads.

What we collect

• Account: your email address, first and last name, optional phone number, optional business name, and your time zone (so emails show times correctly). If you confirm your age at sign-up, we keep when you did.
• Boats: boat details, HIN, registration and Coast Guard documentation numbers, photos, engines, drives and equipment (with serial numbers, parts and specs, and dates on items like flares), engine hours, tanks, maintenance schedules, and service records, including photos and videos of work.
• Receipts and prices: receipt files and amounts you add.
• Trips and location: when you log a trip: times, where you left from and went, people on board, engine hours, tank levels, fuel, conditions, notes, photos and videos. If you start a trip with route tracking, or record one in NautPlot (Charts), your phone's GPS position, speed and heading are saved as the trip's track (a list of points with times). This happens only while the trip is recording on a screen that's open (we can't track you in the background, and we never track you outside a trip). If you leave "Start recording by itself when the boat moves" on in NautPlot, a trip starts by itself once your boat has clearly been moving at boat speed while the GPS is on in NautPlot; you can undo it, or turn this off. A trip nobody finishes is closed automatically after about 6 hours with no new points. A trip can be kept with no boat. Trips are private to the person who logged them (owners can also see trips their crew log on their boat); they never appear in history reports or share links. "Show where I am", Navigate and "Shops near me" use your location on your device to show your position, sort shops by distance or work out distance and bearing to go; that position isn't saved on our servers by those features alone. It is saved when you're recording a trip, and for shop staff on a field job when they use Navigate (see the next item).
• Technician work location (shop dispatch): this applies only to shop staff on a field job (a job at a boat's location). From the moment the technician taps Navigate until the job ends (it is finished or it is given to a different technician), their phone's position is shared with the shop's dispatch board. It is visible to that shop's board viewers (the shop's admins and managers, and service writers if the shop allows) and to the technician. It is never shown to boat owners. The points are deleted when the job ends or after 24 hours, whichever is first. The technician has an off switch for sharing on the job at any time. The travel minutes and approximate distance for the trip stay on the job; the position points do not. If a shop turns on "Use phone location to show Driving / On site" (off unless the shop's admin turns it on), a technician's phone also sends its position now and then while they are clocked in and have NautFix open (never while clocked out or on a break), so the same people can see a status such as Driving, On site or Away from the shop (with the name of a nearby business, if any); those points are deleted at clock-out, when the shop turns the setting off, or after 24 hours.
• Pins, routes and charts settings: places you drop, routes you draw or have planned for you (with the draft and height used), and your chart settings. Pins and routes are private to your account. Chart settings, your last map view and the boat you last picked are kept on the device.
• Float plans and their contacts: if you share a trip, we keep the plan (boat description you chose to show, people aboard, destination, route, notes, arrival and overdue times, and whether to show your live position) and the name, email address and/or U.S. mobile number of each contact you add, plus that you confirmed they agreed. Contacts you choose to save are remembered in your account so you can reuse them (you can delete them any time). We use contact details only to send that person notices about your float plans, never for marketing, and we don't share them. Contacts don't need an account and are not added to any list; a text or email to them says who added them and how to stop (reply STOP to a text). We never show contact details on the trip page.
• Crew, co-owners and ownership claims: the email address of anyone you invite as crew or co-owner, which boat, what permissions you gave, and when they accepted or left. If you ask to take over a boat, the proof you upload (photos or PDFs of documents), your note, and the decision.
• Receipt checks: when you add a receipt to unlock a shop's record, the file, the details read from it (shop, date, total, lines and prices) and the result of the check (see AI features below).
• First Mate chats: your messages and photos, First Mate's replies, and any pictures it showed you.
• Pro Help: your requests (topic, details, best times, phone number), messages, photos and videos with your pro, and when video calls started and ended.
• Messages and video calls with shops: messages, photos and videos between you and a shop about a boat, booking requests, and when video calls started and ended. Video calls are not recorded (Pro Help or shop).
• Shops: business details, logo, staff and their roles (including past staff), jobs, forms, findings, photos, recommendations and the work they log.
• Devices: if you turn on phone alerts, a delivery address for each device (from your browser's push service) so we can send alerts to it.
• Technical: basic logs needed to run and secure the service, including your IP address (used, for example, to limit how fast one address can call NautFix). For video calls we log connection steps and timings with your device type, not your name.

Who can see what

• You see your account, your boats, and the records described below.
• Shops you connect to a boat can see that boat's history and your name, and can message you about it. When shop history reports are available (they are not yet), approved shops can look up a boat's history report by HIN or registration: it shows work and ownership dates but never prices and never owners' names or contact details. Until then, shops can find a boat by HIN or registration only to log work on it or add it as a customer.
• Future owners: a boat's service history stays with the boat. After a sale, the new owner can see records you entered only through a history report (when available), and never your name or contact details. Your trips, receipts and conversations don't go with the boat.
• People you share with: if you create a share link for a buyer, anyone with the link can see that report (without prices, names, contact details or trip details) until it expires or you turn it off.
• Receipts and amounts are visible only to the boat's current owners and NautFix admins, never to shops or in history reports. If you allow it, amounts may be used in anonymized, aggregated price information that can't identify you.
• Co-owners are owners: they see what current owners see on that boat, from the day they join (not earlier owners' records). Crew see only what the owner allowed for that boat (for example its hours, tanks, trips they log, and what's due); they never see receipts, prices or shop conversations. Owners can see what crew log on their boat during their ownership. Crew who are 13 to 17 are treated like any other crew.
• Float plan contacts (and anyone they give the link to) can open the trip page from their link without signing in. It shows the details you chose, and your boat's last known position only if you turned that on and the trip is recording. It never shows contact lists, your email or phone, other trips, or where the trip started. The link stops working when you stop sharing, 24 hours after you arrive, or 7 days after the overdue time.
• Pros helping you through Pro Help see your name, email, phone number, the boat you chose (with its engines and hours), and your messages and photos for that call.
• NautFix admins can see information needed to run, support and secure the service.

Shop directory

The public shop directory lists marine businesses (name, address, phone, website and location) from open data sources, credited on those pages. These are business details, not personal accounts. We may also hold a business email address from that data; we never show it and use it only to invite the business to claim its listing. A business that wants its listing changed or removed can tap "Tell us" on the listing or use the Support page.

AI features

NautFix uses Anthropic's Claude models for:

• First Mate: your messages, recent photos, and the account and boat information First Mate reads to answer you (with the same access you have). It may search the web on your behalf. Short chat titles are also written by AI.
• Reading invoices and receipts: the file you choose, to fill in the lines of a service record.
• Receipt check: when you add a receipt to a shop's record you can't see yet, the receipt file is read by AI and compared with that job's date, shop and work. The result (passed, failed with reasons, or sent for review) is saved with the receipt. If it can't be confirmed, a NautFix admin may look at the file and the job to decide. Only the boat's current owners and NautFix admins see receipts and their prices.
• Shop job summaries: when a shop asks for a draft, the job's form results, work done, engine hours and recommendations (never the tech's private notes or prices).

AI answers can be wrong; check important things against your manual or a mechanic.

Companies that process data for us

• Supabase: database, sign-in, live updates and file storage.
• Cloudflare: hosting the website and its servers, security, error and usage logs, and running video calls (Cloudflare RealtimeKit).
• Anthropic: the AI described above.
• Resend: sending emails. Migadu: our support mailbox, when you email or reply to us.
• Twilio: text messages and automated phone calls, only for people who turn them on.
• Your browser's push service (for example Apple, Google or Mozilla): delivering phone alerts you turned on.
• Maps, charts and places: base maps come from OpenFreeMap, sea markers from OpenSeaMap, and street-address lookups from Photon (OpenStreetMap data). Your device asks them for the map area you're looking at or the address text you type; we don't send them your name or email, but they can see your device's IP address like any website. Tide and current predictions, depth shading and some charts come from NOAA (and Canadian charts from the Canadian Hydrographic Service) the same way, from your device.
• NOAA chart tiles through our servers: U.S. chart pictures are requested from our own Worker (Cloudflare), which gets them from NOAA and keeps a copy for a few days so charts load faster. The request contains only the tile (a map square and style), not your account. Cloudflare sees your IP address, which we use to limit how fast one address can ask for tiles; we don't store it in our database. Route-check data (the chart-based map tiles used to check routes) is also served from our Worker and kept on your device.
• U.S. Coast Guard: when you add a boat, we may look up the HIN or documentation number you entered in the Coast Guard's public vessel records to fill in its details. Nothing about you is sent.
• Stripe (when payments launch): processing payments. We never see or store full card numbers.

They process data only to provide their service to NautFix.

Plans and payments

NautFix has a free plan. Paid plans (NautFix Plus for boat owners, NautFix Pro for shops) are coming. We keep which plan you or your shop is on and which features it includes. When payments launch, Stripe will process them and we'll keep payment records (amount, date, status) as the law requires.

Emails

We email you about your account and activity: sign-in codes, Pro Help and shop updates and messages, service reports, maintenance reminders, boat transfers, shop requests and invites. You choose which of these reach you by email in Alert settings (sign-in emails always go). We don't send marketing emails without your permission. If someone on NautFix invites you or sends you a boat and you don't have an account, we email you about that only; reply to tell us if you don't want these.

Phone alerts

Phone alerts (web push) are off until you allow them on a device. We keep a delivery address for each device you turn them on for, and remove it when the device stops accepting alerts. Your browser's or phone's settings can turn them off at any time.

Text messages and calls

Text alerts are optional and off until you turn them on in your account and reply YES to our confirmation text. We then text you about your own boats and account: when your pro or shop is calling, new messages, service reports and similar updates. Message frequency varies; message and data rates may apply. Reply STOP to any text to stop them, or HELP for help. We don't send marketing texts, and we don't sell or share your phone number or your text opt-in with anyone for their marketing. Twilio sends the texts for us.

If you allow calls (in Notifications, after confirming your number with a code we read to you), we may call that number with an automated, recorded message when your pro or shop is ready for a video call and you haven't answered within a minute. Press 9 on any call to stop them. Calls are optional and you can turn them off any time in Notifications. You choose which updates reach you by phone alert, email, text or call in Alert settings.

Cookies, storage and offline copies

We keep you signed in and remember a few preferences (like whether you last used First Mate or Pro Help) in your browser. We don't use advertising or third-party tracking cookies.

NautFix also keeps on your device: your chart settings and last map view, the boat you last picked for trips, a trip in progress, your saved search places, which tips you've seen, and a few other preferences. None of this is sent to advertisers.

So NautFix works without a signal, the app keeps a copy of what you can see (your boats, records, jobs and messages, and their photos, your pins and routes, trips and chart or route-check data you've used) on your phone or computer, plus changes you made offline until they're sent, and trip points recorded while you had no signal. This copy stays on that device and is protected only by the device itself. Tapping Sign out deletes it from that device; if you use a shared computer, sign out when you're done.

Error reports

When something breaks (on our servers or in your browser), we send ourselves a short error report: the page or address (without the parts that identify records), the error message and where in our code it happened. It doesn't include your name, email or what you typed.

Keeping and deleting data

We keep your information while your account is open.

Pausing your account

Under Account → Pause or delete my account you can pause your account instead of deleting it. While it's paused we send you no notices on any channel (phone alerts, email, texts or calls), and shops' follow-ups, review requests and seasonal notes skip you. Nothing is deleted or changed; you can still sign in, and tapping Reactivate turns everything back on.

Deleting your account

You can delete your account yourself in the same place. First we ask you to settle anything other people depend on (for example, a shop that would have no admin, a boat that would have no owner, a transfer or Pro Help call that isn't finished), then to confirm it's you with a fresh sign-in. Your account is deleted 7 days later; until then you can cancel on the Home or Account page. We email you when you ask and when it's done. If you can't sign in, ask through the Support page (choose "Delete my account").

What we delete (what identifies you): your name, email, phone numbers, business name and sign-in; your notification choices and phone alert, text and call settings; the contacts you saved and the people you told about a trip (float-plan contacts); your First Mate chat messages; photos from your trips, your First Mate chats and messages you sent to a shop or pro; proof you sent with an ownership claim; and copies made for buyer share links.

What we keep, without your name: we keep your boat's records, trips including routes, and anonymous price data, without your name. In detail: boats are never deleted; your ownership ends on the day of deletion and each boat keeps its history. Service records and engine hours you entered stay with the boat or engine, shown as entered by an owner. Trips you logged stay with the boat, including their GPS tracks, distances, engine hours, fuel and conditions; a later owner sees them as a "Previous owner's trip" only when the boat's earlier history is open to them (for example with a history report, when available). Receipt amounts and per-line prices stay attached to the service record as anonymous price data. We keep boat and service photos (the boat's photo and photos on service records). Receipts you added stay as proof of the work, with your personal details (name, address, phone, email, card digits, signature, account numbers) blacked out; if we can't do that safely, the receipt image is deleted. To black them out, an AI model reads each receipt only to say where those details are; our own software then covers those areas, and the result is visible only to NautFix staff. Pins, routes and favourites you saved stay only as unnamed position data nobody can see. Float plans stay without the people you told. Work a shop did and messages you exchanged with a shop or a Pro Help pro stay with them, shown as from "Former customer". If you signed or typed your name on a shop's form (for example to approve work), that signature stays with the shop's record of the job. If you worked at a shop, the work you did stays with the shop, and its staff history keeps your role and dates without your name or email. These records are tied only to an internal number that is no longer linked to you once your account is deleted. We keep counts of how many First Mate answers were used, with no message text.

What we keep for legal reasons: if you texted STOP or turned off recorded calls, we keep a one-way scrambled form (hash) of that phone number so we never text or call it again; if you asked us not to email an address, we keep that address on our do-not-email list; and we keep a record that an account was deleted on a given date, with a hash of its email (not the email itself), so we can confirm it if you ask. Copies in our backups are overwritten on their normal schedule. We may keep limited information when the law requires it or to prevent fraud.

Security

Access rules are enforced by our database for every request, files are private unless shown to you through short-lived links, and connections are encrypted. No system is perfect; tell us through the Support page if you see a problem.

Age and children

NautFix accounts are for people 18 or older, except crew: a boat's owner can add someone aged 13 to 17 as crew, with their parent's or guardian's permission, and the owner is responsible for that use. Crew accounts hold only what any account needs (name, email) plus the hours, trips and records they log on the boats they crew; we don't ask anyone's age or birth date. We don't knowingly collect personal information from children under 13. If we learn that we have, we'll delete it. If you think a child has given us information, tell us through the Support page.

Changes

If we make significant changes, we'll let you know by email or in the app before they take effect.

Contact

Questions or requests about your data: use the Support page.