Privacy policy

Who we are

Berthly (“we”, “us”) is the vessel-management service at berthly.app, operated by Peter Bowers-Davis in the United Kingdom. We are the data controller for the personal information described here. Contact us about privacy at hello@berthly.app.

What we collect

• Account details — your email address, an optional name, and (if you set one) a password, which is stored only as a secure hash we cannot read.
• What you add to Berthly — vessel details and photos, documents you upload (such as insurance certificates and surveys), reminders, equipment, maintenance records and receipts, running costs, and trip logs.
• Names and emails of others — crew emails you invite, and crew or guest names you record on trips and briefings. Please make sure those people are happy to be recorded before you add them.
• Technical information — the security and server logs ordinarily created when you use a web service (such as IP address and browser type), used to keep the service secure.

Why we use it

• To run Berthly for you (performance of our contract) — storing your records, sharing vessels with crew you choose, and generating your trip records.
• To send service emails (contract and legitimate interest) — sign-in links, account emails, and the safety and renewal reminders the product exists to send. You can stop reminders by removing the underlying dates or deleting your account.
• To keep the service secure (legitimate interest).

We do not sell your data, we do not show advertising, and we will not send you marketing email without your consent.

Where your data lives

Your data is stored with Supabase in Frankfurt, Germany (EU), encrypted in transit and at rest. Uploaded files live in private storage that only you — and crew you have invited to that vessel — can access. We use a small number of service providers to run Berthly:

• Supabase — database, sign-in and file storage (EU region)
• Vercel — application hosting
• Resend — sending our emails (EU region)
• Sentry — error monitoring, so we hear about crashes (EU region)
• Cloudflare — domain and network services

Where a provider processes data outside the UK or EU, transfers are protected by recognised safeguards such as the UK Addendum to the EU Standard Contractual Clauses.

Who can see your data

Nobody, unless you share it. If you invite crew to a vessel, they can see that vessel’s record, reminders, documents, equipment, maintenance, costs and trips — that is the point of crew sharing, and you can remove crew at any time. Beyond that, we disclose data only to the providers above, or if the law requires it.

How long we keep it

For as long as your account exists. Deleting your account (Account page → Delete account) permanently removes your profile, vessels, documents and their files, reminders, equipment, maintenance records, costs and trips. Residual copies in encrypted backups are purged in the normal backup cycle, within 30 days.

Your rights

• Access and portability — download everything we hold about you from your Account page (Download my data).
• Erasure — delete your account yourself from the Account page, immediately and permanently.
• Rectification — edit your records in the app at any time.
• You also have the rights to object to or restrict processing, and to withdraw consent where processing is based on it.

To exercise a right you cannot action in the app, email hello@berthly.app. You can complain to the UK Information Commissioner’s Office at ico.org.uk.

Cookies

Berthly uses only essential cookies — the session cookies that keep you signed in. There are no advertising or tracking cookies.

Children

Berthly is not intended for use by anyone under 16.

Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.