Tillr Marine ("Tillr", "we", "us", or "our") provides a commercial maritime crew rostering, vessel operations, and sea-time logbook platform via our website at https://tillrmarine.com and the Tillr mobile application for Android and iOS (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use and protect it, and how you can exercise your data rights—including complete account and company data deletion.

1. Information We Collect

A. Account & Crew Profile Information

When you sign up, create a fleet workspace, or accept a team invitation, we collect:

• Identity & Contact Data: Full name, email address, mobile phone number, and authentication credentials (via Email/Password, Google Sign-In, or Facebook Login).
• Maritime Qualifications & Role Data: Crew rank/capacity (e.g., Master, Engineer, Deckhand, General Crew), access role (Owner, Admin, Crew), and maritime certificates/tickets and their expiry dates entered into the directory.

B. Operational, Roster & Sea-Time Data

• Shift & Vessel Records: Shift assignments, accept/decline responses, shift swap requests, open shift claims, time-away dates, Master sign-off timestamps, logged shift events, and AMSA qualifying sea-service exports.
• Vessel Handover & Defect Notes: Operational statuses, handover notes, and maintenance/defect logs recorded by crew and administrators.

C. Optional Device Permissions (Location & Push Notifications)

• Location (GPS) Data: When you use the Conditions tab and tap "GPS", the app requests your device's approximate or precise geographic coordinates solely to fetch live marine weather, wind, swell, and tide forecasts for your current port or coastal position. We do not track your background location, and we do not sell or share your GPS coordinates with third parties for advertising.
• Push Notification Tokens: If you enable shift notifications, we store a Firebase Cloud Messaging (FCM) device token on your crew profile so we can deliver shift assignments, reminders, swap requests, and urgent vessel defect alerts.

2. How We Use Your Information

We use the collected information strictly to operate and improve the Service:

• Synchronizing real-time crew rosters, vessel assignments, and shift confirmations across your company's authorized devices.
• Delivering real-time push notifications for new shifts, schedule changes, swap requests, and urgent defects.
• Generating private iCalendar (`.ics`) live calendar feeds and AMSA Qualifying Sea Service (Form 426 / Marine Order 505) PDF and CSV logbook statements.
• Providing live marine weather, wind, wave, and tide forecasts via Open-Meteo marine APIs.
• Enforcing role-based security rules so each company's roster and crew directory remain strictly isolated to members of that company.

3. Data Sharing, Storage & Security

• No Sale of Personal Data & No Ads: Tillr never sells your personal information, phone number, email address, or maritime records to third parties or data brokers, and the Service contains no third-party advertising SDKs.
• Company Isolation: Your profile, phone number, shifts, and tickets are visible only to authenticated members of your specific maritime company on Tillr.
• Support Access Control: Company data is private by default. Tillr support cannot view your company's operational roster unless the Company Owner explicitly enables temporary 24-hour support access in the Admin tab.
• Infrastructure & Encryption: Data is hosted on Google Cloud / Firebase (with primary cloud functions operating in australia-southeast1) and encrypted in transit via HTTPS/TLS and at rest.

4. Data Retention & Account Deletion (Google Play & iOS Compliance)

You have full control over your personal data and can permanently delete your account at any time directly inside the app or web app:

• Crew & Admin Self-Service Deletion: Open Tillr, go to Directory → Settings → Account → Delete my account. Confirming this action immediately and permanently deletes your Firebase Authentication login, removes your member profile and push tokens from Firestore, and revokes your access.
• Company Owner Deletion & JSON Backup: Company Owners can export a complete JSON backup of their company data at any time and can permanently delete the entire company workspace (including all jobs, vessels, invites, change logs, and accounts) via Admin → Owner & company data → Delete company & account.
• Deletion via Email Request: If you no longer have the app installed and wish to request account deletion via the web, email support@tillrmarine.com from your registered email address and we will process the deletion within 7 days.
• Automatic Log Expiry: Operational change-history logs (`changelog`) automatically expire and are purged after 90 days.

5. Third-Party Subprocessors

We rely on trusted infrastructure providers to deliver the Service:

• Google Firebase (Google LLC): Authentication, Cloud Firestore database, Cloud Functions, Hosting, and Cloud Messaging (Push Notifications).
• Stripe: Web-based subscription billing and invoicing for fleet owners on tillrmarine.com (payment card details are processed directly by Stripe and are never stored on Tillr servers).
• Open-Meteo & BigDataCloud: Anonymous latitude/longitude weather, marine swell, tide forecast, and port reverse-geocoding lookups.

6. Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. The updated version will always be posted at https://tillrmarine.com/privacy with the revised effective date.

7. Contact Us

If you have any questions about this Privacy Policy, data privacy, or account deletion, please contact us at:

• Email: support@tillrmarine.com
• Website: https://tillrmarine.com